com.sun.enterprise.security.store
Class PasswordAdapter

java.lang.Object
  com.sun.enterprise.security.store.PasswordAdapter

public final class PasswordAdapter
extends java.lang.Object

This class implements an adapter for password manipulation a JCEKS. Note that although it uses locks ('synchronized'), it tends to be created anew with each use, an inefficient and potentially problematic use that could create more than one instance accessing the same keystore at a time.

Field Summary

static java.lang.String

PASSWORD_ALIAS_KEYSTORE

Constructor Summary

PasswordAdapter(char[] masterPassword)
Construct a PasswordAdapter with given Shared Master Password, SMP using the default keyfile (domain-passwords.jceks)

PasswordAdapter(java.lang.String keyStoreFileName, char[] masterPassword)
Construct a PasswordAdapter with given Shared Master Password, SMP.

Method Summary

boolean	aliasExists(java.lang.String alias) See if the given alias exists
void	changePassword(char[] newMasterPassword) Changes the keystore password, including the encoding of the keys within it.
byte[]	decrypt(byte[] encrypted, java.lang.String algorithm)
java.util.Enumeration<java.lang.String>	getAliases() Return the aliases from the keystore.
java.lang.String	getPasswordForAlias(java.lang.String alias) This methods returns password String for a given alias and SMP.
javax.crypto.SecretKey	getPasswordSecretKeyForAlias(java.lang.String alias) This methods returns password SecretKey for a given alias and SMP.
void	removeAlias(java.lang.String alias) Remove an alias from the keystore
void	setPasswordForAlias(java.lang.String alias, byte[] keyBytes) This methods set alias, secretKey into JCEKS keystore.
void	writeStore() Writes the keystore to disk

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PASSWORD_ALIAS_KEYSTORE

public static final java.lang.String PASSWORD_ALIAS_KEYSTORE

See Also:

Constant Field Values

Constructor Detail

PasswordAdapter

public PasswordAdapter(char[] masterPassword)
                throws java.security.cert.CertificateException,
                       java.io.IOException,
                       java.security.KeyStoreException,
                       java.security.NoSuchAlgorithmException

Construct a PasswordAdapter with given Shared Master Password, SMP using the default keyfile (domain-passwords.jceks)

Parameters:

smp - master password

Throws:

java.security.cert.CertificateException

java.io.IOException

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

PasswordAdapter

public PasswordAdapter(java.lang.String keyStoreFileName,
                       char[] masterPassword)
                throws java.security.cert.CertificateException,
                       java.io.IOException,
                       java.security.KeyStoreException,
                       java.security.NoSuchAlgorithmException

Construct a PasswordAdapter with given Shared Master Password, SMP.

Parameters:

keyfileName - the jceks key file name

smp - master password

Throws:

java.security.cert.CertificateException

java.io.IOException

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

Method Detail

getPasswordForAlias

public java.lang.String getPasswordForAlias(java.lang.String alias)
                                     throws java.security.KeyStoreException,
                                            java.security.NoSuchAlgorithmException,
                                            java.security.UnrecoverableKeyException

This methods returns password String for a given alias and SMP.

Parameters:

alias -

Returns:

corresponding password or null if the alias does not exist.

Throws:

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

java.security.UnrecoverableKeyException

getPasswordSecretKeyForAlias

public javax.crypto.SecretKey getPasswordSecretKeyForAlias(java.lang.String alias)
                                                    throws java.security.KeyStoreException,
                                                           java.security.NoSuchAlgorithmException,
                                                           java.security.UnrecoverableKeyException

This methods returns password SecretKey for a given alias and SMP.

Parameters:

alias -

Returns:

corresponding password SecretKey or null if the alias does not exist.

Throws:

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

java.security.UnrecoverableKeyException

aliasExists

public boolean aliasExists(java.lang.String alias)
                    throws java.security.KeyStoreException

See if the given alias exists

Parameters:

alias - the alias name

Returns:

true if the alias exists in the keystore

Throws:

java.security.KeyStoreException

removeAlias

public void removeAlias(java.lang.String alias)
                 throws java.security.KeyStoreException,
                        java.io.IOException,
                        java.security.NoSuchAlgorithmException,
                        java.security.cert.CertificateException,
                        java.security.UnrecoverableKeyException

Remove an alias from the keystore

Parameters:

alias - The name of the alias to remove

Throws:

java.security.KeyStoreException

java.io.IOException

java.security.NoSuchAlgorithmException

java.security.cert.CertificateException

java.security.UnrecoverableKeyException

getAliases

public java.util.Enumeration<java.lang.String> getAliases()
                                                   throws java.security.KeyStoreException

Return the aliases from the keystore.

Returns:

An enumeration containing all the aliases in the keystore.

Throws:

java.security.KeyStoreException

writeStore

public void writeStore()
                throws java.security.KeyStoreException,
                       java.io.IOException,
                       java.security.NoSuchAlgorithmException,
                       java.security.cert.CertificateException,
                       java.security.UnrecoverableKeyException

Writes the keystore to disk

Throws:

java.security.KeyStoreException

java.io.IOException

java.security.NoSuchAlgorithmException

java.security.cert.CertificateException

java.security.UnrecoverableKeyException

setPasswordForAlias

public void setPasswordForAlias(java.lang.String alias,
                                byte[] keyBytes)
                         throws java.security.cert.CertificateException,
                                java.io.IOException,
                                java.security.KeyStoreException,
                                java.security.NoSuchAlgorithmException,
                                java.security.UnrecoverableKeyException

This methods set alias, secretKey into JCEKS keystore.

Parameters:

alias -

secretKey -

Throws:

java.security.cert.CertificateException

java.io.IOException

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

java.security.UnrecoverableKeyException

changePassword

public void changePassword(char[] newMasterPassword)
                    throws java.security.KeyStoreException,
                           java.io.IOException,
                           java.security.NoSuchAlgorithmException,
                           java.security.cert.CertificateException,
                           java.security.UnrecoverableKeyException

Changes the keystore password, including the encoding of the keys within it.

There are several error conditions that could occur:

• Problem extracting existing alias keys with new ones.
• Problem writing the keystore, including destroying it if an I/O problem occurs.

For these reasons, make a new KeyStore and write it, then swap it with the old one.

Parameters:

newpassword - the new keystore password

Throws:

java.security.KeyStoreException

java.io.IOException

java.security.NoSuchAlgorithmException

java.security.cert.CertificateException

java.security.UnrecoverableKeyException

decrypt

public byte[] decrypt(byte[] encrypted,
                      java.lang.String algorithm)
               throws java.security.NoSuchAlgorithmException,
                      java.io.IOException,
                      javax.crypto.NoSuchPaddingException,
                      java.security.InvalidKeyException,
                      java.security.InvalidAlgorithmParameterException,
                      javax.crypto.IllegalBlockSizeException,
                      javax.crypto.BadPaddingException

Throws:

java.security.NoSuchAlgorithmException

java.io.IOException

javax.crypto.NoSuchPaddingException

java.security.InvalidKeyException

java.security.InvalidAlgorithmParameterException

javax.crypto.IllegalBlockSizeException

javax.crypto.BadPaddingException