org.apache.nifi.security.util

Class TemporaryKeyStoreBuilder

java.lang.Object

org.apache.nifi.security.util.TemporaryKeyStoreBuilder

public class TemporaryKeyStoreBuilder
extends Object

KeyStore Factory for creating temporary files primarily used for testing

Field Summary

Fields

Modifier and Type	Field and Description
private static int	CERTIFICATE_VALID_DAYS
private static String	DEFAULT_HOSTNAME
private static String	DISTINGUISHED_NAME_FORMAT
private static Base64.Encoder	ENCODER
private String	hostname
private static String	KEY_PAIR_ALGORITHM
private static int	KEY_SIZE
private static String	KEY_STORE_EXTENSION
private static String	KEY_STORE_PREFIX
private static KeystoreType	KEYSTORE_TYPE
private static int	RANDOM_BYTES_LENGTH
private static String	SIGNING_ALGORITHM
private String	trustStorePassword
private String	trustStoreType

Constructor Summary

Constructors

Constructor and Description
TemporaryKeyStoreBuilder()

Method Summary

Modifier and Type	Method and Description
TlsConfiguration	build() Build Temporary KeyStore and TrustStore with configured values and set files with File.deleteOnExit()
private X509Certificate	generateCertificate(String hostname, KeyPair keyPair)
private KeyPair	generateKeyPair()
private String	generateSecureRandomPassword()
private KeyStore	getNewKeyStore(String newKeyStoreType)
TemporaryKeyStoreBuilder	hostname(String hostname) Set Hostname used for Certificate Common Name and DNS Subject Alternative Names
private KeyStoreConfiguration	setKeyStore(PrivateKey privateKey, X509Certificate certificate)
private KeyStoreConfiguration	setTrustStore(X509Certificate certificate)
private File	storeKeyStore(KeyStore keyStore, char[] password)
TemporaryKeyStoreBuilder	trustStorePassword(String trustStorePassword) Set Trust Store Password used for protected generated Trust Store file
TemporaryKeyStoreBuilder	trustStoreType(String trustStoreType) Set Trust Store Type used for storing Trust Store files

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

KEY_PAIR_ALGORITHM

private static final String KEY_PAIR_ALGORITHM

See Also:

Constant Field Values

KEY_SIZE

private static final int KEY_SIZE

See Also:

Constant Field Values

RANDOM_BYTES_LENGTH

private static final int RANDOM_BYTES_LENGTH

See Also:

Constant Field Values

ENCODER

private static final Base64.Encoder ENCODER

SIGNING_ALGORITHM

private static final String SIGNING_ALGORITHM

See Also:

Constant Field Values

DISTINGUISHED_NAME_FORMAT

private static final String DISTINGUISHED_NAME_FORMAT

See Also:

Constant Field Values

CERTIFICATE_VALID_DAYS

private static final int CERTIFICATE_VALID_DAYS

See Also:

Constant Field Values

KEYSTORE_TYPE

private static final KeystoreType KEYSTORE_TYPE

KEY_STORE_EXTENSION

private static final String KEY_STORE_EXTENSION

See Also:

Constant Field Values

KEY_STORE_PREFIX

private static final String KEY_STORE_PREFIX

See Also:

Constant Field Values

DEFAULT_HOSTNAME

private static final String DEFAULT_HOSTNAME

See Also:

Constant Field Values

hostname

private String hostname

trustStorePassword

private String trustStorePassword

trustStoreType

private String trustStoreType

Constructor Detail

TemporaryKeyStoreBuilder

public TemporaryKeyStoreBuilder()

Method Detail

hostname

public TemporaryKeyStoreBuilder hostname(String hostname)

Set Hostname used for Certificate Common Name and DNS Subject Alternative Names

Parameters:

hostname - Hostname is required

Returns:

Builder

trustStorePassword

public TemporaryKeyStoreBuilder trustStorePassword(String trustStorePassword)

Set Trust Store Password used for protected generated Trust Store file

Parameters:

trustStorePassword - Trust Store Password is required

Returns:

Builder

trustStoreType

public TemporaryKeyStoreBuilder trustStoreType(String trustStoreType)

Set Trust Store Type used for storing Trust Store files

Parameters:

trustStoreType - Trust Store type must be a supported value for KeyStore.getInstance()

Returns:

Builder

build

public TlsConfiguration build()

Build Temporary KeyStore and TrustStore with configured values and set files with File.deleteOnExit()

Returns:

TLS Configuration with KeyStore and TrustStore properties

setKeyStore

private KeyStoreConfiguration setKeyStore(PrivateKey privateKey,
                                          X509Certificate certificate)

setTrustStore

private KeyStoreConfiguration setTrustStore(X509Certificate certificate)

storeKeyStore

private File storeKeyStore(KeyStore keyStore,
                           char[] password)

getNewKeyStore

private KeyStore getNewKeyStore(String newKeyStoreType)

generateCertificate

private X509Certificate generateCertificate(String hostname,
                                            KeyPair keyPair)

generateKeyPair

private KeyPair generateKeyPair()

generateSecureRandomPassword

private String generateSecureRandomPassword()