Class ConfiguredDosetaKeyRepository
java.lang.Object
org.jboss.resteasy.security.doseta.ConfiguredDosetaKeyRepository
- All Implemented Interfaces:
KeyRepository
For use when you want repository created via a context object, i.e., when defined within a WAR file.
For WAR files, it will look in context parameters and servlet/filter init params for doseta variables.
Private keys are stored in a java keystore. Public keys may be stored in either a java keystore or discovered via DNS.
- Version:
- $Revision: 1 $
- Author:
- Bill Burke
-
Field Summary
Modifier and TypeFieldDescriptionprotected DosetaKeyRepository
static String
Public keys are cached.static String
Context parameter.static String
Context parameter.static String
true|false.static String
Context parameter.static String
Context parameter.static String
Context parameter.static String
Context parameter. -
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionfindPrivateKey
(DKIMSignature header) findPublicKey
(DKIMSignature header) What should be the default domain to use when creating signature headerWhat should be the default selector to use when creating signature header
-
Field Details
-
RESTEASY_KEY_STORE_FILE_NAME
Context parameter.Hardcoded file path to your keystore
-
RESTEASY_KEY_STORE_CLASSPATH
Context parameter.Find the java keystore by searching the classpath. This points to a file on the classpath
-
RESTEASY_KEY_STORE_PASSWORD
Context parameter.Password of the java keystore.
-
RESTEASY_DOSETA_USE_DNS
Context parameter.true|false. Whether or not to use DNS to discover public keys. By default looks in keystore
-
RESTEASY_DOSETA_DNS_URI
Context parameter.If you need to retrieve from a specific DNS server specify the url
dns://hostname:port
-
RESTEASY_DOSETA_DEFAULT_PRIVATE_DOMAIN
Context parameter.When signing, if no domain is specified, use this domain.
-
RESTEASY_DOSETA_CACHE_TIMEOUT
Public keys are cached. Specify a timeout for these keys. -
RESTEASY_DOSETA_PRINCIPAL_FOR_PRIVATE
true|false. When signing, if no selector is specified, use the user principal as the selector value. -
keyRepository
-
-
Constructor Details
-
ConfiguredDosetaKeyRepository
-
-
Method Details
-
findPrivateKey
- Specified by:
findPrivateKey
in interfaceKeyRepository
-
findPublicKey
- Specified by:
findPublicKey
in interfaceKeyRepository
-
getDefaultPrivateSelector
Description copied from interface:KeyRepository
What should be the default selector to use when creating signature header- Specified by:
getDefaultPrivateSelector
in interfaceKeyRepository
- Returns:
- null if none
-
getDefaultPrivateDomain
Description copied from interface:KeyRepository
What should be the default domain to use when creating signature header- Specified by:
getDefaultPrivateDomain
in interfaceKeyRepository
- Returns:
- null if none
-