Package org.apache.nifi.security.util

Class TemporaryKeyStoreBuilder

java.lang.Object

org.apache.nifi.security.util.TemporaryKeyStoreBuilder

public class TemporaryKeyStoreBuilder
extends Object

KeyStore Factory for creating temporary files primarily used for testing

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
private static final record	TemporaryKeyStoreBuilder.KeyStoreConfiguration

Field Summary

Fields

Modifier and Type	Field	Description
private static final int	CERTIFICATE_VALID_DAYS
private static final String	DEFAULT_HOSTNAME
private static final String	DISTINGUISHED_NAME_FORMAT
private static final Base64.Encoder	ENCODER
private String	hostname
private static final String	KEY_PAIR_ALGORITHM
private static final int	KEY_SIZE
private static final String	KEY_STORE_EXTENSION
private static final String	KEY_STORE_PREFIX
private static final KeystoreType	KEYSTORE_TYPE
private static final int	RANDOM_BYTES_LENGTH
private String	trustStorePassword
private String	trustStoreType

Constructor Summary

Constructors

Constructor	Description
TemporaryKeyStoreBuilder()

Method Summary

Modifier and Type	Method	Description
TlsConfiguration	build()	Build Temporary KeyStore and TrustStore with configured values and set files with File.deleteOnExit()
private X509Certificate	generateCertificate(String hostname, KeyPair keyPair)
private KeyPair	generateKeyPair()
private String	generateSecureRandomPassword()
private KeyStore	getNewKeyStore(String newKeyStoreType)
TemporaryKeyStoreBuilder	hostname(String hostname)	Set Hostname used for Certificate Common Name and DNS Subject Alternative Names
private TemporaryKeyStoreBuilder.KeyStoreConfiguration	setKeyStore(PrivateKey privateKey, X509Certificate certificate)
private TemporaryKeyStoreBuilder.KeyStoreConfiguration	setTrustStore(X509Certificate certificate)
private File	storeKeyStore(KeyStore keyStore, char[] password)
TemporaryKeyStoreBuilder	trustStorePassword(String trustStorePassword)	Set Trust Store Password used for protected generated Trust Store file
TemporaryKeyStoreBuilder	trustStoreType(String trustStoreType)	Set Trust Store Type used for storing Trust Store files

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

KEY_PAIR_ALGORITHM

private static final String KEY_PAIR_ALGORITHM

See Also:

• Constant Field Values

KEY_SIZE

private static final int KEY_SIZE

See Also:

• Constant Field Values

RANDOM_BYTES_LENGTH

private static final int RANDOM_BYTES_LENGTH

See Also:

• Constant Field Values

ENCODER

private static final Base64.Encoder ENCODER

DISTINGUISHED_NAME_FORMAT

private static final String DISTINGUISHED_NAME_FORMAT

See Also:

• Constant Field Values

CERTIFICATE_VALID_DAYS

private static final int CERTIFICATE_VALID_DAYS

See Also:

• Constant Field Values

KEYSTORE_TYPE

private static final KeystoreType KEYSTORE_TYPE

KEY_STORE_EXTENSION

private static final String KEY_STORE_EXTENSION

See Also:

• Constant Field Values

KEY_STORE_PREFIX

private static final String KEY_STORE_PREFIX

See Also:

• Constant Field Values

DEFAULT_HOSTNAME

private static final String DEFAULT_HOSTNAME

See Also:

• Constant Field Values

hostname

private String hostname

trustStorePassword

private String trustStorePassword

trustStoreType

private String trustStoreType

Constructor Details

TemporaryKeyStoreBuilder

public TemporaryKeyStoreBuilder()

Method Details

hostname

public TemporaryKeyStoreBuilder hostname(String hostname)

Set Hostname used for Certificate Common Name and DNS Subject Alternative Names

Parameters:

hostname - Hostname is required

Returns:

Builder

trustStorePassword

public TemporaryKeyStoreBuilder trustStorePassword(String trustStorePassword)

Set Trust Store Password used for protected generated Trust Store file

Parameters:

trustStorePassword - Trust Store Password is required

Returns:

Builder

trustStoreType

public TemporaryKeyStoreBuilder trustStoreType(String trustStoreType)

Set Trust Store Type used for storing Trust Store files

Parameters:

trustStoreType - Trust Store type must be a supported value for KeyStore.getInstance()

Returns:

Builder

build

public TlsConfiguration build()

Build Temporary KeyStore and TrustStore with configured values and set files with File.deleteOnExit()

Returns:

TLS Configuration with KeyStore and TrustStore properties

setKeyStore

private TemporaryKeyStoreBuilder.KeyStoreConfiguration setKeyStore(PrivateKey privateKey,
 X509Certificate certificate)

setTrustStore

private TemporaryKeyStoreBuilder.KeyStoreConfiguration setTrustStore(X509Certificate certificate)

storeKeyStore

private File storeKeyStore(KeyStore keyStore,
 char[] password)

getNewKeyStore

private KeyStore getNewKeyStore(String newKeyStoreType)

generateCertificate

private X509Certificate generateCertificate(String hostname,
 KeyPair keyPair)

generateKeyPair

private KeyPair generateKeyPair()

generateSecureRandomPassword

private String generateSecureRandomPassword()