Examples with ReflectionInvokationHandler org.apache.cxf.common.util.ReflectionInvokationHandler used on opensource projects

Example 1 with ReflectionInvokationHandler

use of org.apache.cxf.common.util.ReflectionInvokationHandler in project cxf by apache.

the class HttpsURLConnectionFactory method decorateWithTLS.

/**
 * This method assigns the various TLS parameters on the HttpsURLConnection
 * from the TLS Client Parameters. Connection parameter is of supertype HttpURLConnection,
 * which allows internal cast to potentially divergent subtype (https) implementations.
 */
protected synchronized void decorateWithTLS(TLSClientParameters tlsClientParameters, HttpURLConnection connection) throws GeneralSecurityException {
    int hash = tlsClientParameters.hashCode();
    if (hash != lastTlsHash) {
        lastTlsHash = hash;
        socketFactory = null;
    }
    // tlsClientParameters.sslSocketFactory to allow runtime configuration change
    if (tlsClientParameters.isUseHttpsURLConnectionDefaultSslSocketFactory()) {
        socketFactory = HttpsURLConnection.getDefaultSSLSocketFactory();
    } else if (tlsClientParameters.getSSLSocketFactory() != null) {
        // see if an SSLSocketFactory was set. This allows easy interop
        // with not-yet-commons-ssl.jar, or even just people who like doing their
        // own JSSE.
        socketFactory = tlsClientParameters.getSSLSocketFactory();
    } else if (socketFactory == null) {
        final SSLContext ctx;
        if (tlsClientParameters.getSslContext() != null) {
            // Use the SSLContext which was set
            ctx = tlsClientParameters.getSslContext();
        } else {
            // Create socketfactory with tlsClientParameters's Trust Managers, Key Managers, etc
            ctx = org.apache.cxf.transport.https.SSLUtils.getSSLContext(tlsClientParameters);
        }
        String[] cipherSuites = SSLUtils.getCiphersuitesToInclude(tlsClientParameters.getCipherSuites(), tlsClientParameters.getCipherSuitesFilter(), ctx.getSocketFactory().getDefaultCipherSuites(), SSLUtils.getSupportedCipherSuites(ctx), LOG);
        // The SSLSocketFactoryWrapper enables certain cipher suites from the policy.
        String protocol = tlsClientParameters.getSecureSocketProtocol() != null ? tlsClientParameters.getSecureSocketProtocol() : ctx.getProtocol();
        socketFactory = new SSLSocketFactoryWrapper(ctx.getSocketFactory(), cipherSuites, protocol);
        // recalc the hashcode since some of the above MAY have changed the tlsClientParameters
        lastTlsHash = tlsClientParameters.hashCode();
    } else {
    // ssl socket factory already initialized, reuse it to benefit of keep alive
    }
    HostnameVerifier verifier = org.apache.cxf.transport.https.SSLUtils.getHostnameVerifier(tlsClientParameters);
    if (connection instanceof HttpsURLConnection) {
        // handle the expected case (javax.net.ssl)
        HttpsURLConnection conn = (HttpsURLConnection) connection;
        conn.setHostnameVerifier(verifier);
        AccessController.doPrivileged(new PrivilegedAction<Void>() {

            @Override
            public Void run() {
                conn.setSSLSocketFactory(socketFactory);
                return null;
            }
        });
    } else {
        // that are similar to the Sun cases
        try {
            Method method = connection.getClass().getMethod("getHostnameVerifier");
            InvocationHandler handler = new ReflectionInvokationHandler(verifier) {

                public Object invoke(Object proxy, Method method, Object[] args) throws Throwable {
                    try {
                        return super.invoke(proxy, method, args);
                    } catch (Exception ex) {
                        return false;
                    }
                }
            };
            Object proxy = java.lang.reflect.Proxy.newProxyInstance(this.getClass().getClassLoader(), new Class[] { method.getReturnType() }, handler);
            method = connection.getClass().getMethod("setHostnameVerifier", method.getReturnType());
            method.invoke(connection, proxy);
        } catch (Exception ex) {
        // Ignore this one
        }
        try {
            Method getSSLSocketFactory = connection.getClass().getMethod("getSSLSocketFactory");
            Method setSSLSocketFactory = connection.getClass().getMethod("setSSLSocketFactory", getSSLSocketFactory.getReturnType());
            if (getSSLSocketFactory.getReturnType().isInstance(socketFactory)) {
                setSSLSocketFactory.invoke(connection, socketFactory);
            } else {
                // need to see if we can create one - mostly the weblogic case.   The
                // weblogic SSLSocketFactory has a protected constructor that can take
                // a JSSE SSLSocketFactory so we'll try and use that
                Constructor<?> c = getSSLSocketFactory.getReturnType().getDeclaredConstructor(SSLSocketFactory.class);
                ReflectionUtil.setAccessible(c);
                setSSLSocketFactory.invoke(connection, c.newInstance(socketFactory));
            }
        } catch (Exception ex) {
            if (connection.getClass().getName().contains("weblogic")) {
                if (!weblogicWarned) {
                    weblogicWarned = true;
                    LOG.warning("Could not configure SSLSocketFactory on Weblogic.  " + " Use the Weblogic control panel to configure the SSL settings.");
                }
                return;
            }
            // if we cannot set the SSLSocketFactory, we're in serious trouble.
            throw new IllegalArgumentException("Error decorating connection class " + connection.getClass().getName(), ex);
        }
    }
}

Example 2 with ReflectionInvokationHandler

use of org.apache.cxf.common.util.ReflectionInvokationHandler in project tomee by apache.

the class HttpsURLConnectionFactory method decorateWithTLS.

/**
 * This method assigns the various TLS parameters on the HttpsURLConnection
 * from the TLS Client Parameters. Connection parameter is of supertype HttpURLConnection,
 * which allows internal cast to potentially divergent subtype (https) implementations.
 */
protected synchronized void decorateWithTLS(TLSClientParameters tlsClientParameters, HttpURLConnection connection) throws GeneralSecurityException {
    int hash = tlsClientParameters.hashCode();
    if (hash != lastTlsHash) {
        lastTlsHash = hash;
        socketFactory = null;
    }
    // tlsClientParameters.sslSocketFactory to allow runtime configuration change
    if (tlsClientParameters.isUseHttpsURLConnectionDefaultSslSocketFactory()) {
        socketFactory = HttpsURLConnection.getDefaultSSLSocketFactory();
    } else if (tlsClientParameters.getSSLSocketFactory() != null) {
        // see if an SSLSocketFactory was set. This allows easy interop
        // with not-yet-commons-ssl.jar, or even just people who like doing their
        // own JSSE.
        socketFactory = tlsClientParameters.getSSLSocketFactory();
    } else if (socketFactory == null) {
        final SSLContext ctx;
        if (tlsClientParameters.getSslContext() != null) {
            // Use the SSLContext which was set
            ctx = tlsClientParameters.getSslContext();
        } else {
            // Create socketfactory with tlsClientParameters's Trust Managers, Key Managers, etc
            ctx = org.apache.cxf.transport.https.SSLUtils.getSSLContext(tlsClientParameters);
        }
        String[] cipherSuites = SSLUtils.getCiphersuitesToInclude(tlsClientParameters.getCipherSuites(), tlsClientParameters.getCipherSuitesFilter(), ctx.getSocketFactory().getDefaultCipherSuites(), SSLUtils.getSupportedCipherSuites(ctx), LOG);
        // The SSLSocketFactoryWrapper enables certain cipher suites from the policy.
        String protocol = tlsClientParameters.getSecureSocketProtocol() != null ? tlsClientParameters.getSecureSocketProtocol() : ctx.getProtocol();
        socketFactory = new SSLSocketFactoryWrapper(ctx.getSocketFactory(), cipherSuites, protocol);
        // recalc the hashcode since some of the above MAY have changed the tlsClientParameters
        lastTlsHash = tlsClientParameters.hashCode();
    } else {
    // ssl socket factory already initialized, reuse it to benefit of keep alive
    }
    HostnameVerifier verifier = org.apache.cxf.transport.https.SSLUtils.getHostnameVerifier(tlsClientParameters);
    if (connection instanceof HttpsURLConnection) {
        // handle the expected case (javax.net.ssl)
        HttpsURLConnection conn = (HttpsURLConnection) connection;
        conn.setHostnameVerifier(verifier);
        AccessController.doPrivileged(new PrivilegedAction<Void>() {

            @Override
            public Void run() {
                conn.setSSLSocketFactory(socketFactory);
                return null;
            }
        });
    } else {
        // that are similar to the Sun cases
        try {
            Method method = connection.getClass().getMethod("getHostnameVerifier");
            InvocationHandler handler = new ReflectionInvokationHandler(verifier) {

                public Object invoke(Object proxy, Method method, Object[] args) throws Throwable {
                    try {
                        return super.invoke(proxy, method, args);
                    } catch (Exception ex) {
                        return false;
                    }
                }
            };
            Object proxy = java.lang.reflect.Proxy.newProxyInstance(this.getClass().getClassLoader(), new Class[] { method.getReturnType() }, handler);
            method = connection.getClass().getMethod("setHostnameVerifier", method.getReturnType());
            method.invoke(connection, proxy);
        } catch (Exception ex) {
        // Ignore this one
        }
        try {
            Method getSSLSocketFactory = connection.getClass().getMethod("getSSLSocketFactory");
            Method setSSLSocketFactory = connection.getClass().getMethod("setSSLSocketFactory", getSSLSocketFactory.getReturnType());
            if (getSSLSocketFactory.getReturnType().isInstance(socketFactory)) {
                setSSLSocketFactory.invoke(connection, socketFactory);
            } else {
                // need to see if we can create one - mostly the weblogic case.   The
                // weblogic SSLSocketFactory has a protected constructor that can take
                // a JSSE SSLSocketFactory so we'll try and use that
                Constructor<?> c = getSSLSocketFactory.getReturnType().getDeclaredConstructor(SSLSocketFactory.class);
                ReflectionUtil.setAccessible(c);
                setSSLSocketFactory.invoke(connection, c.newInstance(socketFactory));
            }
        } catch (Exception ex) {
            if (connection.getClass().getName().contains("weblogic")) {
                if (!weblogicWarned) {
                    weblogicWarned = true;
                    LOG.warning("Could not configure SSLSocketFactory on Weblogic.  " + " Use the Weblogic control panel to configure the SSL settings.");
                }
                return;
            }
            // if we cannot set the SSLSocketFactory, we're in serious trouble.
            throw new IllegalArgumentException("Error decorating connection class " + connection.getClass().getName(), ex);
        }
    }
}

Example 3 with ReflectionInvokationHandler

use of org.apache.cxf.common.util.ReflectionInvokationHandler in project cxf by apache.

the class DynamicClientFactory method hackInNewInternalizationLogic.

private void hackInNewInternalizationLogic(SchemaCompiler schemaCompiler, final OASISCatalogManager catalog) {
    Object o = ((ReflectionInvokationHandler) Proxy.getInvocationHandler(schemaCompiler)).getTarget();
    try {
        Field f = o.getClass().getDeclaredField("forest");
        Object forest = ReflectionUtil.setAccessible(f).get(o);
        // Set the error handler
        for (Method m : forest.getClass().getMethods()) {
            if ("setErrorHandler".equals(m.getName())) {
                m.invoke(forest, o);
            }
        }
    } catch (Throwable ex) {
        // ignorable, just won't get all the errors
        LOG.info("Unable to set error handler on " + o.getClass());
    }
    if (catalog.hasCatalogs()) {
        try {
            Field f = o.getClass().getDeclaredField("forest");
            Object forest = ReflectionUtil.setAccessible(f).get(o);
            f = forest.getClass().getDeclaredField("logic");
            Object xil = ReflectionUtil.setAccessible(f).get(forest);
            if (!xil.getClass().getName().contains(".internal.")) {
                xil = createWrapperLogic(xil, catalog);
                if (xil != null) {
                    ReflectionUtil.setAccessible(f).set(forest, xil);
                }
            } else {
                LOG.warning("Cannot set a catalog resolver into the JDK internal XJC compiler.  Catalog" + " resolved schemas may not work correctly");
            }
        } catch (Throwable ex) {
            LOG.log(Level.WARNING, "Cannot set a catalog resolver into the XJC compiler.  Catalog" + " resolved schemas may not work correctly", ex);
        }
    }
}