org.dcache.xrootd.plugins.authn.gsi

Class GSIAuthenticationHandler

java.lang.Object

org.dcache.xrootd.plugins.authn.gsi.GSIAuthenticationHandler

All Implemented Interfaces:

AuthenticationHandler

public class GSIAuthenticationHandler
extends Object
implements AuthenticationHandler

Handler for xrootd-security message exchange based on the GSI protocol. Loosely based on the first reverse-engineering of xrootdsec-gsi, done by Martin Radicke.

Author:

tzangerl

Field Summary

Fields

Modifier and Type	Field and Description
static String	CRYPTO_MODE
static String	PROTOCOL
static String	PROTOCOL_VERSION
static String	SUPPORTED_CIPHER_ALGORITHMS for now, we limit ourselves to AES-128 with CBC blockmode.
static String	SUPPORTED_DIGESTS

Constructor Summary

Constructors

Constructor and Description
GSIAuthenticationHandler(X509Certificate hostCertificate, PrivateKey privateKey, org.globus.gsi.TrustedCertificates trustedCerts, org.globus.gsi.CertificateRevocationLists crls)

Method Summary

Methods

Modifier and Type	Method and Description
AbstractResponseMessage	authenticate(AuthenticationRequest request) dispatcher function that initializes the diffie-hellman key agreement session, checks the request for the correct protocol and calls the actual handler functions.
String	getProtocol()
Subject	getSubject()
boolean	isCompleted()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PROTOCOL

public static final String PROTOCOL

See Also:

Constant Field Values

PROTOCOL_VERSION

public static final String PROTOCOL_VERSION

See Also:

Constant Field Values

CRYPTO_MODE

public static final String CRYPTO_MODE

See Also:

Constant Field Values

SUPPORTED_CIPHER_ALGORITHMS

public static final String SUPPORTED_CIPHER_ALGORITHMS

for now, we limit ourselves to AES-128 with CBC blockmode.

See Also:

Constant Field Values

SUPPORTED_DIGESTS

public static final String SUPPORTED_DIGESTS

See Also:

Constant Field Values

Constructor Detail

GSIAuthenticationHandler

public GSIAuthenticationHandler(X509Certificate hostCertificate,
                        PrivateKey privateKey,
                        org.globus.gsi.TrustedCertificates trustedCerts,
                        org.globus.gsi.CertificateRevocationLists crls)

Parameters:

hostCertificatePath -

hostKeyPath -

caCertDir -

verifyHostCertificate -

endpoint - CellEndpoint for communication with the login strategies

Method Detail

authenticate

public AbstractResponseMessage authenticate(AuthenticationRequest request)
                                     throws XrootdException

dispatcher function that initializes the diffie-hellman key agreement session, checks the request for the correct protocol and calls the actual handler functions.

Specified by:

authenticate in interface AuthenticationHandler

Throws:

XrootdException

See Also:

handleCertReqStep(org.dcache.xrootd.protocol.messages.AuthenticationRequest), handleCertStep(org.dcache.xrootd.protocol.messages.AuthenticationRequest)

getProtocol

public String getProtocol()

Specified by:

getProtocol in interface AuthenticationHandler

Returns:

the protocol supported by this client. The protocol string also contains metainformation such as the host-certificate subject hash.

getSubject

public Subject getSubject()

Specified by:

getSubject in interface AuthenticationHandler

isCompleted

public boolean isCompleted()

Specified by:

isCompleted in interface AuthenticationHandler