1 | |
|
2 | |
|
3 | |
|
4 | |
|
5 | |
|
6 | |
|
7 | |
|
8 | |
|
9 | |
|
10 | |
|
11 | |
package org.mule.extras.pgp; |
12 | |
|
13 | |
import org.mule.config.i18n.CoreMessages; |
14 | |
import org.mule.extras.pgp.i18n.PGPMessages; |
15 | |
import org.mule.umo.lifecycle.InitialisationException; |
16 | |
import org.mule.umo.security.SecurityException; |
17 | |
import org.mule.umo.security.UMOAuthentication; |
18 | |
import org.mule.umo.security.UMOSecurityContext; |
19 | |
import org.mule.umo.security.UMOSecurityContextFactory; |
20 | |
import org.mule.umo.security.UMOSecurityProvider; |
21 | |
import org.mule.umo.security.UnauthorisedException; |
22 | |
import org.mule.umo.security.UnknownAuthenticationTypeException; |
23 | |
|
24 | |
import cryptix.message.Message; |
25 | |
import cryptix.message.MessageException; |
26 | |
import cryptix.message.SignedMessage; |
27 | |
import cryptix.pki.KeyBundle; |
28 | |
|
29 | 2 | public class PGPSecurityProvider implements UMOSecurityProvider |
30 | |
{ |
31 | 2 | private String name = "PGPSecurityProvider"; |
32 | |
|
33 | |
private PGPKeyRing keyManager; |
34 | |
|
35 | |
private UMOSecurityContextFactory factory; |
36 | |
|
37 | |
|
38 | |
|
39 | |
|
40 | |
|
41 | |
|
42 | |
public void setName(String name) |
43 | |
{ |
44 | 0 | this.name = name; |
45 | 0 | } |
46 | |
|
47 | |
|
48 | |
|
49 | |
|
50 | |
|
51 | |
|
52 | |
public String getName() |
53 | |
{ |
54 | 0 | return name; |
55 | |
} |
56 | |
|
57 | |
|
58 | |
|
59 | |
|
60 | |
|
61 | |
|
62 | |
public UMOAuthentication authenticate(UMOAuthentication authentication) throws SecurityException |
63 | |
{ |
64 | 2 | PGPAuthentication auth = (PGPAuthentication)authentication; |
65 | |
|
66 | 2 | String userId = (String)auth.getPrincipal(); |
67 | |
|
68 | 2 | if (userId == null) |
69 | |
{ |
70 | 0 | throw new UnauthorisedException(CoreMessages.objectIsNull("UserId")); |
71 | |
} |
72 | |
|
73 | 2 | KeyBundle userKeyBundle = keyManager.getKeyBundle(userId); |
74 | |
|
75 | 2 | if (userKeyBundle == null) |
76 | |
{ |
77 | 0 | throw new UnauthorisedException(PGPMessages.noPublicKeyForUser(userId)); |
78 | |
} |
79 | |
|
80 | 2 | Message msg = (Message)auth.getCredentials(); |
81 | |
|
82 | 2 | if (!((msg != null) && msg instanceof SignedMessage)) |
83 | |
{ |
84 | 0 | throw new UnauthorisedException(PGPMessages.noSignedMessageFound()); |
85 | |
} |
86 | |
|
87 | |
try |
88 | |
{ |
89 | 2 | if (!((SignedMessage)msg).verify(userKeyBundle)) |
90 | |
{ |
91 | 0 | throw new UnauthorisedException(PGPMessages.invalidSignature()); |
92 | |
} |
93 | |
} |
94 | 0 | catch (MessageException e) |
95 | |
{ |
96 | 0 | throw new UnauthorisedException(PGPMessages.errorVerifySignature(), e); |
97 | 2 | } |
98 | |
|
99 | 2 | auth.setAuthenticated(true); |
100 | 2 | auth.setDetails(userKeyBundle); |
101 | |
|
102 | 2 | return auth; |
103 | |
} |
104 | |
|
105 | |
|
106 | |
|
107 | |
|
108 | |
|
109 | |
|
110 | |
public boolean supports(Class aClass) |
111 | |
{ |
112 | 0 | return PGPAuthentication.class.isAssignableFrom(aClass); |
113 | |
} |
114 | |
|
115 | |
|
116 | |
|
117 | |
|
118 | |
|
119 | |
|
120 | |
public UMOSecurityContext createSecurityContext(UMOAuthentication auth) |
121 | |
throws UnknownAuthenticationTypeException |
122 | |
{ |
123 | 0 | return factory.create(auth); |
124 | |
} |
125 | |
|
126 | |
|
127 | |
|
128 | |
|
129 | |
|
130 | |
|
131 | |
public void initialise() throws InitialisationException |
132 | |
{ |
133 | |
try |
134 | |
{ |
135 | 2 | java.security.Security.addProvider(new cryptix.jce.provider.CryptixCrypto()); |
136 | 2 | java.security.Security.addProvider(new cryptix.openpgp.provider.CryptixOpenPGP()); |
137 | |
|
138 | 2 | factory = new PGPSecurityContextFactory(); |
139 | |
} |
140 | 0 | catch (Exception e) |
141 | |
{ |
142 | 0 | throw new InitialisationException(CoreMessages.failedToCreate("PGPProvider"), e); |
143 | 2 | } |
144 | 2 | } |
145 | |
|
146 | |
public PGPKeyRing getKeyManager() |
147 | |
{ |
148 | 0 | return keyManager; |
149 | |
} |
150 | |
|
151 | |
public void setKeyManager(PGPKeyRing keyManager) |
152 | |
{ |
153 | 2 | this.keyManager = keyManager; |
154 | 2 | } |
155 | |
} |