Package org.dcache.xrootd.plugins.authn.gsi.pre49

Class GSIPre49ServerRequestHandler

java.lang.Object

org.dcache.xrootd.plugins.authn.gsi.GSIRequestHandler

org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

org.dcache.xrootd.plugins.authn.gsi.pre49.GSIPre49ServerRequestHandler

public class GSIPre49ServerRequestHandler
extends GSIServerRequestHandler

Implementation of server side of GSI handshake prior to XrootD 4.9. Does not support proxy delegation.

Nested Class Summary

Nested classes/interfaces inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

GSIServerRequestHandler.CertRequestBuckets

Field Summary

Fields inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

LOGGER, subject

Fields inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIRequestHandler

ASYNC_CIPHER_MODE, bufferHandler, CERT_AUTH_KEY, challenge, CHALLENGE_BYTES, credentialManager, CRYPTO_MODE, CRYPTO_MODE_NO_PAD, dhSession, ENCRYPTION_KEY, lastRequest, MAX_TIME_SKEW, noPadding, PROTO_PRE_DELEGATION, PROTO_WITH_DELEGATION, PROTOCOL, PROTOCOL_VERSION, PUBLIC_KEY_ALGORITHM, PUBLIC_KEY_FOOTER, PUBLIC_KEY_HEADER, RANDOM, rsaSession, SESSION_IV_DELIM, SESSION_IV_LEN, SUPPORTED_CIPHER_ALGORITHM, SUPPORTED_DIGESTS, SYNC_CIPHER_BLOCKSIZE, SYNC_CIPHER_MODE_PADDED, SYNC_CIPHER_MODE_UNPADDED, SYNC_CIPHER_NAME, VERSION_KEY

Constructor Summary

Constructors

Constructor	Description
GSIPre49ServerRequestHandler(javax.security.auth.Subject subject, GSICredentialManager credentialManager)

Method Summary

Modifier and Type	Method	Description
int	getProtocolVersion()
protected java.lang.String	getSyncCipherMode()
XrootdResponse<AuthenticationRequest>	handleCertReqStep(AuthenticationRequest request, GSIBucketUtils.BucketData data)
XrootdResponse<AuthenticationRequest>	handleCertStep(AuthenticationRequest request, GSIBucketUtils.BucketData data)	Handle the second step (reply by client to authmore).
XrootdResponse<AuthenticationRequest>	handleSigPxyStep(AuthenticationRequest request, GSIBucketUtils.BucketData data)
boolean	isFinished(GSIBucketUtils.BucketData data)

Methods inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIServerRequestHandler

cancelHandshake, getDecrypter, handleCertReqStep, validateCiphers, validateDigests

Methods inherited from class org.dcache.xrootd.plugins.authn.gsi.GSIRequestHandler

decryptMainBucketWithSessionKey, dhParams, extractChain, finalizeSessionKey, findSessionIVLen, generateChallengeString, isRequestExpired, postProcessMainBucket, processRSAVerification, updateLastRequest, validateCiphers, validateCryptoMode, validateDigests, verifySignedRTag

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GSIPre49ServerRequestHandler

public GSIPre49ServerRequestHandler(javax.security.auth.Subject subject,
                                    GSICredentialManager credentialManager)
                             throws XrootdException

Throws:

XrootdException

Method Detail

getProtocolVersion

public int getProtocolVersion()

Specified by:

getProtocolVersion in class GSIRequestHandler

handleCertReqStep

public XrootdResponse<AuthenticationRequest> handleCertReqStep(AuthenticationRequest request,
                                                               GSIBucketUtils.BucketData data)
                                                        throws XrootdException

Specified by:

handleCertReqStep in class GSIServerRequestHandler

Throws:

XrootdException

handleCertStep

public XrootdResponse<AuthenticationRequest> handleCertStep(AuthenticationRequest request,
                                                            GSIBucketUtils.BucketData data)
                                                     throws XrootdException

Handle the second step (reply by client to authmore). This involves finalizing the session key, verifying rsa certificate and decrypting and verifying the signed hash.

Specified by:

handleCertStep in class GSIServerRequestHandler

Parameters:

request - AuthenticationRequest received by the client

Returns:

OkResponse (verification is okay)

Throws:

XrootdException

handleSigPxyStep

public XrootdResponse<AuthenticationRequest> handleSigPxyStep(AuthenticationRequest request,
                                                              GSIBucketUtils.BucketData data)
                                                       throws XrootdException

Specified by:

handleSigPxyStep in class GSIServerRequestHandler

Throws:

XrootdException

isFinished

public boolean isFinished(GSIBucketUtils.BucketData data)

Specified by:

isFinished in class GSIServerRequestHandler

getSyncCipherMode

protected java.lang.String getSyncCipherMode()

Specified by:

getSyncCipherMode in class GSIRequestHandler