NetworkSslServerInitializer.java

/*
 * This file is part of Waarp Project (named also Waarp or GG).
 *
 *  Copyright (c) 2019, Waarp SAS, and individual contributors by the @author
 *  tags. See the COPYRIGHT.txt in the distribution for a full listing of
 * individual contributors.
 *
 *  All Waarp Project is free software: you can redistribute it and/or
 * modify it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or (at your
 * option) any later version.
 *
 * Waarp is distributed in the hope that it will be useful, but WITHOUT ANY
 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
 * A PARTICULAR PURPOSE. See the GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License along with
 * Waarp . If not, see <http://www.gnu.org/licenses/>.
 */
package org.waarp.openr66.protocol.networkhandler.ssl;

import io.netty.channel.ChannelInitializer;
import io.netty.channel.ChannelPipeline;
import io.netty.channel.socket.SocketChannel;
import io.netty.handler.ssl.SslHandler;
import io.netty.handler.timeout.IdleStateHandler;
import io.netty.handler.traffic.ChannelTrafficShapingHandler;
import io.netty.handler.traffic.GlobalTrafficShapingHandler;
import org.waarp.common.crypto.ssl.WaarpSecureKeyStore;
import org.waarp.common.crypto.ssl.WaarpSslContextFactory;
import org.waarp.common.logging.WaarpLogger;
import org.waarp.common.logging.WaarpLoggerFactory;
import org.waarp.openr66.protocol.configuration.Configuration;
import org.waarp.openr66.protocol.exception.OpenR66ProtocolNetworkException;
import org.waarp.openr66.protocol.networkhandler.NetworkServerInitializer;
import org.waarp.openr66.protocol.networkhandler.packet.NetworkPacketCodec;

import java.util.concurrent.TimeUnit;

/**
 *
 */
public class NetworkSslServerInitializer
    extends ChannelInitializer<SocketChannel> {
  /**
   * Internal Logger
   */
  private static final WaarpLogger logger =
      WaarpLoggerFactory.getLogger(NetworkSslServerInitializer.class);
  public static final String SSL_HANDLER = "ssl";
  protected final boolean isClient;
  private static WaarpSslContextFactory waarpSslContextFactory;
  private static WaarpSecureKeyStore waarpSecureKeyStore;

  /**
   * @param isClient True if this Factory is to be used in Client mode
   */
  public NetworkSslServerInitializer(final boolean isClient) {
    this.isClient = isClient;
  }

  @Override
  protected void initChannel(final SocketChannel ch) throws Exception {
    final ChannelPipeline pipeline = ch.pipeline();
    // Add SSL handler first to encrypt and decrypt everything.
    final SslHandler sslHandler;
    if (isClient) {
      // Not server: no clientAuthent, no renegotiation
      sslHandler = getWaarpSslContextFactory().createHandlerClient(ch);
    } else {
      // Server: no renegotiation still, but possible clientAuthent
      sslHandler = getWaarpSslContextFactory().createHandlerServer(
          getWaarpSslContextFactory().needClientAuthentication(), ch);
    }
    pipeline.addLast(SSL_HANDLER, sslHandler);
    logger.debug("Create IdleStateHandler with {} ms",
                 Configuration.configuration.getTimeoutCon());

    pipeline.addLast(NetworkServerInitializer.TIMEOUT,
                     new IdleStateHandler(true, 0, 0,
                                          Configuration.configuration.getTimeoutCon(),
                                          TimeUnit.MILLISECONDS));

    // Global limitation
    final GlobalTrafficShapingHandler handler =
        Configuration.configuration.getGlobalTrafficShapingHandler();
    if (handler == null) {
      throw new OpenR66ProtocolNetworkException(
          "Error at pipeline initialization," +
          " GlobalTrafficShapingHandler configured.");
    }
    pipeline.addLast(NetworkServerInitializer.LIMITGLOBAL, handler);
    // Per channel limitation
    pipeline.addLast(NetworkServerInitializer.LIMITCHANNEL,
                     new ChannelTrafficShapingHandler(
                         Configuration.configuration.getServerChannelWriteLimit(),
                         Configuration.configuration.getServerChannelReadLimit(),
                         Configuration.configuration.getDelayLimit(),
                         Configuration.configuration.getTimeoutCon()));

    pipeline.addLast(NetworkServerInitializer.NETWORK_CODEC,
                     new NetworkPacketCodec());
    pipeline.addLast(Configuration.configuration.getHandlerGroup(),
                     NetworkServerInitializer.NETWORK_HANDLER,
                     new NetworkSslServerHandler(!isClient));
  }

  /**
   * @return the waarpSslContextFactory
   */
  public static WaarpSslContextFactory getWaarpSslContextFactory() {
    return waarpSslContextFactory;
  }

  /**
   * @param waarpSslContextFactory the waarpSslContextFactory to set
   */
  public static void setWaarpSslContextFactory(
      final WaarpSslContextFactory waarpSslContextFactory) {
    NetworkSslServerInitializer.waarpSslContextFactory = waarpSslContextFactory;
  }

  /**
   * @return the waarpSecureKeyStore
   */
  public static WaarpSecureKeyStore getWaarpSecureKeyStore() {
    return waarpSecureKeyStore;
  }

  /**
   * @param waarpSecureKeyStore the waarpSecureKeyStore to set
   */
  public static void setWaarpSecureKeyStore(
      final WaarpSecureKeyStore waarpSecureKeyStore) {
    NetworkSslServerInitializer.waarpSecureKeyStore = waarpSecureKeyStore;
  }
}