Examples with MessageTrustDecider org.apache.cxf.transport.http.MessageTrustDecider used on opensource projects

Example 1 with MessageTrustDecider

use of org.apache.cxf.transport.http.MessageTrustDecider in project cxf by apache.

the class CertConstraintsInterceptor method handleMessage.

public void handleMessage(Message message) throws Fault {
    final CertConstraints certConstraints = (CertConstraints) message.getContextualProperty(CertConstraints.class.getName());
    if (certConstraints == null) {
        return;
    }
    if (isRequestor(message)) {
        try {
            String scheme = (String) message.get("http.scheme");
            if ("https".equals(scheme)) {
                final MessageTrustDecider orig = message.get(MessageTrustDecider.class);
                MessageTrustDecider trust = new HttpsMessageTrustDecider(certConstraints, orig);
                message.put(MessageTrustDecider.class, trust);
            } else {
                throw new UntrustedURLConnectionIOException("TLS is not in use");
            }
        } catch (UntrustedURLConnectionIOException ex) {
            throw new Fault(ex);
        }
    } else {
        try {
            TLSSessionInfo tlsInfo = message.get(TLSSessionInfo.class);
            final Certificate[] certs = tlsInfo.getPeerCertificates();
            if (certs == null || certs.length == 0) {
                throw new UntrustedURLConnectionIOException("No client certificates were found");
            }
            X509Certificate[] x509Certs = (X509Certificate[]) certs;
            if (!certConstraints.matches(x509Certs[0])) {
                throw new UntrustedURLConnectionIOException("The client certificate does not match the defined cert constraints");
            }
        } catch (UntrustedURLConnectionIOException ex) {
            throw new Fault(ex);
        }
    }
}

Example 2 with MessageTrustDecider

use of org.apache.cxf.transport.http.MessageTrustDecider in project ddf by codice.

the class OutgoingSubjectRetrievalInterceptor method handleMessage.

@Override
public void handleMessage(Message message) throws Fault {
    if (this.isRequestor(message) && "https".equals(message.get("http.scheme"))) {
        MessageTrustDecider originalTrustDecider = message.get(MessageTrustDecider.class);
        ReceiverTrustDecider receiverTrustDecider = new ReceiverTrustDecider(originalTrustDecider);
        message.put(MessageTrustDecider.class, receiverTrustDecider);
        message.getInterceptorChain().add(ending);
    }
}