Examples with SslSelectChannelConnector org.eclipse.jetty.server.ssl.SslSelectChannelConnector used on opensource projects

Example 1 with SslSelectChannelConnector

use of org.eclipse.jetty.server.ssl.SslSelectChannelConnector in project cdap by caskdata.

the class ExternalAuthenticationServer method startUp.

@Override
protected void startUp() throws Exception {
    server = new Server();
    InetAddress bindAddress = InetAddress.getByName(cConfiguration.get(Constants.Security.AUTH_SERVER_BIND_ADDRESS));
    QueuedThreadPool threadPool = new QueuedThreadPool();
    threadPool.setMaxThreads(maxThreads);
    server.setThreadPool(threadPool);
    initHandlers();
    ServletContextHandler context = new ServletContextHandler();
    context.setServer(server);
    context.addServlet(HttpServletDispatcher.class, "/");
    context.addEventListener(new AuthenticationGuiceServletContextListener(handlers));
    context.setSecurityHandler(authenticationHandler);
    // Status endpoint should be handled without the authentication
    ContextHandler statusContext = new ContextHandler();
    statusContext.setContextPath(Constants.EndPoints.STATUS);
    statusContext.setServer(server);
    statusContext.setHandler(new StatusRequestHandler());
    if (cConfiguration.getBoolean(Constants.Security.SSL.EXTERNAL_ENABLED, false)) {
        SslContextFactory sslContextFactory = new SslContextFactory();
        String keyStorePath = sConfiguration.get(Constants.Security.AuthenticationServer.SSL_KEYSTORE_PATH);
        String keyStorePassword = sConfiguration.get(Constants.Security.AuthenticationServer.SSL_KEYSTORE_PASSWORD);
        String keyStoreType = sConfiguration.get(Constants.Security.AuthenticationServer.SSL_KEYSTORE_TYPE, Constants.Security.AuthenticationServer.DEFAULT_SSL_KEYSTORE_TYPE);
        String keyPassword = sConfiguration.get(Constants.Security.AuthenticationServer.SSL_KEYPASSWORD);
        Preconditions.checkArgument(keyStorePath != null, "Key Store Path Not Configured");
        Preconditions.checkArgument(keyStorePassword != null, "KeyStore Password Not Configured");
        sslContextFactory.setKeyStorePath(keyStorePath);
        sslContextFactory.setKeyStorePassword(keyStorePassword);
        sslContextFactory.setKeyStoreType(keyStoreType);
        if (keyPassword != null && keyPassword.length() != 0) {
            sslContextFactory.setKeyManagerPassword(keyPassword);
        }
        String trustStorePath = cConfiguration.get(Constants.Security.AuthenticationServer.SSL_TRUSTSTORE_PATH);
        if (StringUtils.isNotEmpty(trustStorePath)) {
            String trustStorePassword = cConfiguration.get(Constants.Security.AuthenticationServer.SSL_TRUSTSTORE_PASSWORD);
            String trustStoreType = cConfiguration.get(Constants.Security.AuthenticationServer.SSL_TRUSTSTORE_TYPE, Constants.Security.AuthenticationServer.DEFAULT_SSL_KEYSTORE_TYPE);
            // SSL handshaking will involve requesting for a client certificate, if cert is not provided
            // server continues with the connection but the client is considered to be unauthenticated
            sslContextFactory.setWantClientAuth(true);
            sslContextFactory.setTrustStore(trustStorePath);
            sslContextFactory.setTrustStorePassword(trustStorePassword);
            sslContextFactory.setTrustStoreType(trustStoreType);
            sslContextFactory.setValidateCerts(true);
        }
        // TODO Figure out how to pick a certificate from key store
        SslSelectChannelConnector sslConnector = new SslSelectChannelConnector(sslContextFactory);
        sslConnector.setHost(bindAddress.getCanonicalHostName());
        sslConnector.setPort(port);
        server.setConnectors(new Connector[] { sslConnector });
    } else {
        SelectChannelConnector connector = new SelectChannelConnector();
        connector.setHost(bindAddress.getCanonicalHostName());
        connector.setPort(port);
        server.setConnectors(new Connector[] { connector });
    }
    HandlerCollection handlers = new HandlerCollection();
    handlers.addHandler(statusContext);
    handlers.addHandler(context);
    // AuditLogHandler must be last, since it needs the response that was sent to the client
    handlers.addHandler(auditLogHandler);
    server.setHandler(handlers);
    try {
        server.start();
    } catch (Exception e) {
        if ((Throwables.getRootCause(e) instanceof BindException)) {
            throw new ServiceBindException("Authentication Server", bindAddress.getCanonicalHostName(), port, e);
        }
        throw e;
    }
    // assumes we only have one connector
    Connector connector = server.getConnectors()[0];
    InetSocketAddress inetSocketAddress = new InetSocketAddress(connector.getHost(), connector.getLocalPort());
    serviceCancellable = discoveryService.register(ResolvingDiscoverable.of(new Discoverable(Constants.Service.EXTERNAL_AUTHENTICATION, inetSocketAddress)));
}

Example 2 with SslSelectChannelConnector

use of org.eclipse.jetty.server.ssl.SslSelectChannelConnector in project qi4j-sdk by Qi4j.

the class SecureJettyMixin method buildConnector.

@Override
protected Connector buildConnector() {
    SslConnector connector = new SslSelectChannelConnector(new SslContextFactory());
    JettyConfigurationHelper.configureSslConnector(connector, configuration.get());
    return connector;
}

Example 3 with SslSelectChannelConnector

use of org.eclipse.jetty.server.ssl.SslSelectChannelConnector in project coprhd-controller by CoprHD.

the class AbstractSecuredWebServer method initConnectors.

/**
 * set up the ssl connectors with strong ciphers
 *
 * @throws Exception
 */
protected void initConnectors() throws Exception {
    if (!_disableHTTP) {
        if (_unsecuredConnector == null) {
            _unsecuredConnector = new SelectChannelConnector();
        }
        if (_unsecurePort != null) {
            _unsecuredConnector.setPort(Integer.parseInt(_unsecurePort));
        } else {
            _unsecuredConnector.setPort(_serviceInfo.getEndpoint().getPort());
        }
        if (_httpBindAddress != null) {
            _unsecuredConnector.setHost(_httpBindAddress);
        }
        if (lowResourcesConnections != null) {
            _unsecuredConnector.setLowResourcesConnections(lowResourcesConnections);
        }
        if (lowResourcesMaxIdleTime != null) {
            _unsecuredConnector.setLowResourcesMaxIdleTime(lowResourcesMaxIdleTime);
        }
        if (threadPool != null) {
            _unsecuredConnector.setThreadPool(threadPool);
        }
        _server.addConnector(_unsecuredConnector);
    }
    if (!_disableSSL) {
        SslContextFactory sslFac = new SslContextFactory();
        sslFac.setIncludeCipherSuites(_ciphers);
        KeyStore ks = KeyStoreUtil.getViPRKeystore(_coordinatorClient);
        _log.debug("The certificates in Jetty is {}. ", ks.getCertificateChain(KeystoreEngine.ViPR_KEY_AND_CERTIFICATE_ALIAS));
        sslFac.setCertAlias(KeystoreEngine.ViPR_KEY_AND_CERTIFICATE_ALIAS);
        sslFac.setKeyStore(ks);
        _securedConnector = new SslSelectChannelConnector(sslFac);
        if (_securePort != null) {
            _securedConnector.setPort(Integer.parseInt(_securePort));
        } else {
            _securedConnector.setPort(_serviceInfo.getEndpoint().getPort());
        }
        if (_bindAddress != null) {
            _securedConnector.setHost(_bindAddress);
        }
        if (lowResourcesConnections != null) {
            _securedConnector.setLowResourcesConnections(lowResourcesConnections);
        }
        if (lowResourcesMaxIdleTime != null) {
            _securedConnector.setLowResourcesMaxIdleTime(lowResourcesMaxIdleTime);
        }
        if (threadPool != null) {
            _securedConnector.setThreadPool(threadPool);
        }
        _server.addConnector(_securedConnector);
    }
    _server.setSendServerVersion(false);
}

Example 4 with SslSelectChannelConnector

use of org.eclipse.jetty.server.ssl.SslSelectChannelConnector in project coprhd-controller by CoprHD.

the class TestWebServer method initConnectors.

/**
 * set up the ssl connectors with strong ciphers
 *
 * @throws Exception
 */
private void initConnectors() throws Exception {
    SslContextFactory sslFac = new SslContextFactory();
    sslFac.setIncludeCipherSuites(_ciphers);
    KeyStore ks = loadKeystore();
    sslFac.setKeyStore(ks);
    sslFac.setKeyStorePassword(_keystorePassword);
    sslFac.setKeyManagerPassword(_keystorePassword);
    sslFac.setTrustStorePassword(_keystorePassword);
    _securedConnector = new SslSelectChannelConnector(sslFac);
    _securedConnector.setPort(_securePort);
    _server.addConnector(_securedConnector);
    _server.setSendServerVersion(false);
}

Example 5 with SslSelectChannelConnector

use of org.eclipse.jetty.server.ssl.SslSelectChannelConnector in project bnd by bndtools.

the class HttpConnectorTest method startJetty.

private static Server startJetty() throws Exception {
    Server server = new Server();
    // Create the login service
    String REQUIRED_ROLE = "users";
    HashLoginService loginSvc = new HashLoginService(REQUIRED_ROLE, USER_ROLE_FILE);
    server.addBean(loginSvc);
    // Start HTTP and HTTPS connectors
    SelectChannelConnector httpConnector = new SelectChannelConnector();
    httpConnector.setPort(0);
    httpConnector.setHost(LOCALHOST);
    server.addConnector(httpConnector);
    SslSelectChannelConnector sslConnector = new SslSelectChannelConnector();
    sslConnector.setPort(0);
    sslConnector.setHost(LOCALHOST);
    SslContextFactory contextFactory = sslConnector.getSslContextFactory();
    contextFactory.setKeyStorePath(KEYSTORE_PATH);
    contextFactory.setKeyStorePassword(KEYSTORE_PASS);
    server.addConnector(sslConnector);
    // Create the resource handler to serve files
    ResourceHandler resourceHandler = new ETaggingResourceHandler();
    resourceHandler.setResourceBase(RESOURCE_BASE);
    resourceHandler.setDirectoriesListed(true);
    // Setup user role constraints
    Constraint constraint = new Constraint();
    constraint.setName(Constraint.__BASIC_AUTH);
    constraint.setRoles(new String[] { REQUIRED_ROLE });
    constraint.setAuthenticate(true);
    // Map constraints to the secured directory
    ConstraintMapping cm = new ConstraintMapping();
    cm.setConstraint(constraint);
    cm.setPathSpec(SECURED_PATH);
    // Setup the constraint handler
    ConstraintSecurityHandler securityHandler = new ConstraintSecurityHandler();
    securityHandler.setAuthMethod("BASIC");
    securityHandler.setHandler(resourceHandler);
    securityHandler.setLoginService(loginSvc);
    securityHandler.setConstraintMappings(new ConstraintMapping[] { cm });
    // Finally!! Start the server
    server.setHandler(securityHandler);
    server.start();
    while (!server.isRunning()) {
        Thread.sleep(10);
    }
    HTTP_PORT = httpConnector.getLocalPort();
    HTTPS_PORT = sslConnector.getLocalPort();
    assertNotSame(Integer.valueOf(0), Integer.valueOf(HTTP_PORT));
    assertNotSame(Integer.valueOf(-1), Integer.valueOf(HTTP_PORT));
    assertNotSame(Integer.valueOf(0), Integer.valueOf(HTTPS_PORT));
    assertNotSame(Integer.valueOf(-1), Integer.valueOf(HTTPS_PORT));
    assertNotSame(Integer.valueOf(HTTP_PORT), Integer.valueOf(HTTPS_PORT));
    return server;
}