package org.apache.qpid.transport.network.security.sasl; /* * * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, * software distributed under the License is distributed on an * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY * KIND, either express or implied. See the License for the * specific language governing permissions and limitations * under the License. * */ import java.nio.ByteBuffer; import java.util.concurrent.atomic.AtomicBoolean; import javax.security.sasl.SaslClient; import javax.security.sasl.SaslException; import org.apache.qpid.transport.Sender; import org.apache.qpid.transport.SenderException; import org.apache.qpid.transport.util.Logger; public class SASLSender extends SASLEncryptor implements Sender { protected Sender delegate; private byte[] appData; private final AtomicBoolean closed = new AtomicBoolean(false); private static final Logger log = Logger.get(SASLSender.class); public SASLSender(Sender delegate) { this.delegate = delegate; log.debug("SASL Sender enabled"); } @Override public void close() { if (!closed.getAndSet(true)) { delegate.close(); if (isSecurityLayerEstablished()) { try { saslClient.dispose(); } catch (SaslException e) { throw new SenderException("Error closing SASL Sender",e); } } } } @Override public void flush() { delegate.flush(); } @Override public void send(ByteBuffer buf) { if (closed.get()) { throw new SenderException("SSL Sender is closed"); } if (isSecurityLayerEstablished()) { while (buf.hasRemaining()) { int length = Math.min(buf.remaining(),sendBuffSize); log.debug("sendBuffSize %s", sendBuffSize); log.debug("buf.remaining() %s", buf.remaining()); buf.get(appData, 0, length); try { byte[] out = saslClient.wrap(appData, 0, length); log.debug("out.length %s", out.length); delegate.send(ByteBuffer.wrap(out)); } catch (SaslException e) { log.error("Exception while encrypting data.",e); throw new SenderException("SASL Sender, Error occurred while encrypting data",e); } } } else { delegate.send(buf); } } @Override public void setIdleTimeout(int i) { delegate.setIdleTimeout(i); } public void securityLayerEstablished() { appData = new byte[sendBuffSize]; log.debug("SASL Security Layer Established"); } }