1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
/*-
* ============LICENSE_START=======================================================
* SDC
* ================================================================================
* Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
* ================================================================================
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
* ============LICENSE_END=========================================================
*/
package org.openecomp.core.nosqldb.impl.cassandra;
import com.google.common.base.Optional;
import com.datastax.driver.core.Cluster;
import com.datastax.driver.core.SSLOptions;
import com.datastax.driver.core.Session;
import org.openecomp.core.nosqldb.util.CassandraUtils;
import java.io.FileInputStream;
import java.io.IOException;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertificateException;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManagerFactory;
public class CassandraSessionFactory {
public static Session getSession() {
return ReferenceHolder.CASSANDRA;
}
/**
* New cassandra session session.
*
* @return the session
*/
public static Session newCassandraSession() {
Cluster.Builder builder = Cluster.builder();
String[] addresses = CassandraUtils.getAddresses();
for (String address : addresses) {
builder.addContactPoint(address);
}
Boolean isSsl = CassandraUtils.isSsl();
if (isSsl) {
builder.withSSL(getSslOptions().get());
}
int port = CassandraUtils.getCassandraPort();
if (port > 0) {
builder.withPort(port);
}
//Check if user/pass
Boolean isAuthenticate = CassandraUtils.isAuthenticate();
if (isAuthenticate) {
builder.withCredentials(CassandraUtils.getUser(), CassandraUtils.getPassword());
}
Cluster cluster = builder.build();
String keyStore = CassandraUtils.getKeySpace();
return cluster.connect(keyStore);
}
private static Optional<SSLOptions> getSslOptions() {
Optional<String> truststorePath = Optional.of(CassandraUtils.getTruststore());
Optional<String> truststorePassword = Optional.of(CassandraUtils.getTruststorePassword());
if (truststorePath.isPresent() && truststorePassword.isPresent()) {
SSLContext context;
try {
context = getSslContext(truststorePath.get(), truststorePassword.get());
} catch (UnrecoverableKeyException | KeyManagementException
| NoSuchAlgorithmException | KeyStoreException | CertificateException | IOException e0) {
throw new RuntimeException(e0);
}
String[] css = new String[]{"TLS_RSA_WITH_AES_128_CBC_SHA"};
return Optional.of(new SSLOptions(context, css));
}
return Optional.absent();
}
private static SSLContext getSslContext(String truststorePath, String truststorePassword)
throws NoSuchAlgorithmException, KeyStoreException, CertificateException, IOException,
UnrecoverableKeyException, KeyManagementException {
FileInputStream tsf = null;
SSLContext ctx = null;
try {
tsf = new FileInputStream(truststorePath);
ctx = SSLContext.getInstance("SSL");
KeyStore ts = KeyStore.getInstance("JKS");
ts.load(tsf, truststorePassword.toCharArray());
TrustManagerFactory tmf =
TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
tmf.init(ts);
ctx.init(null, tmf.getTrustManagers(), new SecureRandom());
} catch (Exception e0) {
e0.printStackTrace();
} finally {
tsf.close();
}
return ctx;
}
private static class ReferenceHolder {
private static final Session CASSANDRA = newCassandraSession();
}
}
|
