Examples of javax.naming.ldap.StartTlsResponse

javax.naming.ldap.StartTlsResponse

etf.org/rfc/rfc2830.txt">Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security The object identifier for StartTLS is 1.3.6.1.4.1.1466.20037 and no extended response value is defined.

The Start TLS extended request and response are used to establish a TLS connection over the existing LDAP connection associated with the JNDI context on which extendedOperation() is invoked. Typically, a JNDI program uses the StartTLS extended request and response classes as follows.

 import javax.naming.ldap.*; // Open an LDAP association LdapContext ctx = new InitialLdapContext(); // Perform a StartTLS extended operation StartTlsResponse tls = (StartTlsResponse) ctx.extendedOperation(new StartTlsRequest()); // Open a TLS connection (over the existing LDAP association) and get details // of the negotiated TLS session: cipher suite, peer certificate, ... SSLSession session = tls.negotiate(); // ... use ctx to perform protected LDAP operations // Close the TLS connection (revert back to the underlying LDAP association) tls.close(); // ... use ctx to perform unprotected LDAP operations // Close the LDAP association ctx.close;

@since 1.4 @see StartTlsRequest @author Vincent Ryan

            LOG.debug( "About to get initial context" );
            LdapContext ctx = new InitialLdapContext( env, null );


            // Start TLS
            LOG.debug( "About send startTls extended operation" );
            StartTlsResponse tls = ( StartTlsResponse ) ctx.extendedOperation( new StartTlsRequest() );
            LOG.debug( "Extended operation issued" );
            tls.setHostnameVerifier( new HostnameVerifier()
            {
                public boolean verify( String hostname, SSLSession session )
                {
                    return true;
                }
            } );
            LOG.debug( "TLS negotion about to begin" );
            tls.negotiate( ReloadableSSLSocketFactory.getDefault() );


            search( ii, ctx );


            // Don't call tls.close(), sometimes it hangs in socket.read() operation:
            // Stack trace:

View Full Code Here

        env.put( "java.naming.provider.url", "ldap://localhost:" + getLdapServer().getPort() );
        env.put( "java.naming.security.principal", "uid=admin,ou=system" );
        env.put( "java.naming.security.credentials", "secret" );
        env.put( "java.naming.security.authentication", "simple" );
        LdapContext ctx = new InitialLdapContext( env, null );
        StartTlsResponse tls = ( StartTlsResponse ) ctx.extendedOperation( new StartTlsRequest() );
        tls.setHostnameVerifier( new HostnameVerifier() {
            public boolean verify( String hostname, SSLSession session )
            {
                return true;
            } 
        } );
        tls.negotiate( BogusSSLContextFactory.getInstance( false ).getSocketFactory() );


        // create a new certificate
        String newIssuerDN = "cn=new_issuer_dn";
        String newSubjectDN = "cn=new_subject_dn";
        Entry entry = getLdapServer().getDirectoryService().getAdminSession().lookup(
            new Dn( "uid=admin,ou=system" ) );
        TlsKeyGenerator.addKeyPair( entry, newIssuerDN, newSubjectDN, "RSA" );


        // now update the certificate (over the wire)
        ModificationItem[] mods = new ModificationItem[3];
        mods[0] = new ModificationItem( DirContext.REPLACE_ATTRIBUTE, new BasicAttribute(
            TlsKeyGenerator.PRIVATE_KEY_AT, entry.get( TlsKeyGenerator.PRIVATE_KEY_AT ).getBytes() ) );
        mods[1] = new ModificationItem( DirContext.REPLACE_ATTRIBUTE, new BasicAttribute(
            TlsKeyGenerator.PUBLIC_KEY_AT, entry.get( TlsKeyGenerator.PUBLIC_KEY_AT ).getBytes() ) );
        mods[2] = new ModificationItem( DirContext.REPLACE_ATTRIBUTE, new BasicAttribute(
            TlsKeyGenerator.USER_CERTIFICATE_AT, entry.get( TlsKeyGenerator.USER_CERTIFICATE_AT ).getBytes() ) );
        ctx.modifyAttributes( "uid=admin,ou=system", mods );
        ctx.close();


        getLdapServer().reloadSslContext();
        
        // create a new secure connection
        ctx = new InitialLdapContext( env, null );
        tls = ( StartTlsResponse ) ctx.extendedOperation( new StartTlsRequest() );
        tls.setHostnameVerifier( new HostnameVerifier() {
            public boolean verify( String hostname, SSLSession session )
            {
                return true;
            } 
        } );
        tls.negotiate( BogusSSLContextFactory.getInstance( false ).getSocketFactory() );


        // check the received certificate, it must contain the updated server certificate
        X509Certificate[] lastReceivedServerCertificates = BogusTrustManagerFactory.lastReceivedServerCertificates;
        assertNotNull( lastReceivedServerCertificates );
        assertEquals( 1, lastReceivedServerCertificates.length );

View Full Code Here

        LOG.debug( "About to get initial context" );
        LdapContext ctx = new InitialLdapContext( env, null );


        // Start TLS
        LOG.debug( "About send startTls extended operation" );
        StartTlsResponse tls = ( StartTlsResponse ) ctx.extendedOperation( new StartTlsRequest() );
        LOG.debug( "Extended operation issued" );
        tls.setHostnameVerifier( new HostnameVerifier() {
            public boolean verify( String hostname, SSLSession session )
            {
                return true;
            } 
        } );
        LOG.debug( "TLS negotion about to begin" );
        tls.negotiate( ReloadableSSLSocketFactory.getDefault() );
        return ctx;
    }

View Full Code Here

            LOG.debug( "About to get initial context" );
            LdapContext ctx = new InitialLdapContext( env, null );
    
            // Start TLS
            LOG.debug( "About send startTls extended operation" );
            StartTlsResponse tls = ( StartTlsResponse ) ctx.extendedOperation( new StartTlsRequest() );
            LOG.debug( "Extended operation issued" );
            tls.setHostnameVerifier( new HostnameVerifier() {
                public boolean verify( String hostname, SSLSession session )
                {
                    return true;
                } 
            } );
            LOG.debug( "TLS negotion about to begin" );
            tls.negotiate( ReloadableSSLSocketFactory.getDefault() );


            search( ii, ctx );


            // Don't call tls.close(), sometimes it hangs in socket.read() operation:
            // Stack trace:

View Full Code Here

     */
    public void testExtendedOperation002() throws Exception {
        System.setProperty(Context.INITIAL_CONTEXT_FACTORY,
                        "org.apache.harmony.jndi.tests.javax.naming.spi.mock.ldap.MockContextFactory");
        InitialLdapContext x = new InitialLdapContext();
        StartTlsResponse f = (StartTlsResponse)x.extendedOperation(new StartTlsRequest());
        assertNotNull(f);
        x.close();
    }

View Full Code Here

public class StartTlsResponseTest extends TestCase {


    public void testAll() {
        assertEquals("1.3.6.1.4.1.1466.20037", StartTlsResponse.OID);


        StartTlsResponse str = new MockStartTlsResponse();


        assertEquals(StartTlsResponse.OID, str.getID());
        assertNull(str.getEncodedValue());
    }

View Full Code Here


                    if ( useStartTLS )
                    {
                        try
                        {
                            StartTlsResponse tls = ( StartTlsResponse ) context
                                .extendedOperation( new StartTlsRequest() );
                            tls.setHostnameVerifier( new HostnameVerifier()
                            {
                                public boolean verify( String arg0, SSLSession arg1 )
                                {
                                    return true;
                                }
                            } );
                            tls.negotiate( new DummySSLSocketFactory() );


                        }
                        catch ( Exception e )
                        {
                            namingException = new NamingException( e.getMessage() != null ? e.getMessage()

View Full Code Here

    protected DirContext getDirContext() throws NamingException, CommunicationException, ConnectException {
        DirContext dirCtx = null;
        try {
      if (this.isTlsSecurityConnection()) {
        dirCtx = new InitialLdapContext(this.getParams(true), null);
        StartTlsResponse tls = (StartTlsResponse) ((InitialLdapContext) dirCtx).extendedOperation(new StartTlsRequest());
        if (this.isTlsFreeSecurityConnection()) {
          // Set the (our) HostVerifier
          tls.setHostnameVerifier(new MyTLSHostnameVerifier());
          SSLSocketFactory sslsf = null;
          try {
            TrustManager[] tm = new TrustManager [] {new MyX509TrustManager()};
            SSLContext sslC = SSLContext.getInstance("TLS");
            sslC.init(null, tm, null);
            sslsf = sslC.getSocketFactory();
          } catch(NoSuchAlgorithmException nSAE) {
            ApsSystemUtils.logThrowable(nSAE, this, "Hier: " + nSAE.getMessage());
          } catch(KeyManagementException kME) {
            ApsSystemUtils.logThrowable(kME, this, "Hier: " + kME.getMessage());
          }
          tls.negotiate(sslsf);
        } else {
          tls.negotiate();
        }
        if (null != this.getSecurityPrincipal() && null != this.getSecurityCredentials()) {
          dirCtx.addToEnvironment(Context.SECURITY_PRINCIPAL, this.getSecurityPrincipal());
          dirCtx.addToEnvironment(Context.SECURITY_CREDENTIALS, this.getSecurityCredentials());
          dirCtx.addToEnvironment(Context.SECURITY_AUTHENTICATION, "simple");

View Full Code Here


                    if ( useStartTLS )
                    {
                        try
                        {
                            StartTlsResponse tls = ( StartTlsResponse ) context
                                .extendedOperation( new StartTlsRequest() );
                            // deactivate host name verification at this level,
                            // host name verification is done in StudioTrustManager
                            tls.setHostnameVerifier( new HostnameVerifier()
                            {
                                public boolean verify( String hostname, SSLSession session )
                                {
                                    return true;
                                }
                            } );
                            if ( validateCertificates )
                            {
                                tls.negotiate( StudioSSLSocketFactory.getDefault() );
                            }
                            else
                            {
                                tls.negotiate( DummySSLSocketFactory.getDefault() );
                            }
                        }
                        catch ( Exception e )
                        {
                            namingException = new NamingException( e.getMessage() != null ? e.getMessage()

View Full Code Here

    final HostnameVerifier fVerifier = verifier;


    Thread t = new Thread(new Runnable() {
      public void run() {
        try {
          StartTlsResponse tls;


          InitialLdapContext result = new InitialLdapContext(fEnv, null);


          tls = (StartTlsResponse) result.extendedOperation(
              new StartTlsRequest());
          tls.setHostnameVerifier(fVerifier);
          try
          {
            tls.negotiate(new TrustedSocketFactory(fTrustManager,fKeyManager));
          }
          catch(IOException x) {
            NamingException xx;
            xx = new CommunicationException(
                "Failed to negotiate Start TLS operation");

View Full Code Here

0 1 2 3 4

TOP

Related Classes of javax.naming.ldap.StartTlsResponse

com.agiletec.plugins.jpldap.aps.system.services.user.LdapUserDAO

com.founder.fix.fixflow.expand.connector.LDAPConnector.LDAPConnector

de.sub.goobi.helper.ldap.Ldap

org.apache.directory.ldapstudio.browser.core.internal.model.JNDIConnectionContext

org.apache.directory.server.ssl.StartTlsConfidentialityIT

org.apache.directory.server.ssl.StartTlsIT

org.apache.directory.server.ssl.StartTlsUpdateCertificateIT

org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper

org.apache.harmony.jndi.tests.javax.naming.ldap.StartTlsRequestTest

org.apache.harmony.jndi.tests.javax.naming.ldap.StartTlsResponseTest

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.