io.vertx.core.net.TrustOptions Java Examples

The following examples show how to use io.vertx.core.net.TrustOptions. You can vote up the ones you like or vote down the ones you don't like, and go to the original project or source file by following the links above each example. You may check out the related API usage on the sidebar.

Example #1

Source File: HttpTlsOptionHelpers.java From orion with Apache License 2.0

6 votes

public static Optional<TrustOptions> createTrustOptions(final String trustMode, final Path knownConnectionFile) {
  switch (trustMode) {
    case "whitelist":
      return Optional.of(VertxTrustOptions.whitelistClients(knownConnectionFile, false));
    case "ca":
      return Optional.empty();
    case "tofu":
    case "insecure-tofa":
      return Optional.of(VertxTrustOptions.trustClientOnFirstAccess(knownConnectionFile, false));
    case "insecure-no-validation":
    case "insecure-record":
      return Optional.of(VertxTrustOptions.recordClientFingerprints(knownConnectionFile, false));
    case "ca-or-tofu":
    case "insecure-ca-or-tofa":
      return Optional.of(VertxTrustOptions.trustClientOnFirstAccess(knownConnectionFile, true));
    case "ca-or-whitelist":
      return Optional.of(VertxTrustOptions.whitelistClients(knownConnectionFile, true));
    case "insecure-ca-or-record":
      return Optional.of(VertxTrustOptions.recordClientFingerprints(knownConnectionFile, true));
    default:
      throw new UnsupportedOperationException("\"" + trustMode + "\" option is not supported");
  }
}

Example #2

Source File: SslCustomizer.java From vertx-spring-boot with Apache License 2.0

5 votes

private TrustOptions trustOptionsAdapter(Ssl ssl) {
    if ("JKS".equalsIgnoreCase(ssl.getTrustStoreType())) {
        return getJksOptions(ssl.getTrustStore(), ssl.getTrustStorePassword());
    } else if ("PKCS12".equalsIgnoreCase(ssl.getTrustStoreType())) {
        return getPfxOptions(ssl.getTrustStore(), ssl.getTrustStorePassword());
    }

    return null;
}

Example #3

Source File: InsecureTrustOptions.java From incubator-tuweni with Apache License 2.0

4 votes

@Override
public TrustOptions clone() {
  return this;
}

Example #4

Source File: TrustManagerFactoryWrapper.java From incubator-tuweni with Apache License 2.0

4 votes

@Override
public TrustOptions clone() {
  return new TrustManagerFactoryWrapper(trustManagerFactory);
}

Example #5

Source File: MSSQLConnectOptions.java From vertx-sql-client with Apache License 2.0

4 votes

@Override
public MSSQLConnectOptions setTrustOptions(TrustOptions options) {
  return (MSSQLConnectOptions) super.setTrustOptions(options);
}

Example #6

Source File: DB2ConnectOptions.java From vertx-sql-client with Apache License 2.0

4 votes

@Override
public DB2ConnectOptions setTrustOptions(TrustOptions options) {
  return (DB2ConnectOptions) super.setTrustOptions(options);
}

Example #7

Source File: InsecureTrustOptions.java From cava with Apache License 2.0

4 votes

@Override
public TrustOptions clone() {
  return this;
}

Example #8

Source File: MySQLConnectionFactory.java From vertx-sql-client with Apache License 2.0

4 votes

public MySQLConnectionFactory(ContextInternal context, MySQLConnectOptions options) {
  NetClientOptions netClientOptions = new NetClientOptions(options);

  this.context = context;
  this.host = options.getHost();
  this.port = options.getPort();
  this.username = options.getUser();
  this.password = options.getPassword();
  this.database = options.getDatabase();
  this.connectionAttributes = options.getProperties() == null ? null : Collections.unmodifiableMap(options.getProperties());
  MySQLCollation collation;
  if (options.getCollation() != null) {
    // override the collation if configured
    collation = MySQLCollation.valueOfName(options.getCollation());
    charsetEncoding = Charset.forName(collation.mappedJavaCharsetName());
  } else {
    String charset = options.getCharset();
    if (charset == null) {
      collation = MySQLCollation.DEFAULT_COLLATION;
    } else {
      collation = MySQLCollation.valueOfName(MySQLCollation.getDefaultCollationFromCharsetName(charset));
    }
    String characterEncoding = options.getCharacterEncoding();
    if (characterEncoding == null) {
      charsetEncoding = Charset.defaultCharset();
    } else {
      charsetEncoding = Charset.forName(options.getCharacterEncoding());
    }
  }
  this.collation = collation;
  this.useAffectedRows = options.isUseAffectedRows();
  this.sslMode = options.getSslMode();

  // server RSA public key
  Buffer serverRsaPublicKey = null;
  if (options.getServerRsaPublicKeyValue() != null) {
    serverRsaPublicKey = options.getServerRsaPublicKeyValue();
  } else {
    if (options.getServerRsaPublicKeyPath() != null) {
      serverRsaPublicKey = context.owner().fileSystem().readFileBlocking(options.getServerRsaPublicKeyPath());
    }
  }
  this.serverRsaPublicKey = serverRsaPublicKey;
  this.initialCapabilitiesFlags = initCapabilitiesFlags();

  // check the SSLMode here
  switch (sslMode) {
    case VERIFY_IDENTITY:
      String hostnameVerificationAlgorithm = netClientOptions.getHostnameVerificationAlgorithm();
      if (hostnameVerificationAlgorithm == null || hostnameVerificationAlgorithm.isEmpty()) {
        throw new IllegalArgumentException("Host verification algorithm must be specified under VERIFY_IDENTITY ssl-mode.");
      }
    case VERIFY_CA:
      TrustOptions trustOptions = netClientOptions.getTrustOptions();
      if (trustOptions == null) {
        throw new IllegalArgumentException("Trust options must be specified under " + sslMode.name() + " ssl-mode.");
      }
      break;
  }

  this.cachePreparedStatements = options.getCachePreparedStatements();
  this.preparedStatementCacheSize = options.getPreparedStatementCacheMaxSize();
  this.preparedStatementCacheSqlFilter = options.getPreparedStatementCacheSqlFilter();

  this.netClient = context.owner().createNetClient(netClientOptions);
}

Example #9

Source File: VertxSubstitutions.java From quarkus with Apache License 2.0

4 votes

@Substitute
static void setTrustOptions(TCPSSLOptions sslOptions, TrustOptions options) {
    throw new RuntimeException("Not Implemented");
}

Example #10

Source File: TrustManagerFactoryWrapper.java From cava with Apache License 2.0

4 votes

@Override
public TrustOptions clone() {
  return new TrustManagerFactoryWrapper(trustManagerFactory);
}

Example #11