Examples with SslConfiguration org.infinispan.client.hotrod.configuration.SslConfiguration used on opensource projects

Example 1 with SslConfiguration

use of org.infinispan.client.hotrod.configuration.SslConfiguration in project infinispan by infinispan.

the class ChannelInitializer method initSsl.

private void initSsl(Channel channel) {
    SslConfiguration ssl = configuration.security().ssl();
    SslContext sslContext;
    if (ssl.sslContext() == null) {
        SslContextBuilder builder = SslContextBuilder.forClient();
        try {
            if (ssl.keyStoreFileName() != null) {
                builder.keyManager(new SslContextFactory().keyStoreFileName(ssl.keyStoreFileName()).keyStoreType(ssl.keyStoreType()).keyStorePassword(ssl.keyStorePassword()).keyAlias(ssl.keyAlias()).keyStoreCertificatePassword(ssl.keyStoreCertificatePassword()).classLoader(configuration.classLoader()).getKeyManagerFactory());
            }
            if (ssl.trustStoreFileName() != null) {
                if ("pem".equalsIgnoreCase(ssl.trustStoreType())) {
                    builder.trustManager(new File(ssl.trustStoreFileName()));
                } else {
                    builder.trustManager(new SslContextFactory().trustStoreFileName(ssl.trustStoreFileName()).trustStoreType(ssl.trustStoreType()).trustStorePassword(ssl.trustStorePassword()).classLoader(configuration.classLoader()).getTrustManagerFactory());
                }
            }
            if (ssl.trustStorePath() != null) {
                builder.trustManager(new File(ssl.trustStorePath()));
            }
            if (ssl.protocol() != null) {
                builder.protocols(ssl.protocol());
            }
            if (ssl.ciphers() != null) {
                builder.ciphers(ssl.ciphers());
            }
            if (ssl.provider() != null) {
                builder.sslContextProvider(Security.getProvider(ssl.provider()));
            }
            sslContext = builder.build();
        } catch (Exception e) {
            throw new CacheConfigurationException(e);
        }
    } else {
        sslContext = new JdkSslContext(ssl.sslContext(), true, ClientAuth.NONE);
    }
    SslHandler sslHandler = sslContext.newHandler(channel.alloc(), ssl.sniHostName(), -1);
    if (ssl.sniHostName() != null) {
        SSLParameters sslParameters = sslHandler.engine().getSSLParameters();
        sslParameters.setServerNames(Collections.singletonList(new SNIHostName(ssl.sniHostName())));
        sslHandler.engine().setSSLParameters(sslParameters);
    }
    channel.pipeline().addFirst(sslHandler, SslHandshakeExceptionHandler.INSTANCE);
}