Example usage for java.security Security addProvider

List of usage examples for java.security Security addProvider

Introduction

In this page you can find the example usage for java.security Security addProvider.

Prototype

public static int addProvider(Provider provider) 

Source Link

Document

Adds a provider to the next position available.

Usage

From source file:org.jboss.as.test.integration.security.picketlink.KerberosServerSetupTask.java

/**
 * Creates directory services, starts LDAP server and KDCServer
 *
 * @param managementClient/*from  w  w  w .  j a  v a  2  s. c  om*/
 * @param containerId
 * @throws Exception
 * @see org.jboss.as.arquillian.api.ServerSetupTask#setup(org.jboss.as.arquillian.container.ManagementClient,
 *      java.lang.String)
 */
public void setup(ManagementClient managementClient, String containerId) throws Exception {
    try {
        if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {
            Security.addProvider(new BouncyCastleProvider());
            removeBouncyCastle = true;
        }
    } catch (SecurityException ex) {
        LOGGER.warn("Cannot register BouncyCastleProvider", ex);
    }

    final String hostname = Utils.getSecondaryTestAddress(managementClient, false);
    createLdap1(managementClient, hostname);

    origKrb5Conf = Utils.setSystemProperty("java.security.krb5.conf", KRB5_CONF_FILE.getAbsolutePath());
    origKrbDebug = Utils.setSystemProperty("sun.security.krb5.debug", "true");
}

From source file:test.integ.be.e_contract.sts.CXFSTSClientTest.java

@Before
public void setUp() throws Exception {
    TrustManager trustManager = new MyTrustManager();
    TrustManager[] sslTrustManagers = new TrustManager[] { trustManager };
    SSLContext ssl_ctx = SSLContext.getInstance("TLS");
    ssl_ctx.init(null, sslTrustManagers, new SecureRandom());
    SSLSocketFactory sslSocketFactory = ssl_ctx.getSocketFactory();
    HttpsURLConnection.setDefaultSSLSocketFactory(sslSocketFactory);

    HostnameVerifier hostnameVerifier = new MyHostnameVerifier();
    HttpsURLConnection.setDefaultHostnameVerifier(hostnameVerifier);

    Security.addProvider(new BeIDProvider());
}

From source file:org.jboss.as.test.integration.logging.syslogserver.TLSSyslogServer.java

/**
 * Adds Bouncy Castle to Security Manager.
 *//*w w  w  . j  a v a 2 s .  c o m*/
private void addBouncyCastle() {
    try {
        if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {
            Security.addProvider(new BouncyCastleProvider());
        }
    } catch (SecurityException ex) {
        LOGGER.warn("Cannot register BouncyCastleProvider", ex);
    }
}

From source file:test.integ.be.e_contract.mycarenet.genins.GenericInsurabilityClientTest.java

@Test
public void testSTSDoctor() throws Exception {
    EHealthSTSClient client = new EHealthSTSClient("https://wwwacc.ehealth.fgov.be/sts_1_1/SecureTokenService");

    Security.addProvider(new BeIDProvider());
    KeyStore keyStore = KeyStore.getInstance("BeID");
    keyStore.load(null);//from  w  w w .ja v a  2 s .  c  o  m
    PrivateKey authnPrivateKey = (PrivateKey) keyStore.getKey("Authentication", null);
    X509Certificate authnCertificate = (X509Certificate) keyStore.getCertificate("Authentication");

    KeyStore eHealthKeyStore = KeyStore.getInstance("PKCS12");
    FileInputStream fileInputStream = new FileInputStream(this.config.getEHealthPKCS12Path());
    eHealthKeyStore.load(fileInputStream, this.config.getEHealthPKCS12Password().toCharArray());
    Enumeration<String> aliasesEnum = eHealthKeyStore.aliases();
    String alias = aliasesEnum.nextElement();
    X509Certificate eHealthCertificate = (X509Certificate) eHealthKeyStore.getCertificate(alias);
    PrivateKey eHealthPrivateKey = (PrivateKey) eHealthKeyStore.getKey(alias,
            this.config.getEHealthPKCS12Password().toCharArray());

    List<Attribute> attributes = new LinkedList<Attribute>();
    attributes.add(new Attribute("urn:be:fgov:identification-namespace",
            "urn:be:fgov:ehealth:1.0:certificateholder:person:ssin"));
    attributes.add(new Attribute("urn:be:fgov:identification-namespace", "urn:be:fgov:person:ssin"));

    List<AttributeDesignator> attributeDesignators = new LinkedList<AttributeDesignator>();
    attributeDesignators.add(new AttributeDesignator("urn:be:fgov:identification-namespace",
            "urn:be:fgov:ehealth:1.0:certificateholder:person:ssin"));
    attributeDesignators
            .add(new AttributeDesignator("urn:be:fgov:identification-namespace", "urn:be:fgov:person:ssin"));
    attributeDesignators.add(new AttributeDesignator("urn:be:fgov:certified-namespace:ehealth",
            "urn:be:fgov:person:ssin:ehealth:1.0:doctor:nihii11"));
    attributeDesignators.add(new AttributeDesignator("urn:be:fgov:certified-namespace:ehealth",
            "urn:be:fgov:person:ssin:doctor:boolean"));

    Element assertion = client.requestAssertion(authnCertificate, authnPrivateKey, eHealthCertificate,
            eHealthPrivateKey, attributes, attributeDesignators);

    assertNotNull(assertion);

    String assertionString = client.toString(assertion);
    LOG.debug("SAML assertion: " + assertionString);
}

From source file:cloud.google.com.windows.example.ExampleCode.java

private String decryptPassword(String message, KeyPair keys) {
    try {//from   ww  w . ja v a 2  s. c  om
        // Add the bouncycastle provider - the built-in providers don't support RSA
        // with OAEPPadding.
        Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());

        // Get the appropriate cipher instance.
        Cipher rsa = Cipher.getInstance("RSA/NONE/OAEPPadding", "BC");

        // Add the private key for decryption.
        rsa.init(Cipher.DECRYPT_MODE, keys.getPrivate());

        // Decrypt the text.
        byte[] rawMessage = Base64.decodeBase64(message);
        byte[] decryptedText = rsa.doFinal(rawMessage);

        // The password was encoded using UTF8. Transform into string.
        return new String(decryptedText, "UTF8");
    } catch (Exception e) {
        e.printStackTrace();
        System.exit(1);
    }
    return "";
}

From source file:test.integ.be.fedict.hsm.jca.HSMProxySignatureTest.java

@Test
public void testAliasesAuthnCertCredential() throws Exception {
    LOG.debug("sign");
    // operate//from w  ww.  j av a 2  s  .  co  m
    Security.addProvider(new BeIDProvider());
    KeyStore beidKeyStore = KeyStore.getInstance("BeID");
    beidKeyStore.load(null);
    X509Certificate authnCert = (X509Certificate) beidKeyStore.getCertificate("Authentication");
    PrivateKey authnPrivateKey = (PrivateKey) beidKeyStore.getKey("Authentication", null);

    Security.addProvider(new HSMProxyProvider());
    KeyStore hsmProxyKeyStore = KeyStore.getInstance("HSMProxy");

    HSMProxyKeyStoreParameter keyStoreParameter = new HSMProxyKeyStoreParameter(authnPrivateKey, authnCert,
            // "https://www.e-contract.be/hsm-proxy-ws/dss",
            "http://localhost/hsm-proxy-ws/dss", new MyHSMProxyAudit());
    hsmProxyKeyStore.load(keyStoreParameter);

    Enumeration<String> aliasesEnum = hsmProxyKeyStore.aliases();
    assertNotNull(aliasesEnum);
    while (aliasesEnum.hasMoreElements()) {
        LOG.debug("alias: " + aliasesEnum.nextElement());
    }
}

From source file:org.globus.security.provider.TestPEMFileBasedKeyStore.java

@BeforeClass
public void setUp() throws Exception {

    ClassLoader loader = TestPEMFileBasedKeyStore.class.getClassLoader();

    String[] trustedCertFilenames = new String[] { "testTrustStore/1c3f2ca8.0", "testTrustStore/b38b4d8c.0" };
    this.trustedDirectory = new DirSetupUtil(trustedCertFilenames);
    this.trustedDirectory.createTempDirectory();
    this.trustedDirectory.copy();
    for (String trustedCertFilename : trustedCertFilenames) {
        InputStream in = null;/*from   w ww.j  a  v  a 2 s .c o  m*/
        try {
            in = loader.getResourceAsStream(trustedCertFilename);
            if (in == null) {
                throw new Exception("Unable to load: " + trustedCertFilename);
            }
            this.trustedCertificates.put(this.trustedDirectory.getFileSetupUtil(trustedCertFilename),
                    CertificateLoadUtil.loadCertificate(in));
        } finally {
            if (in != null) {
                in.close();
            }
        }
    }

    String[] defaultTrustedCert = new String[] { "testTrustStore/d1b603c3.0" };
    this.defaultTrustedDirectory = new DirSetupUtil(defaultTrustedCert);
    this.defaultTrustedDirectory.createTempDirectory();
    this.defaultTrustedDirectory.copy();
    for (String aDefaultTrustedCert : defaultTrustedCert) {
        InputStream in = null;
        try {
            in = loader.getResourceAsStream(aDefaultTrustedCert);
            if (in == null) {
                throw new Exception("Unable to load: " + aDefaultTrustedCert);
            }
            this.trustedCertificates.put(this.defaultTrustedDirectory.getFileSetupUtil(aDefaultTrustedCert),
                    CertificateLoadUtil.loadCertificate(in));
        } finally {
            if (in != null) {
                in.close();
            }
        }
    }

    //        String proxyFilename1 = "validatorTest/gsi2fullproxy.pem";
    String proxyFilename1 = "validatorTest/gsi3independentFromLimitedProxy.pem";
    this.proxyFile1 = new FileSetupUtil(proxyFilename1);
    this.proxyFile1.copyFileToTemp();
    this.proxyCertificates.put(this.proxyFile1, new X509Credential(loader.getResourceAsStream(proxyFilename1),
            loader.getResourceAsStream(proxyFilename1)));

    String proxyFilename2 = "validatorTest/gsi3FromPathOneProxy.pem";
    this.proxyFile2 = new FileSetupUtil(proxyFilename2);
    this.proxyFile2.copyFileToTemp();
    this.proxyCertificates.put(this.proxyFile2, new X509Credential(loader.getResourceAsStream(proxyFilename2),
            loader.getResourceAsStream(proxyFilename2)));

    String certFilename = "validatorTest/testeec2.pem";
    this.certFile = new FileSetupUtil(certFilename);
    this.certFile.copyFileToTemp();
    String keyFilename = "validatorTest/testeec2-private.pem";
    this.keyFile = new FileSetupUtil(keyFilename);
    this.keyFile.copyFileToTemp();
    String keyEncFilename = "validatorTest/testeec2-private-enc.pem";
    this.keyEncFile = new FileSetupUtil(keyEncFilename);
    this.keyEncFile.copyFileToTemp();

    Security.addProvider(new GlobusProvider());
}

From source file:org.globus.gsi.provider.TestPEMFileBasedKeyStore.java

@Before
public void setUp() throws Exception {

    ClassLoader loader = TestPEMFileBasedKeyStore.class.getClassLoader();

    String[] trustedCertFilenames = new String[] { "testTrustStore/1c3f2ca8.0", "testTrustStore/b38b4d8c.0" };
    this.trustedDirectory = new DirSetupUtil(trustedCertFilenames);
    this.trustedDirectory.createTempDirectory();
    this.trustedDirectory.copy();
    for (String trustedCertFilename : trustedCertFilenames) {
        InputStream in = null;/* www .jav a 2 s .  c  om*/
        try {
            in = loader.getResourceAsStream(trustedCertFilename);
            if (in == null) {
                throw new Exception("Unable to load: " + trustedCertFilename);
            }
            this.trustedCertificates.put(this.trustedDirectory.getFileSetupUtil(trustedCertFilename),
                    CertificateLoadUtil.loadCertificate(in));
        } finally {
            if (in != null) {
                in.close();
            }
        }
    }

    String[] defaultTrustedCert = new String[] { "testTrustStore/d1b603c3.0" };
    this.defaultTrustedDirectory = new DirSetupUtil(defaultTrustedCert);
    this.defaultTrustedDirectory.createTempDirectory();
    this.defaultTrustedDirectory.copy();
    for (String aDefaultTrustedCert : defaultTrustedCert) {
        InputStream in = null;
        try {
            in = loader.getResourceAsStream(aDefaultTrustedCert);
            if (in == null) {
                throw new Exception("Unable to load: " + aDefaultTrustedCert);
            }
            this.trustedCertificates.put(this.defaultTrustedDirectory.getFileSetupUtil(aDefaultTrustedCert),
                    CertificateLoadUtil.loadCertificate(in));
        } finally {
            if (in != null) {
                in.close();
            }
        }
    }

    // String proxyFilename1 = "validatorTest/gsi2fullproxy.pem";
    String proxyFilename1 = "validatorTest/gsi3independentFromLimitedProxy.pem";
    this.proxyFile1 = new FileSetupUtil(proxyFilename1);
    this.proxyFile1.copyFileToTemp();
    this.proxyCertificates.put(this.proxyFile1, new X509Credential(loader.getResourceAsStream(proxyFilename1),
            loader.getResourceAsStream(proxyFilename1)));

    String proxyFilename2 = "validatorTest/gsi3FromPathOneProxy.pem";
    this.proxyFile2 = new FileSetupUtil(proxyFilename2);
    this.proxyFile2.copyFileToTemp();
    this.proxyCertificates.put(this.proxyFile2, new X509Credential(loader.getResourceAsStream(proxyFilename2),
            loader.getResourceAsStream(proxyFilename2)));

    String certFilename = "validatorTest/testeec2.pem";
    this.certFile = new FileSetupUtil(certFilename);
    this.certFile.copyFileToTemp();
    String keyFilename = "validatorTest/testeec2-private.pem";
    this.keyFile = new FileSetupUtil(keyFilename);
    this.keyFile.copyFileToTemp();
    String keyEncFilename = "validatorTest/testeec2-private-enc.pem";
    this.keyEncFile = new FileSetupUtil(keyEncFilename);
    this.keyEncFile.copyFileToTemp();

    Security.addProvider(new GlobusProvider());
}

From source file:gov.nih.nci.cacis.nav.SendEncryptedMail.java

private void init() throws MessagingException, KeyStoreException {
    /* CommandCap setting */
    setCommandCap();/*from  w w  w. j  ava2  s  .  co  m*/

    /* Add BC */
    Security.addProvider(new BouncyCastleProvider());

    if (!StringUtils.isEmpty(truststore)) {
        trustStoreRef = getTrustStoreRef();
    }
}