dk2k commented on code in PR #9939:
URL: https://github.com/apache/camel/pull/9939#discussion_r1178067125
##########
components/camel-as2/camel-as2-component/src/test/java/org/apache/camel/component/as2/MendelsonCertLoader.java:
##########
@@ -0,0 +1,183 @@
+package org.apache.camel.component.as2;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.security.KeyManagementException;
+import java.security.KeyStore;
+import java.security.KeyStoreException;
+import java.security.NoSuchAlgorithmException;
+import java.security.PrivateKey;
+import java.security.UnrecoverableKeyException;
+import java.security.cert.Certificate;
+import java.security.cert.CertificateException;
+import java.security.cert.CertificateFactory;
+import java.security.spec.InvalidKeySpecException;
+import java.util.ArrayList;
+import java.util.Base64;
+import java.util.List;
+
+import javax.net.ssl.SSLContext;
+
+import org.apache.commons.io.IOUtils;
+import org.apache.http.conn.ssl.TrustAllStrategy;
+import org.apache.http.ssl.SSLContexts;
+
+/**
+ * That's a utility class for preparing Mendelson-specific certificate chain,
private key, ssl context
+ */
+public class MendelsonCertLoader {
+
+ private static final String MENDELSON_CERT = "mendelson/key4.cer";
+ private static final String MENDELSON_PRIVATE_KEY = "mendelson/key3.pfx";
+
+ private final List<Certificate> chainAsList = new ArrayList<>();
+
+ private PrivateKey privateKey;
+ private SSLContext sslContext;
+
+ public void setupSslContext() {
+ try {
+ InputStream mendelsonPrivateKeyAsStream =
getClass().getClassLoader().getResourceAsStream(MENDELSON_PRIVATE_KEY);
+ KeyStore keyStore = getKeyStore(mendelsonPrivateKeyAsStream);
+ sslContext = SSLContexts.custom().setKeyStoreType("PKCS12")
+ .loadTrustMaterial(keyStore, new TrustAllStrategy())
+ .build();
+ } catch (KeyStoreException e) {
+ e.printStackTrace();
+ } catch (KeyManagementException e) {
+ e.printStackTrace();
+ } catch (IOException e) {
+ e.printStackTrace();
+ } catch (NoSuchAlgorithmException e) {
+ e.printStackTrace();
+ }
+
+ if (sslContext == null) {
+ throw new IllegalStateException("failed to configure SSL context");
+ }
+ }
+
+ private KeyStore getKeyStore(InputStream inputStream) throws IOException,
NoSuchAlgorithmException {
+ String password = "test";
+ KeyStore ks;
+ try {
+ ks = KeyStore.getInstance("PKCS12");
+ ks.load(inputStream, password.toCharArray());
+ return ks;
+ } catch (KeyStoreException e) {
+ e.printStackTrace();
+ } catch (CertificateException e) {
+ e.printStackTrace();
+ }
+ throw new IllegalStateException("about to return null");
+ }
+
+ public void setupCertificateChain() {
+
+ InputStream mendelsonCertAsStream =
getClass().getClassLoader().getResourceAsStream(MENDELSON_CERT);
+ if (mendelsonCertAsStream == null) {
+ //LOG.error("Couldn't read out client certificate as stream.");
+ throw new IllegalStateException("Couldn't read out certificate as
stream.");
+ }
+
+ InputStream mendelsonPrivateKeyAsStream =
getClass().getClassLoader().getResourceAsStream(MENDELSON_PRIVATE_KEY);
+ if (mendelsonPrivateKeyAsStream == null) {
+ //LOG.error("Couldn't read out private key as stream.");
+ throw new IllegalStateException("Couldn't read out key storage as
stream.");
+ }
+
+ try {
+ Certificate mendelsonCert =
getCertificateFromStream(mendelsonCertAsStream);
+ chainAsList.add(mendelsonCert);
+
+ //private key
+ privateKey =
getPrivateKeyFromPKCSStream(mendelsonPrivateKeyAsStream);
+
+ } catch (IOException e) {
+ String errMsg = "Error while trying to load certificate to the
keyload. IO error when reading a byte array. " + e;
+ System.out.println(errMsg);
+ } catch (NoSuchAlgorithmException e) {
+ String errMsg = "Error while trying to load certificate to the
keyload. Requested algorithm isn't found. " + e;
+ System.out.println(errMsg);
+ } catch (CertificateException e) {
+ String errMsg = "Error while trying to load certificate to the
keyload. There is a certificate problem. " + e;
+ System.out.println(errMsg);
+ } catch (InvalidKeySpecException e) {
+ String errMsg = "Can not init private key store " + e;
+ System.out.println(errMsg);
+ }
+ }
+
+ public SSLContext getSslContext() {
+ return sslContext;
+ }
+
+ public Certificate[] getChain() {
+ if (chainAsList.size() > 0) {
+ Certificate[] arrayCert = new Certificate[chainAsList.size()];
+
+ for (int i = 0; i < chainAsList.size(); i++) {
+ arrayCert[i] = chainAsList.get(i);
+ }
+ return arrayCert;
+ } else {
+ return null;
+ }
+ }
+
+ public PrivateKey getPrivateKey() {
+ return privateKey;
+ }
+
+ private List<Certificate> getCertificatesFromStream(InputStream
inputStream) throws IOException, CertificateException {
+ CertificateFactory certificateFactory =
CertificateFactory.getInstance("X.509");
+ return (List<Certificate>)
certificateFactory.generateCertificates(inputStream);
+ }
+
+ private Certificate getCertificateFromStream(InputStream inputStream)
throws IOException, CertificateException {
+ CertificateFactory certificateFactory =
CertificateFactory.getInstance("X.509");
+ return certificateFactory.generateCertificate(inputStream);
+ }
+
+
//https://stackoverflow.com/questions/18644286/creating-privatekey-object-from-pkcs12
+ private PrivateKey getPrivateKeyFromPKCSStream(InputStream inputStream)
+ throws IOException, NoSuchAlgorithmException,
InvalidKeySpecException {
+ String password = "test";
+ KeyStore ks = null;
+ try {
+ ks = KeyStore.getInstance("PKCS12");
+ } catch (KeyStoreException e) {
+ e.printStackTrace();
+ }
+ try {
+ ks.load(inputStream, password.toCharArray());
+ } catch (CertificateException e) {
+ e.printStackTrace();
+ } catch (Exception e) {
+ e.printStackTrace();
+ }
+ try {
+ return (PrivateKey) ks.getKey(
+ ks.aliases().nextElement(),
+ password.toCharArray());
+ } catch (KeyStoreException e) {
+ e.printStackTrace();
+ } catch (UnrecoverableKeyException e) {
+ e.printStackTrace();
+ }
Review Comment:
fixed
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscr...@camel.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
