org.apache.river.discovery.internal

Class X500Server

java.lang.Object

org.apache.river.discovery.internal.BaseProvider

org.apache.river.discovery.internal.X500Server

All Implemented Interfaces:

DelayedMulticastRequestDecoder, DiscoveryFormatProvider, MulticastAnnouncementEncoder, MulticastRequestDecoder

public class X500Server
extends BaseProvider
implements DelayedMulticastRequestDecoder, MulticastAnnouncementEncoder

Superclass for server-side providers for the net.jini.discovery.x500.* discovery formats.

Field Summary

Fields

Modifier and Type	Field and Description
protected String	keyAlgorithm The key algorithm name (for example, "DSA").
protected String	keyAlgorithmOID The key algorithm OID.
protected int	maxSignatureLength The maximum length of generated signatures, in bytes.
protected String	signatureAlgorithm The signature algorithm (for example, "SHA1withDSA").

Fields inherited from class org.apache.river.discovery.internal.BaseProvider

formatName

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	X500Server(String formatName, String signatureAlgorithm, int maxSignatureLength, String keyAlgorithm, String keyAlgorithmOID) Creates an instance with the given attributes.

Method Summary

Modifier and Type	Method and Description
MulticastRequest	decodeMulticastRequest(ByteBuffer buf, InvocationConstraints constraints, ClientSubjectChecker checker)
MulticastRequest	decodeMulticastRequest(ByteBuffer buf, InvocationConstraints constraints, ClientSubjectChecker checker, boolean delayConstraintCheck)
void	encodeMulticastAnnouncement(MulticastAnnouncement announcement, DatagramBufferFactory bufs, InvocationConstraints constraints)
protected Certificate	getCertificate(X500Principal principal) Returns certificate corresponding to the given principal, or null if no matching certificate can be found.

Methods inherited from class org.apache.river.discovery.internal.BaseProvider

getFormatName

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.river.discovery.DiscoveryFormatProvider

getFormatName

Field Detail

signatureAlgorithm

protected final String signatureAlgorithm

The signature algorithm (for example, "SHA1withDSA").

maxSignatureLength

protected final int maxSignatureLength

The maximum length of generated signatures, in bytes.

keyAlgorithm

protected final String keyAlgorithm

The key algorithm name (for example, "DSA").

keyAlgorithmOID

protected final String keyAlgorithmOID

The key algorithm OID.

Constructor Detail

X500Server

protected X500Server(String formatName,
                     String signatureAlgorithm,
                     int maxSignatureLength,
                     String keyAlgorithm,
                     String keyAlgorithmOID)

Creates an instance with the given attributes.

Method Detail

decodeMulticastRequest

public MulticastRequest decodeMulticastRequest(ByteBuffer buf,
                                               InvocationConstraints constraints,
                                               ClientSubjectChecker checker,
                                               boolean delayConstraintCheck)
                                        throws IOException

Specified by:

decodeMulticastRequest in interface DelayedMulticastRequestDecoder

Throws:

IOException

encodeMulticastAnnouncement

public void encodeMulticastAnnouncement(MulticastAnnouncement announcement,
                                        DatagramBufferFactory bufs,
                                        InvocationConstraints constraints)
                                 throws IOException

Specified by:

encodeMulticastAnnouncement in interface MulticastAnnouncementEncoder

Throws:

IOException

decodeMulticastRequest

public MulticastRequest decodeMulticastRequest(ByteBuffer buf,
                                               InvocationConstraints constraints,
                                               ClientSubjectChecker checker)
                                        throws IOException

Specified by:

decodeMulticastRequest in interface MulticastRequestDecoder

Throws:

IOException

getCertificate

protected Certificate getCertificate(X500Principal principal)
                              throws IOException,
                                     GeneralSecurityException

Returns certificate corresponding to the given principal, or null if no matching certificate can be found. Subclasses can override this method to customize the certificate search mechanism.

The default implementation of this method does the following: the first time this method is called on this instance, a keystore containing trust anchors for the certificate to return is loaded. The location of the file to load the keystore from can be specified (in order of precedence) by the org.apache.river.discovery.x500.trustStore and javax.net.ssl.trustStore system properties; if no location is specified, then the cacerts file in the lib/security subdirectory of the JDK installation directory is used. If specified, the location is treated as a URL. If no protocol is specified in the URL or it is an unknown protocol, then, the location is treated as a file name. Depending on which system property is used to specify the keystore location, the org.apache.river.discovery.x500.trustStoreType and org.apache.river.discovery.x500.trustStorePassword or javax.net.ssl.trustStoreType and javax.net.ssl.trustStorePassword system properties can be used to specify the type of the keystore and the password to use when loading it. If no keystore type is specified, then the type returned by KeyStore.getDefaultType() is used; if no password is specified, then no password is used when loading the keystore. Additionally, if the org.apache.river.discovery.x500.ldapCertStores system property is set, its value is interpreted as a comma-separated list of "host[:port]" elements which are used to obtain references to LDAP-based CertStore instances.

For each call, the default implementation of this method creates a PKIX CertPathBuilder and calls its build method, passing as the argument a PKIXBuilderParameters instance initialized with the aforementioned keystore, CertStores (if any), and a CertSelector based on the provided X.500 principal and the key algorithm OID for this instance. If the build operation succeeds, the resulting certificate is returned.

Throws:

IOException

GeneralSecurityException