-
Notifications
You must be signed in to change notification settings - Fork 2.8k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #9469 from tsegismont/reactive-pg-ssl
SSL support for Reactive SQL Clients
- Loading branch information
Showing
15 changed files
with
296 additions
and
61 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
120 changes: 120 additions & 0 deletions
120
...sions/vertx-core/runtime/src/main/java/io/quarkus/vertx/core/runtime/SSLConfigHelper.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,120 @@ | ||
| package io.quarkus.vertx.core.runtime; | ||
|
|
||
| import io.quarkus.vertx.core.runtime.config.JksConfiguration; | ||
| import io.quarkus.vertx.core.runtime.config.PemKeyCertConfiguration; | ||
| import io.quarkus.vertx.core.runtime.config.PemTrustCertConfiguration; | ||
| import io.quarkus.vertx.core.runtime.config.PfxConfiguration; | ||
| import io.vertx.core.net.JksOptions; | ||
| import io.vertx.core.net.KeyCertOptions; | ||
| import io.vertx.core.net.PemKeyCertOptions; | ||
| import io.vertx.core.net.PemTrustOptions; | ||
| import io.vertx.core.net.PfxOptions; | ||
| import io.vertx.core.net.TCPSSLOptions; | ||
|
|
||
| public class SSLConfigHelper { | ||
|
|
||
| public static void configurePemTrustOptions(TCPSSLOptions options, PemTrustCertConfiguration configuration) { | ||
| if (configuration.enabled) { | ||
| ensureTrustOptionsNotSet(options); | ||
| options.setTrustOptions(toPemTrustOptions(configuration)); | ||
| } | ||
| } | ||
|
|
||
| private static PemTrustOptions toPemTrustOptions(PemTrustCertConfiguration configuration) { | ||
| PemTrustOptions pemTrustOptions = new PemTrustOptions(); | ||
| if (configuration.certs.isPresent()) { | ||
| for (String cert : configuration.certs.get()) { | ||
| pemTrustOptions.addCertPath(cert); | ||
| } | ||
| } | ||
| return pemTrustOptions; | ||
| } | ||
|
|
||
| public static void configureJksTrustOptions(TCPSSLOptions options, JksConfiguration configuration) { | ||
| if (configuration.enabled) { | ||
| ensureTrustOptionsNotSet(options); | ||
| options.setTrustOptions(toJksOptions(configuration)); | ||
| } | ||
| } | ||
|
|
||
| private static JksOptions toJksOptions(JksConfiguration configuration) { | ||
| JksOptions jksOptions = new JksOptions(); | ||
| if (configuration.path.isPresent()) { | ||
| jksOptions.setPath(configuration.path.get()); | ||
| } | ||
| if (configuration.password.isPresent()) { | ||
| jksOptions.setPassword(configuration.password.get()); | ||
| } | ||
| return jksOptions; | ||
| } | ||
|
|
||
| public static void configurePfxTrustOptions(TCPSSLOptions options, PfxConfiguration configuration) { | ||
| if (configuration.enabled) { | ||
| ensureTrustOptionsNotSet(options); | ||
| options.setTrustOptions(toPfxOptions(configuration)); | ||
| } | ||
| } | ||
|
|
||
| private static PfxOptions toPfxOptions(PfxConfiguration configuration) { | ||
| PfxOptions pfxOptions = new PfxOptions(); | ||
| if (configuration.path.isPresent()) { | ||
| pfxOptions.setPath(configuration.path.get()); | ||
| } | ||
| if (configuration.password.isPresent()) { | ||
| pfxOptions.setPassword(configuration.password.get()); | ||
| } | ||
| return pfxOptions; | ||
| } | ||
|
|
||
| private static void ensureTrustOptionsNotSet(TCPSSLOptions options) { | ||
| if (options.getTrustOptions() != null) { | ||
| throw new IllegalArgumentException("Trust options have already been set"); | ||
| } | ||
| } | ||
|
|
||
| public static void configurePemKeyCertOptions(TCPSSLOptions options, PemKeyCertConfiguration configuration) { | ||
| if (configuration.enabled) { | ||
| ensureKeyCertOptionsNotSet(options); | ||
| options.setKeyCertOptions(toPemKeyCertOptions(configuration)); | ||
| } | ||
| } | ||
|
|
||
| private static KeyCertOptions toPemKeyCertOptions(PemKeyCertConfiguration configuration) { | ||
| PemKeyCertOptions pemKeyCertOptions = new PemKeyCertOptions(); | ||
| if (configuration.certs.isPresent()) { | ||
| for (String cert : configuration.certs.get()) { | ||
| pemKeyCertOptions.addCertPath(cert); | ||
| } | ||
| } | ||
| if (configuration.keys.isPresent()) { | ||
| for (String cert : configuration.keys.get()) { | ||
| pemKeyCertOptions.addKeyPath(cert); | ||
| } | ||
| } | ||
| return pemKeyCertOptions; | ||
| } | ||
|
|
||
| public static void configureJksKeyCertOptions(TCPSSLOptions options, JksConfiguration configuration) { | ||
| if (configuration.enabled) { | ||
| ensureKeyCertOptionsNotSet(options); | ||
| options.setKeyCertOptions(toJksOptions(configuration)); | ||
| } | ||
| } | ||
|
|
||
| public static void configurePfxKeyCertOptions(TCPSSLOptions options, PfxConfiguration configuration) { | ||
| if (configuration.enabled) { | ||
| ensureKeyCertOptionsNotSet(options); | ||
| options.setKeyCertOptions(toPfxOptions(configuration)); | ||
| } | ||
| } | ||
|
|
||
| private static void ensureKeyCertOptionsNotSet(TCPSSLOptions options) { | ||
| if (options.getKeyCertOptions() != null) { | ||
| throw new IllegalArgumentException("Key cert options have already been set"); | ||
| } | ||
| } | ||
|
|
||
| private SSLConfigHelper() { | ||
| // Utility | ||
| } | ||
| } |
Oops, something went wrong.