Package com.sankcrm.erp.apisix.letsencrypt

Class LetsEncryptTLSCertCAProvider

java.lang.Object

com.sankcrm.erp.apisix.letsencrypt.LetsEncryptTLSCertCAProvider

All Implemented Interfaces:

TLSCertCAProvider

@AutoService(TLSCertCAProvider.class)
public class LetsEncryptTLSCertCAProvider
extends Object
implements TLSCertCAProvider

Let's Encrypt CA供应方

Since:

3.1.6

Author:

zhsxin

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	LetsEncryptTLSCertCAProvider.AcmeHandle	Opaque ACME handle payload.

Nested classes/interfaces inherited from interface com.sankcrm.erp.apisix.infrastructure.tlscert.ca.TLSCertCAProvider

TLSCertCAProvider.Utils

Constructor Summary

Constructors

Constructor	Description
LetsEncryptTLSCertCAProvider()

Method Summary

Modifier and Type	Method	Description
protected KeyPair	accountKeyPair(TLSCertCA tlsCertCA, LetsEncryptTLSCertCASecret secret)
protected Path	accountKeyPath(TLSCertCA tlsCertCA)
TLSCertCAOrder	apply(TLSCertCA tlsCertCA, TLSCertCAApplyRequest request)	申请证书订单。
protected String	bouncyCastleLocation()
protected String	chainPem(List<X509Certificate> certificates)
protected org.shredzone.acme4j.challenge.Challenge	challenge(org.shredzone.acme4j.Login login, String challengeHandle)
protected List<TLSCertCAChallenge>	challenges(org.shredzone.acme4j.Order order, List<TLSCertCAChallengeType> challengeTypes)
protected void	checkBouncyCastleVersion()
protected void	checkChallengeTypes(List<String> domains, List<TLSCertCAChallengeType> challengeTypes)
Class<? extends TLSCertCASecret>	confType()
protected com.sankcrm.erp.common.sensitive.SecretKey	csrPem(org.shredzone.acme4j.Order order, KeyPair domainKeyPair)
protected KeyPair	domainKeyPair(String keyAlgorithm)
protected List<String>	domains(String domain, List<String> subjectAlternativeNames)
TLSCertCADownload	download(TLSCertCA tlsCertCA, TLSCertCADownloadRequest request)	下载证书。
protected String	ecCurve(String algorithm)
protected void	ensureBouncyCastleProvider()
protected void	executeCsr(org.shredzone.acme4j.Order order, com.sankcrm.erp.common.sensitive.SecretKey csrPem)
TLSCertCAOrder	finalize(TLSCertCA tlsCertCA, TLSCertCAFinalizeRequest request)	完成证书订单。
protected LetsEncryptTLSCertCAProvider.AcmeHandle	handle(String handle, String type)
protected String	handle(String type, String location, String challengeType, String domain)
protected com.sankcrm.erp.common.exception.CoreRuntimeException	invalid(String message, Exception e)
protected KeyPair	keyPair(com.sankcrm.erp.common.sensitive.SecretKey key)
protected com.sankcrm.erp.common.sensitive.SecretKey	keyPairPem(KeyPair keyPair)
protected org.shredzone.acme4j.Login	login(TLSCertCA tlsCertCA, LetsEncryptTLSCertCASecret secret)
protected org.shredzone.acme4j.Order	order(org.shredzone.acme4j.Login login, String orderHandle)
protected String	pem(X509Certificate certificate)
TLSCertCADesc	provider()	CA描述
TLSCertCAOrder	renew(TLSCertCA tlsCertCA, TLSCertCARenewRequest request)	续期证书订单。
protected int	rsaKeySize(String algorithm)
protected LetsEncryptTLSCertCASecret	secret(TLSCertCA tlsCertCA)
protected LetsEncryptTLSCertCASecret	secret(TLSCertCASecret secret)
protected String	status(org.shredzone.acme4j.Status status)
protected Duration	timeout(Duration timeout)
protected TLSCertCAChallenge	toChallenge(org.shredzone.acme4j.challenge.Challenge challenge, String domain)
protected TLSCertCAOrder	toOrder(org.shredzone.acme4j.Order order, List<TLSCertCAChallengeType> challengeTypes)
TLSCertCAOrder	validate(TLSCertCA tlsCertCA, TLSCertCAValidateRequest request)	触发并等待验证。

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

LetsEncryptTLSCertCAProvider

public LetsEncryptTLSCertCAProvider()

Method Details

provider

public TLSCertCADesc provider()

Description copied from interface: TLSCertCAProvider

CA描述

Specified by:

provider in interface TLSCertCAProvider

Returns:

TLSCertProviderDesc

confType

public Class<? extends TLSCertCASecret> confType()

Specified by:

confType in interface TLSCertCAProvider

apply

public TLSCertCAOrder apply(TLSCertCA tlsCertCA,
 TLSCertCAApplyRequest request)
                     throws com.sankcrm.erp.common.exception.CoreException

Description copied from interface: TLSCertCAProvider

申请证书订单。

Specified by:

apply in interface TLSCertCAProvider

Parameters:

tlsCertCA - TLS证书CA

request - 申请请求

Returns:

证书订单

Throws:

com.sankcrm.erp.common.exception.CoreException - 申请异常

renew

public TLSCertCAOrder renew(TLSCertCA tlsCertCA,
 TLSCertCARenewRequest request)
                     throws com.sankcrm.erp.common.exception.CoreException

Description copied from interface: TLSCertCAProvider

续期证书订单。

Specified by:

renew in interface TLSCertCAProvider

Parameters:

tlsCertCA - TLS证书CA

request - 续期请求

Returns:

证书订单

Throws:

com.sankcrm.erp.common.exception.CoreException - 续期异常

validate

public TLSCertCAOrder validate(TLSCertCA tlsCertCA,
 TLSCertCAValidateRequest request)
                        throws com.sankcrm.erp.common.exception.CoreException

Description copied from interface: TLSCertCAProvider

触发并等待验证。

Specified by:

validate in interface TLSCertCAProvider

Parameters:

tlsCertCA - TLS证书CA

request - 验证请求

Returns:

最新证书订单

Throws:

com.sankcrm.erp.common.exception.CoreException - 验证异常

finalize

public TLSCertCAOrder finalize(TLSCertCA tlsCertCA,
 TLSCertCAFinalizeRequest request)
                        throws com.sankcrm.erp.common.exception.CoreException

Description copied from interface: TLSCertCAProvider

完成证书订单。

Specified by:

finalize in interface TLSCertCAProvider

Parameters:

tlsCertCA - TLS证书CA

request - 完成请求

Returns:

最新证书订单

Throws:

com.sankcrm.erp.common.exception.CoreException - 完成异常

download

public TLSCertCADownload download(TLSCertCA tlsCertCA,
 TLSCertCADownloadRequest request)
                           throws com.sankcrm.erp.common.exception.CoreException

Description copied from interface: TLSCertCAProvider

下载证书。

Specified by:

download in interface TLSCertCAProvider

Parameters:

tlsCertCA - TLS证书CA

request - 下载请求

Returns:

证书内容

Throws:

com.sankcrm.erp.common.exception.CoreException - 下载异常

secret

protected LetsEncryptTLSCertCASecret secret(TLSCertCASecret secret)
                                     throws com.sankcrm.erp.bus.exception.CommandInvalidException

Throws:

com.sankcrm.erp.bus.exception.CommandInvalidException

secret

protected LetsEncryptTLSCertCASecret secret(TLSCertCA tlsCertCA)
                                     throws com.sankcrm.erp.bus.exception.CommandInvalidException

Throws:

com.sankcrm.erp.bus.exception.CommandInvalidException

login

protected org.shredzone.acme4j.Login login(TLSCertCA tlsCertCA,
 LetsEncryptTLSCertCASecret secret)
                                    throws org.shredzone.acme4j.exception.AcmeException,
IOException

Throws:

org.shredzone.acme4j.exception.AcmeException

IOException

order

protected org.shredzone.acme4j.Order order(org.shredzone.acme4j.Login login,
 String orderHandle)
                                    throws IOException

Throws:

IOException

challenge

protected org.shredzone.acme4j.challenge.Challenge challenge(org.shredzone.acme4j.Login login,
 String challengeHandle)
                                                      throws IOException

Throws:

IOException

toOrder

protected TLSCertCAOrder toOrder(org.shredzone.acme4j.Order order,
 List<TLSCertCAChallengeType> challengeTypes)

challenges

protected List<TLSCertCAChallenge> challenges(org.shredzone.acme4j.Order order,
 List<TLSCertCAChallengeType> challengeTypes)

toChallenge

protected TLSCertCAChallenge toChallenge(org.shredzone.acme4j.challenge.Challenge challenge,
 String domain)

domains

protected List<String> domains(String domain,
 List<String> subjectAlternativeNames)
                        throws com.sankcrm.erp.bus.exception.CommandInvalidException

Throws:

com.sankcrm.erp.bus.exception.CommandInvalidException

checkChallengeTypes

protected void checkChallengeTypes(List<String> domains,
 List<TLSCertCAChallengeType> challengeTypes)
                            throws com.sankcrm.erp.bus.exception.CommandInvalidException

Throws:

com.sankcrm.erp.bus.exception.CommandInvalidException

timeout

protected Duration timeout(Duration timeout)

status

protected String status(org.shredzone.acme4j.Status status)

keyPair

protected KeyPair keyPair(com.sankcrm.erp.common.sensitive.SecretKey key)
                   throws IOException

Throws:

IOException

domainKeyPair

protected KeyPair domainKeyPair(String keyAlgorithm)

rsaKeySize

protected int rsaKeySize(String algorithm)

ecCurve

protected String ecCurve(String algorithm)

keyPairPem

protected com.sankcrm.erp.common.sensitive.SecretKey keyPairPem(KeyPair keyPair)
                                                         throws IOException

Throws:

IOException

csrPem

protected com.sankcrm.erp.common.sensitive.SecretKey csrPem(org.shredzone.acme4j.Order order,
 KeyPair domainKeyPair)
                                                     throws IOException

Throws:

IOException

executeCsr

protected void executeCsr(org.shredzone.acme4j.Order order,
 com.sankcrm.erp.common.sensitive.SecretKey csrPem)
                   throws org.shredzone.acme4j.exception.AcmeException,
IOException

Throws:

org.shredzone.acme4j.exception.AcmeException

IOException

accountKeyPair

protected KeyPair accountKeyPair(TLSCertCA tlsCertCA,
 LetsEncryptTLSCertCASecret secret)
                          throws IOException

Throws:

IOException

accountKeyPath

protected Path accountKeyPath(TLSCertCA tlsCertCA)

ensureBouncyCastleProvider

protected void ensureBouncyCastleProvider()

checkBouncyCastleVersion

protected void checkBouncyCastleVersion()

bouncyCastleLocation

protected String bouncyCastleLocation()

handle

protected String handle(String type,
 String location,
 String challengeType,
 String domain)

handle

protected LetsEncryptTLSCertCAProvider.AcmeHandle handle(String handle,
 String type)
                                                  throws IOException

Throws:

IOException

invalid

protected com.sankcrm.erp.common.exception.CoreRuntimeException invalid(String message,
 Exception e)

chainPem

protected String chainPem(List<X509Certificate> certificates)
                   throws Exception

Throws:

Exception

pem

protected String pem(X509Certificate certificate)
              throws Exception

Throws:

Exception