Examples with MqttConnection org.openremote.manager.mqtt.MqttConnection used on opensource projects

Example 1 with MqttConnection

use of org.openremote.manager.mqtt.MqttConnection in project openremote by openremote.

the class UserAssetProvisioningMQTTHandler method getMatchingX509ProvisioningConfig.

protected X509ProvisioningConfig getMatchingX509ProvisioningConfig(MqttConnection connection, X509Certificate clientCertificate) {
    return provisioningService.getProvisioningConfigs().stream().filter(config -> config instanceof X509ProvisioningConfig).map(config -> (X509ProvisioningConfig) config).filter(config -> {
        try {
            X509Certificate caCertificate = config.getCertificate();
            if (caCertificate != null) {
                if (caCertificate.getSubjectX500Principal().getName().equals(clientCertificate.getIssuerX500Principal().getName())) {
                    LOG.fine("Client certificate issuer matches provisioning config CA certificate subject: connection=" + connection + ", config=" + config);
                    Date now = Date.from(timerService.getNow());
                    try {
                        clientCertificate.verify(caCertificate.getPublicKey());
                        LOG.fine("Client certificate verified against CA certificate: connection=" + connection + ", config=" + config);
                        if (!config.getData().isIgnoreExpiryDate()) {
                            LOG.fine("Validating client certificate validity: connection=" + connection + ", timestamp=" + now);
                            clientCertificate.checkValidity(now);
                        }
                        return true;
                    } catch (CertificateExpiredException | CertificateNotYetValidException e) {
                        LOG.log(Level.INFO, "Client certificate failed validity check: connection=" + connection + ", timestamp=" + now, e);
                    } catch (Exception e) {
                        LOG.log(Level.INFO, "Client certificate failed verification against CA certificate: connection=" + connection + ", config=" + config, e);
                    }
                }
            }
        } catch (Exception e) {
            LOG.log(Level.WARNING, "Failed to extract certificate from provisioning config: config=" + config, e);
        }
        return false;
    }).findFirst().orElse(null);
}