org.apache.hadoop.hbase.io.crypto

类 KeyStoreKeyProvider

java.lang.Object

org.apache.hadoop.hbase.io.crypto.KeyStoreKeyProvider

所有已实现的接口:

KeyProvider

@InterfaceAudience.Public
public class KeyStoreKeyProvider
extends Object
implements KeyProvider

A basic KeyProvider that can resolve keys from a protected KeyStore file on the local filesystem. It is configured with a URI passed in as a String to init(). The URI should have the form:

    scheme://path?option1=value1&option2=value2

scheme can be either "jks" or "jceks", specifying the file based providers shipped with every JRE. The latter is the certificate store for the SunJCE cryptography extension, or PKCS #12, and is capable of storing SecretKeys.

path is the location of the keystore in the filesystem namespace.

Options can be specified as query parameters.

If the store was created with a password, the password can be specified using the option 'password'.

For example:

    jceks:///var/tmp/example.ks?password=foobar

It is assumed that all keys in the store are protected with the same password.

Alternatively, a properties file can be specified containing passwords for keys in the keystore.

    jceks:///var/tmp/example.ks?passwordFile=/var/tmp/example.pw

Subclasses for supporting KeyStores that are not file based can extend the protected methods of this class to specify the appropriate LoadStoreParameters.

字段概要

字段

限定符和类型	字段和说明
protected char[]	password
protected Properties	passwordFile
protected KeyStore	store

从接口继承的字段 org.apache.hadoop.hbase.io.crypto.KeyProvider

PASSWORD, PASSWORDFILE

构造器概要

构造器

构造器和说明
KeyStoreKeyProvider()

方法概要

限定符和类型	方法和说明
protected char[]	getAliasPassword(String alias)
Key	getKey(String alias) Retrieve the key for a given key aliase
Key[]	getKeys(String[] aliases) Retrieve keys for a given set of key aliases
void	init(String params) Initialize the key provider
protected void	load(URI uri)
protected void	processParameter(String name, String value)
protected void	processParameters(URI uri)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

store

protected KeyStore store

password

protected char[] password

passwordFile

protected Properties passwordFile

构造器详细资料

KeyStoreKeyProvider

public KeyStoreKeyProvider()

方法详细资料

processParameter

protected void processParameter(String name,
                                String value)
                         throws IOException

抛出:

IOException

processParameters

protected void processParameters(URI uri)
                          throws IOException

抛出:

IOException

load

protected void load(URI uri)
             throws IOException

抛出:

IOException

init

public void init(String params)

从接口复制的说明: KeyProvider

Initialize the key provider

指定者:

init 在接口中 KeyProvider

getAliasPassword

protected char[] getAliasPassword(String alias)

getKey

public Key getKey(String alias)

从接口复制的说明: KeyProvider

Retrieve the key for a given key aliase

指定者:

getKey 在接口中 KeyProvider

返回:

the keys corresponding to the supplied alias, or null if a key is not found

getKeys

public Key[] getKeys(String[] aliases)

从接口复制的说明: KeyProvider

Retrieve keys for a given set of key aliases

指定者:

getKeys 在接口中 KeyProvider

参数:

aliases - an array of aliases

返回:

an array of keys corresponding to the supplied aliases, an entry will be null if a key is not found