Package de.hybris.platform.kymaintegrationservices.services.impl

Class DefaultCertificateService

java.lang.Object

de.hybris.platform.kymaintegrationservices.services.impl.DefaultCertificateService

All Implemented Interfaces:

CertificateService

public class DefaultCertificateService
extends java.lang.Object
implements CertificateService

Kyma specific implementation of CertificateService.

Field Summary

Fields

Modifier and Type	Field	Description
static java.lang.String	CERTIFICATE_FOOTER
static java.lang.String	CERTIFICATE_HEADER
static java.lang.String	CERTIFICATE_KEY_ALGORITHM
static java.lang.String	CERTIFICATE_KEY_SUBJECT

Constructor Summary

Constructors

Constructor	Description
DefaultCertificateService()

Method Summary

Modifier and Type	Method	Description
protected java.lang.String	encodeToBase64(byte[] toBeEncoded)
protected CertificateRequestPayload	generateCertificateRequest(java.security.KeyPair keyPair, java.lang.String keySubject)
protected byte[]	generateCSR(java.lang.String rdnAttributes, java.security.KeyPair keypair)
protected java.security.KeyPair	generateKeyPair(java.lang.String keyAlgorithm)
protected java.lang.String	getCertificate(java.security.KeyPair keyPair, java.lang.String keySubject, java.lang.String csrUrlString, org.springframework.web.client.RestTemplate template)
protected KymaCertificateCreation	getCertificateCreationData(java.lang.String getinfoUrlString, org.springframework.web.client.RestTemplate template)
protected ConsumedDestinationModel	getConsumedDestination(java.lang.String consumedDestinationId, ConsumedCertificateCredentialModel certificationCredential)
protected DestinationService<AbstractDestinationModel>	getDestinationService()
protected DestinationTargetService	getDestinationTargetService()
protected ModelService	getModelService()
protected org.springframework.web.client.RestTemplate	getRestTemplate()
protected RestTemplateWrapper	getRestTemplateWrapper()
protected TaskService	getTaskService()
protected java.security.cert.X509Certificate	getX509Certificate(ConsumedCertificateCredentialModel certificationCredential, java.lang.String csrUrl, KymaCertificateCreation keyData)
ConsumedCertificateCredentialModel	renewCertificate(ConsumedCertificateCredentialModel certificationCredential)	Renew an existing certificate before it expires, at the moment we don't have real implementation of this method.
ConsumedCertificateCredentialModel	retrieveCertificate(java.net.URI certificateUrl, ConsumedCertificateCredentialModel certificationCredential)	Default kyma implementation
protected void	scheduleCertificateRenewalTask(ConsumedCertificateCredentialModel consumedCertificateCredential, java.security.cert.X509Certificate cert)
void	setDestinationService(DestinationService<AbstractDestinationModel> destinationService)
void	setDestinationTargetService(DestinationTargetService destinationTargetService)
void	setModelService(ModelService modelService)
void	setRestTemplate(org.springframework.web.client.RestTemplate restTemplate)
void	setRestTemplateWrapper(RestTemplateWrapper restTemplateWrapper)
void	setTaskService(TaskService taskService)
protected void	updateAllConsumedDestinationCredentials(ConsumedCertificateCredentialModel certificationCredential)
protected ConsumedCertificateCredentialModel	updateAllConsumedDestinationCredentialsAndGetInfoUrl(ConsumedCertificateCredentialModel certificationCredential, KymaApiData apiData)
protected void	updateConsumedDestinationCredentials(java.lang.String consumedDestinationId, ConsumedCertificateCredentialModel certificationCredential)
protected void	updateConsumedDestinationUrl(java.lang.String consumedDestinationId, java.lang.String url, ConsumedCertificateCredentialModel certificationCredential)
protected java.security.cert.X509Certificate	verifyCredential(java.lang.String certificateText, java.security.KeyPair keyPair, KymaCertificateCreation keyData)
protected void	verifyKeyAlgorithm(java.security.cert.X509Certificate cert, KymaCertificateCreation keyData)
protected void	verifyKeyPairs(java.security.cert.X509Certificate cert, java.security.KeyPair keyPair)
protected void	verifySignatureAlgorithm(java.security.cert.X509Certificate cert)
protected void	verifySubject(java.security.cert.X509Certificate cert, KymaCertificateCreation keyData)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CERTIFICATE_HEADER

public static final java.lang.String CERTIFICATE_HEADER

See Also:

Constant Field Values

CERTIFICATE_FOOTER

public static final java.lang.String CERTIFICATE_FOOTER

See Also:

Constant Field Values

CERTIFICATE_KEY_ALGORITHM

public static final java.lang.String CERTIFICATE_KEY_ALGORITHM

See Also:

Constant Field Values

CERTIFICATE_KEY_SUBJECT

public static final java.lang.String CERTIFICATE_KEY_SUBJECT

See Also:

Constant Field Values

Constructor Detail

DefaultCertificateService

public DefaultCertificateService()

Method Detail

retrieveCertificate

public ConsumedCertificateCredentialModel retrieveCertificate(java.net.URI certificateUrl,
                                                              ConsumedCertificateCredentialModel certificationCredential)
                                                       throws CredentialException

Default kyma implementation

Specified by:

retrieveCertificate in interface CertificateService

Parameters:

certificateUrl - Url to retrieve client certificate.

certificationCredential - Credential to be updated.

Returns:

updatedModel

Throws:

CredentialException - in case when failed to generate PrivateKey, CSR, Certificate.

See Also:

CertificateService.retrieveCertificate(URI, ConsumedCertificateCredentialModel)

renewCertificate

public ConsumedCertificateCredentialModel renewCertificate(ConsumedCertificateCredentialModel certificationCredential)
                                                    throws CredentialException

Description copied from interface: CertificateService

Renew an existing certificate before it expires, at the moment we don't have real implementation of this method.

Specified by:

renewCertificate in interface CertificateService

Parameters:

certificationCredential - ConsumedCertificateCredentialModel which contains the old certificate

Returns:

updated Certificate updated ConsumedCertificateCredentialModel which contains the new certificate

Throws:

CredentialException - if the renewal of the certificate fails

getX509Certificate

protected java.security.cert.X509Certificate getX509Certificate(ConsumedCertificateCredentialModel certificationCredential,
                                                                java.lang.String csrUrl,
                                                                KymaCertificateCreation keyData)
                                                         throws CredentialException

Throws:

CredentialException

scheduleCertificateRenewalTask

protected void scheduleCertificateRenewalTask(ConsumedCertificateCredentialModel consumedCertificateCredential,
                                              java.security.cert.X509Certificate cert)

verifyCredential

protected java.security.cert.X509Certificate verifyCredential(java.lang.String certificateText,
                                                              java.security.KeyPair keyPair,
                                                              KymaCertificateCreation keyData)
                                                       throws CredentialException

Throws:

CredentialException

verifySubject

protected void verifySubject(java.security.cert.X509Certificate cert,
                             KymaCertificateCreation keyData)
                      throws java.security.cert.CertificateException

Throws:

java.security.cert.CertificateException

verifySignatureAlgorithm

protected void verifySignatureAlgorithm(java.security.cert.X509Certificate cert)
                                 throws java.security.cert.CertificateException

Throws:

java.security.cert.CertificateException

verifyKeyAlgorithm

protected void verifyKeyAlgorithm(java.security.cert.X509Certificate cert,
                                  KymaCertificateCreation keyData)
                           throws java.security.cert.CertificateException

Throws:

java.security.cert.CertificateException

verifyKeyPairs

protected void verifyKeyPairs(java.security.cert.X509Certificate cert,
                              java.security.KeyPair keyPair)
                       throws java.security.NoSuchAlgorithmException,
                              java.security.InvalidKeyException,
                              java.security.SignatureException,
                              java.security.cert.CertificateException

Throws:

java.security.NoSuchAlgorithmException

java.security.InvalidKeyException

java.security.SignatureException

java.security.cert.CertificateException

updateAllConsumedDestinationCredentialsAndGetInfoUrl

protected ConsumedCertificateCredentialModel updateAllConsumedDestinationCredentialsAndGetInfoUrl(ConsumedCertificateCredentialModel certificationCredential,
                                                                                                  KymaApiData apiData)
                                                                                           throws CredentialException

Throws:

CredentialException

updateAllConsumedDestinationCredentials

protected void updateAllConsumedDestinationCredentials(ConsumedCertificateCredentialModel certificationCredential)
                                                throws CredentialException

Throws:

CredentialException

updateConsumedDestinationCredentials

protected void updateConsumedDestinationCredentials(java.lang.String consumedDestinationId,
                                                    ConsumedCertificateCredentialModel certificationCredential)
                                             throws CredentialException

Throws:

CredentialException

updateConsumedDestinationUrl

protected void updateConsumedDestinationUrl(java.lang.String consumedDestinationId,
                                            java.lang.String url,
                                            ConsumedCertificateCredentialModel certificationCredential)
                                     throws CredentialException

Throws:

CredentialException

getConsumedDestination

protected ConsumedDestinationModel getConsumedDestination(java.lang.String consumedDestinationId,
                                                          ConsumedCertificateCredentialModel certificationCredential)
                                                   throws CredentialException

Throws:

CredentialException

encodeToBase64

protected java.lang.String encodeToBase64(byte[] toBeEncoded)

getCertificateCreationData

protected KymaCertificateCreation getCertificateCreationData(java.lang.String getinfoUrlString,
                                                             org.springframework.web.client.RestTemplate template)
                                                      throws CredentialException

Throws:

CredentialException

getCertificate

protected java.lang.String getCertificate(java.security.KeyPair keyPair,
                                          java.lang.String keySubject,
                                          java.lang.String csrUrlString,
                                          org.springframework.web.client.RestTemplate template)
                                   throws CredentialException

Throws:

CredentialException

generateCertificateRequest

protected CertificateRequestPayload generateCertificateRequest(java.security.KeyPair keyPair,
                                                               java.lang.String keySubject)
                                                        throws CredentialException

Throws:

CredentialException

generateCSR

protected byte[] generateCSR(java.lang.String rdnAttributes,
                             java.security.KeyPair keypair)
                      throws CredentialException

Throws:

CredentialException

generateKeyPair

protected java.security.KeyPair generateKeyPair(java.lang.String keyAlgorithm)
                                         throws CredentialException

Throws:

CredentialException

getModelService

protected ModelService getModelService()

setModelService

public void setModelService(ModelService modelService)

getTaskService

protected TaskService getTaskService()

setTaskService

public void setTaskService(TaskService taskService)

getDestinationService

protected DestinationService<AbstractDestinationModel> getDestinationService()

setDestinationService

public void setDestinationService(DestinationService<AbstractDestinationModel> destinationService)

getRestTemplate

protected org.springframework.web.client.RestTemplate getRestTemplate()

setRestTemplate

public void setRestTemplate(org.springframework.web.client.RestTemplate restTemplate)

getDestinationTargetService

protected DestinationTargetService getDestinationTargetService()

setDestinationTargetService

public void setDestinationTargetService(DestinationTargetService destinationTargetService)

getRestTemplateWrapper

protected RestTemplateWrapper getRestTemplateWrapper()

setRestTemplateWrapper

public void setRestTemplateWrapper(RestTemplateWrapper restTemplateWrapper)