eu.emi.client.security
Interface ISecurityProperties

All Superinterfaces:

Cloneable, IAuthenticationConfiguration, IClientProperties, ISecurityConfiguration

public interface ISecurityProperties
extends IClientProperties

Interface extends IClientProperties with general security settings: whether client authentication is required and whether SSL is turned on or not at all, whether signatures are required etc

Author:

schuller, a.memon

Field Summary

static String	REGISTRY_ACL_FILE property to define path of the ACL file
static String	REGISTRY_CHECKACCESS do we check access on the Web Resource level?
static String	REGISTRY_CHECKACCESS_PDP access control PDP class name (implementing de.fzj.uas.security.XacmlPDP)
static String	REGISTRY_CHECKACCESS_PDPCONFIG configuration file for the PDP
static String	REGISTRY_INBOUND_FILTER_NAME for CLIENT use: space-separated names of any extra UAS incoming security handler classes
static String	REGISTRY_OUTBOUND_FILTER_NAME for CLIENT use: space separated name(s) of any extra UAS outbound security handler class(es)
static String	REGISTRY_REQUIRE_SIGNATURES do we require signatures on certain messages
static String	REGISTRY_SSL_CLIENTAUTH property defining whether SSL is client authenticated
static String	REGISTRY_SSL_ENABLED property defining whether SSL is enabled
static String	REGISTRY_SSL_KEYALIAS property defining the alias of the key to use
static String	REGISTRY_SSL_KEYPASS property defining the SSL keystore password
static String	REGISTRY_SSL_KEYSTORE property defining the SSL keystore
static String	REGISTRY_SSL_KEYTYPE property defining the SSL keystore type (e.g.
static String	REGISTRY_SSL_TRUSTPASS property defining the SSL trust tore password
static String	REGISTRY_SSL_TRUSTSTORE property defining the SSL trust store
static String	REGISTRY_SSL_TRUSTTYPE property defining the SSL trust store type (e.g.

Method Summary

ISecurityProperties	clone() make a copy of these properties
X509Certificate[]	getCertificateChain() the user's certificate chain.
X509Certificate	getGatewayCertificate() get the certificate of the gateway, or null if this is not configured (using the #UAS_GATEWAY_ALIAS property)
Properties	getProperties() get the raw properties
String	getProperty(String key) get a property
boolean	requireClientAuthentication() returns true if SSL client must be authenticated. It can be enabled by setting a property "unicore.wsrflite.ssl.clientauth" to "true" in the configuration file.
void	setClassLoader(ClassLoader classLoader) set the classloader to be used e.g.
void	setExtraSecurityTokens(Map<String,Object> tokens) set extra security tokens to be used in outgoing calls
void	setProperty(String key, String value) set a property
void	setSignMessage(boolean what) select whether the outgoing message should be signed

Methods inherited from interface eu.emi.client.security.IClientProperties

doSignMessage, getClassLoader, getExtraSecurityTokens, getExtraSettings, getInHandlerClassNames, getOutHandlerClassNames, getPrivateKey, getPublicKey, isSslEnabled

Methods inherited from interface eu.emi.client.security.IAuthenticationConfiguration

doHttpAuthn, doSSLAuthn, getHttpPassword, getHttpUser, getSSLContext, getTruststore, getTruststorePassword, getTruststoreType

Methods inherited from interface eu.emi.client.security.ISecurityConfiguration

getKeystore, getKeystoreAlias, getKeystoreKeyPassword, getKeystorePassword, getKeystoreType

Field Detail

REGISTRY_SSL_ENABLED

static final String REGISTRY_SSL_ENABLED

property defining whether SSL is enabled

See Also:

Constant Field Values

REGISTRY_SSL_CLIENTAUTH

static final String REGISTRY_SSL_CLIENTAUTH

property defining whether SSL is client authenticated

See Also:

Constant Field Values

REGISTRY_SSL_KEYSTORE

static final String REGISTRY_SSL_KEYSTORE

property defining the SSL keystore

See Also:

Constant Field Values

REGISTRY_SSL_KEYPASS

static final String REGISTRY_SSL_KEYPASS

property defining the SSL keystore password

See Also:

Constant Field Values

REGISTRY_SSL_KEYTYPE

static final String REGISTRY_SSL_KEYTYPE

property defining the SSL keystore type (e.g. JKS)

See Also:

Constant Field Values

REGISTRY_SSL_KEYALIAS

static final String REGISTRY_SSL_KEYALIAS

property defining the alias of the key to use

See Also:

Constant Field Values

REGISTRY_SSL_TRUSTSTORE

static final String REGISTRY_SSL_TRUSTSTORE

property defining the SSL trust store

See Also:

Constant Field Values

REGISTRY_SSL_TRUSTPASS

static final String REGISTRY_SSL_TRUSTPASS

property defining the SSL trust tore password

See Also:

Constant Field Values

REGISTRY_SSL_TRUSTTYPE

static final String REGISTRY_SSL_TRUSTTYPE

property defining the SSL trust store type (e.g. JKS)

See Also:

Constant Field Values

REGISTRY_CHECKACCESS

static final String REGISTRY_CHECKACCESS

do we check access on the Web Resource level?

See Also:

Constant Field Values

REGISTRY_CHECKACCESS_PDP

static final String REGISTRY_CHECKACCESS_PDP

access control PDP class name (implementing de.fzj.uas.security.XacmlPDP)

See Also:

Constant Field Values

REGISTRY_CHECKACCESS_PDPCONFIG

static final String REGISTRY_CHECKACCESS_PDPCONFIG

configuration file for the PDP

See Also:

Constant Field Values

REGISTRY_OUTBOUND_FILTER_NAME

static final String REGISTRY_OUTBOUND_FILTER_NAME

for CLIENT use: space separated name(s) of any extra UAS outbound security handler class(es)

See Also:

Constant Field Values

REGISTRY_INBOUND_FILTER_NAME

static final String REGISTRY_INBOUND_FILTER_NAME

for CLIENT use: space-separated names of any extra UAS incoming security handler classes

See Also:

Constant Field Values

REGISTRY_ACL_FILE

static final String REGISTRY_ACL_FILE

property to define path of the ACL file

See Also:

Constant Field Values

REGISTRY_REQUIRE_SIGNATURES

static final String REGISTRY_REQUIRE_SIGNATURES

do we require signatures on certain messages

See Also:

Constant Field Values

Method Detail

clone

ISecurityProperties clone()

make a copy of these properties

Specified by:

clone in interface IAuthenticationConfiguration

Specified by:

clone in interface IClientProperties

Specified by:

clone in interface ISecurityConfiguration

setProperty

void setProperty(String key,
                 String value)

set a property

Parameters:

key -

value -

getProperty

String getProperty(String key)

get a property

Parameters:

key -

requireClientAuthentication

boolean requireClientAuthentication()

returns true if SSL client must be authenticated.
It can be enabled by setting a property "unicore.wsrflite.ssl.clientauth" to "true" in the configuration file.

Returns:

getCertificateChain

X509Certificate[] getCertificateChain()

Description copied from interface: IClientProperties

the user's certificate chain.

Specified by:

getCertificateChain in interface IClientProperties

Returns:

local user's certificate chain

setSignMessage

void setSignMessage(boolean what)

select whether the outgoing message should be signed

Parameters:

what -

getGatewayCertificate

X509Certificate getGatewayCertificate()

get the certificate of the gateway, or null if this is not configured (using the #UAS_GATEWAY_ALIAS property)

setExtraSecurityTokens

void setExtraSecurityTokens(Map<String,Object> tokens)

set extra security tokens to be used in outgoing calls

Parameters:

tokens -

setClassLoader

void setClassLoader(ClassLoader classLoader)

set the classloader to be used e.g. for dynamically loading security handlers

Parameters:

classLoader - - the classloader to use

getProperties

Properties getProperties()

get the raw properties