com.fr.third.jgroups.auth

类 X509Token

java.lang.Object

com.fr.third.jgroups.auth.AuthToken

com.fr.third.jgroups.auth.X509Token

所有已实现的接口:

Streamable

public class X509Token
extends AuthToken

This is an example of using a preshared token that is encrypted using an X509 certificate for authentication purposes. All members of the group have to have the same string value in the JGroups config.

This example uses certificates contained within a specified keystore. Configuration parameters for this example are shown below:

• keystore_type = JKS(default)/PKCS12 - see http://java.sun.com/j2se/1.4.2/docs/guide/security/CryptoSpec.html#AppA
• keystore_path (required) = the location of the keystore
• keystore_password (required) = the password of the keystore
• cert_alias (required) = the alias of the certification within the keystore
• cert_password = the password of the certification within the keystore
• auth_value (required) = the string to encrypt
• cipher_type = RSA(default)/AES/Blowfish/DES/DESede/PBEWithMD5AndDES/PBEWithHmacSHA1AndDESede/RC2/RC4/RC5 - see http://java.sun.com/j2se/1.4.2/docs/guide/security/jce/JCERefGuide.html#AppA

作者:

Chris Mills

另请参阅:

AuthToken

字段概要

字段

限定符和类型	字段和说明
protected java.lang.String	auth_value
protected java.lang.String	cert_alias
static java.lang.String	CERT_ALIAS
static java.lang.String	CERT_PASSWORD
protected java.lang.String	cipher_type
static java.lang.String	CIPHER_TYPE
static java.lang.String	KEYSTORE_PASSWORD
protected java.lang.String	keystore_path
static java.lang.String	KEYSTORE_PATH
protected java.lang.String	keystore_type
static java.lang.String	KEYSTORE_TYPE
static java.lang.String	TOKEN_ATTR

从类继承的字段 com.fr.third.jgroups.auth.AuthToken

auth, log

构造器概要

构造器

构造器和说明
X509Token()

方法概要

方法

限定符和类型	方法和说明
boolean	authenticate(AuthToken token, Message msg) This method should be implemented to perform the actual authentication of joining members.
X509Token	encryptedToken(byte[] buf) To be used for testing only
java.lang.String	getName() Used to return the full package and class name of the implementation.
void	readFrom(java.io.DataInput in) Read the state of the current object (including superclasses) from instream Note that the input stream must not be closed
void	setCertificate() Used during setup to get the certification from the keystore and encrypt the auth_value with the private key
void	setCertPassword(java.lang.String pwd)
void	setKeyStorePassword(java.lang.String pwd)
int	size() The size of the marshalled AuthToken
void	writeTo(java.io.DataOutput out) Write the entire state of the current object (including superclasses) to outstream.

从类继承的方法 com.fr.third.jgroups.auth.AuthToken

init, setAuth

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

KEYSTORE_TYPE

public static final java.lang.String KEYSTORE_TYPE

另请参阅:

常量字段值

KEYSTORE_PATH

public static final java.lang.String KEYSTORE_PATH

另请参阅:

常量字段值

KEYSTORE_PASSWORD

public static final java.lang.String KEYSTORE_PASSWORD

另请参阅:

常量字段值

CERT_ALIAS

public static final java.lang.String CERT_ALIAS

另请参阅:

常量字段值

CERT_PASSWORD

public static final java.lang.String CERT_PASSWORD

另请参阅:

常量字段值

TOKEN_ATTR

public static final java.lang.String TOKEN_ATTR

另请参阅:

常量字段值

CIPHER_TYPE

public static final java.lang.String CIPHER_TYPE

另请参阅:

常量字段值

keystore_type

protected java.lang.String keystore_type

cert_alias

protected java.lang.String cert_alias

keystore_path

protected java.lang.String keystore_path

auth_value

protected java.lang.String auth_value

cipher_type

protected java.lang.String cipher_type

构造器详细资料

X509Token

public X509Token()

方法详细资料

setCertPassword

public void setCertPassword(java.lang.String pwd)

setKeyStorePassword

public void setKeyStorePassword(java.lang.String pwd)

encryptedToken

public X509Token encryptedToken(byte[] buf)

To be used for testing only

getName

public java.lang.String getName()

从类复制的说明: AuthToken

Used to return the full package and class name of the implementation. This is used by the AUTH protocol to create an instance of the implementation.

指定者:

getName 在类中 AuthToken

返回:

a java.lang.String object of the package and class name

authenticate

public boolean authenticate(AuthToken token,
                   Message msg)

从类复制的说明: AuthToken

This method should be implemented to perform the actual authentication of joining members.

指定者:

authenticate 在类中 AuthToken

参数:

token - the token sent by the joiner

msg - the Message object containing the actual JOIN_REQ

返回:

true if authenticaion passed or false if it failed.

writeTo

public void writeTo(java.io.DataOutput out)
             throws java.lang.Exception

从接口复制的说明: Streamable

Write the entire state of the current object (including superclasses) to outstream. Note that the output stream must not be closed

抛出:

java.lang.Exception

readFrom

public void readFrom(java.io.DataInput in)
              throws java.lang.Exception

从接口复制的说明: Streamable

Read the state of the current object (including superclasses) from instream Note that the input stream must not be closed

抛出:

java.lang.Exception

size

public int size()

从类复制的说明: AuthToken

The size of the marshalled AuthToken

指定者:

size 在类中 AuthToken

setCertificate

public void setCertificate()
                    throws java.security.KeyStoreException,
                           java.io.IOException,
                           java.security.NoSuchAlgorithmException,
                           java.security.cert.CertificateException,
                           javax.crypto.NoSuchPaddingException,
                           java.security.InvalidKeyException,
                           javax.crypto.IllegalBlockSizeException,
                           javax.crypto.BadPaddingException,
                           java.security.UnrecoverableEntryException

Used during setup to get the certification from the keystore and encrypt the auth_value with the private key

抛出:

java.security.KeyStoreException

java.io.IOException

java.security.NoSuchAlgorithmException

java.security.cert.CertificateException

javax.crypto.NoSuchPaddingException

java.security.InvalidKeyException

javax.crypto.IllegalBlockSizeException

javax.crypto.BadPaddingException

java.security.UnrecoverableEntryException