org.dcache.xrootd.plugins.authn.gsi.pre49

Class GSIPre49ServerRequestHandler

java.lang.Object

org.dcache.xrootd.plugins.authn.gsi.GSIRequestHandler

org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

org.dcache.xrootd.plugins.authn.gsi.pre49.GSIPre49ServerRequestHandler

public class GSIPre49ServerRequestHandler
extends GSIServerRequestHandler

Implementation of server side of GSI handshake prior to XrootD 4.9. Does not support proxy delegation.

Nested Class Summary

Nested classes/interfaces inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

GSIServerRequestHandler.CertRequestBuckets

Field Summary

Fields inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

LOGGER, subject

Fields inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIRequestHandler

ASYNC_CIPHER_MODE, bufferHandler, challenge, CHALLENGE_BYTES, credentialManager, CRYPTO_MODE, CRYPTO_MODE_NO_PAD, dhSession, lastRequest, MAX_TIME_SKEW, noPadding, PROTO_PRE_DELEGATION, PROTO_WITH_DELEGATION, PROTOCOL, PROTOCOL_VERSION, PUBLIC_KEY_ALGORITHM, PUBLIC_KEY_FOOTER, PUBLIC_KEY_HEADER, RANDOM, rsaSession, SESSION_IV_DELIM, SESSION_IV_LEN, SUPPORTED_CIPHER_ALGORITHM, SUPPORTED_DIGESTS, SYNC_CIPHER_BLOCKSIZE, SYNC_CIPHER_MODE_PADDED, SYNC_CIPHER_MODE_UNPADDED, SYNC_CIPHER_NAME

Constructor Summary

Constructors

Constructor and Description
GSIPre49ServerRequestHandler(Subject subject, GSICredentialManager credentialManager)

Method Summary

Modifier and Type	Method and Description
int	getProtocolVersion()
protected String	getSyncCipherMode()
XrootdResponse<AuthenticationRequest>	handleCertReqStep(AuthenticationRequest request)
XrootdResponse<AuthenticationRequest>	handleCertStep(AuthenticationRequest request) Handle the second step (reply by client to authmore).
XrootdResponse<AuthenticationRequest>	handleSigPxyStep(AuthenticationRequest request)
boolean	isFinished(AuthenticationRequest request)

Methods inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

cancelHandshake, getDecrypter, handleCertReqStep, validateCiphers, validateDigests

Methods inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIRequestHandler

decryptMainBucketWithSessionKey, dhParams, extractChain, finalizeSessionKey, findSessionIVLen, generateChallengeString, isRequestExpired, postProcessMainBucket, processRSAVerification, updateLastRequest, validateCiphers, validateCryptoMode, validateDigests, verifySignedRTag

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GSIPre49ServerRequestHandler

public GSIPre49ServerRequestHandler(Subject subject,
                                    GSICredentialManager credentialManager)
                             throws XrootdException

Throws:

XrootdException

Method Detail

getProtocolVersion

public int getProtocolVersion()

Specified by:

getProtocolVersion in class GSIRequestHandler

handleCertReqStep

public XrootdResponse<AuthenticationRequest> handleCertReqStep(AuthenticationRequest request)
                                                        throws XrootdException

Specified by:

handleCertReqStep in class GSIServerRequestHandler

Throws:

XrootdException

handleCertStep

public XrootdResponse<AuthenticationRequest> handleCertStep(AuthenticationRequest request)
                                                     throws XrootdException

Handle the second step (reply by client to authmore). This involves finalizing the session key, verifying rsa certificate and decrypting and verifying the signed hash.

Specified by:

handleCertStep in class GSIServerRequestHandler

Parameters:

request - AuthenticationRequest received by the client

Returns:

OkResponse (verification is okay)

Throws:

XrootdException

handleSigPxyStep

public XrootdResponse<AuthenticationRequest> handleSigPxyStep(AuthenticationRequest request)
                                                       throws XrootdException

Specified by:

handleSigPxyStep in class GSIServerRequestHandler

Throws:

XrootdException

isFinished

public boolean isFinished(AuthenticationRequest request)

Specified by:

isFinished in class GSIServerRequestHandler

getSyncCipherMode

protected String getSyncCipherMode()

Specified by:

getSyncCipherMode in class GSIRequestHandler