Andrii Shvaika
5 years ago
8 changed files with 43 additions and 189 deletions
@ -1,7 +1,7 @@ |
|||
transport.lwm2m.security.key_store=lwm2m/credentials/serverKeyStore.jks |
|||
transport.lwm2m.security.key_store_password=server |
|||
edges.enabled=true |
|||
transport.lwm2m.server.security.alias=server |
|||
transport.lwm2m.server.security.password=server |
|||
transport.lwm2m.bootstrap.security.alias=server |
|||
transport.lwm2m.bootstrap.security.password=server |
|||
transport.lwm2m.server.security.key_alias=server |
|||
transport.lwm2m.server.security.key_password=server |
|||
transport.lwm2m.bootstrap.security.key_alias=server |
|||
transport.lwm2m.bootstrap.security.key_password=server |
|||
@ -1,110 +0,0 @@ |
|||
/** |
|||
* Copyright © 2016-2021 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.transport.lwm2m.secure; |
|||
|
|||
import lombok.extern.slf4j.Slf4j; |
|||
import org.eclipse.leshan.core.util.Hex; |
|||
|
|||
import java.security.InvalidAlgorithmParameterException; |
|||
import java.security.KeyPair; |
|||
import java.security.KeyPairGenerator; |
|||
import java.security.NoSuchAlgorithmException; |
|||
import java.security.NoSuchProviderException; |
|||
import java.security.PrivateKey; |
|||
import java.security.PublicKey; |
|||
import java.security.SecureRandom; |
|||
import java.security.interfaces.ECPublicKey; |
|||
import java.security.spec.ECGenParameterSpec; |
|||
import java.util.Arrays; |
|||
|
|||
@Slf4j |
|||
public class LWM2MGenerationPSkRPkECC { |
|||
|
|||
public LWM2MGenerationPSkRPkECC() { |
|||
generationPSkKey(); |
|||
generationRPKECCKey(); |
|||
} |
|||
|
|||
private void generationPSkKey() { |
|||
/* PSK */ |
|||
int lenPSkKey = 32; |
|||
/* Start PSK |
|||
Clients and Servers MUST support PSK keys of up to 64 bytes in length, as required by [RFC7925] |
|||
SecureRandom object must be unpredictable, and all SecureRandom output sequences must be cryptographically strong, as described in [RFC4086] |
|||
*/ |
|||
SecureRandom randomPSK = new SecureRandom(); |
|||
byte[] bytesPSK = new byte[lenPSkKey]; |
|||
randomPSK.nextBytes(bytesPSK); |
|||
log.info("\nCreating new PSK: \n for the next start PSK -> security key: [{}]", Hex.encodeHexString(bytesPSK)); |
|||
} |
|||
|
|||
private void generationRPKECCKey() { |
|||
/* RPK */ |
|||
String algorithm = "EC"; |
|||
String provider = "SunEC"; |
|||
String nameParameterSpec = "secp256r1"; |
|||
|
|||
/* Start RPK |
|||
Elliptic Curve parameters : [secp256r1 [NIST P-256, X9.62 prime256v1] (1.2.840.10045.3.1.7)] |
|||
*/ |
|||
KeyPairGenerator kpg = null; |
|||
try { |
|||
kpg = KeyPairGenerator.getInstance(algorithm, provider); |
|||
} catch (NoSuchAlgorithmException | NoSuchProviderException e) { |
|||
log.error("", e); |
|||
} |
|||
ECGenParameterSpec ecsp = new ECGenParameterSpec(nameParameterSpec); |
|||
try { |
|||
kpg.initialize(ecsp); |
|||
} catch (InvalidAlgorithmParameterException e) { |
|||
log.error("", e); |
|||
} |
|||
|
|||
KeyPair kp = kpg.genKeyPair(); |
|||
PrivateKey privKey = kp.getPrivate(); |
|||
PublicKey pubKey = kp.getPublic(); |
|||
|
|||
if (pubKey instanceof ECPublicKey) { |
|||
ECPublicKey ecPublicKey = (ECPublicKey) pubKey; |
|||
/* Get x coordinate */ |
|||
byte[] x = ecPublicKey.getW().getAffineX().toByteArray(); |
|||
if (x[0] == 0) |
|||
x = Arrays.copyOfRange(x, 1, x.length); |
|||
|
|||
/* Get Y coordinate */ |
|||
byte[] y = ecPublicKey.getW().getAffineY().toByteArray(); |
|||
if (y[0] == 0) |
|||
y = Arrays.copyOfRange(y, 1, y.length); |
|||
|
|||
/* Get Curves params */ |
|||
String privHex = Hex.encodeHexString(privKey.getEncoded()); |
|||
log.info("\nCreating new RPK for the next start... \n" + |
|||
" Public Key (Hex): [{}]\n" + |
|||
" Private Key (Hex): [{}]" + |
|||
" public_x : [{}] \n" + |
|||
" public_y : [{}] \n" + |
|||
" private_encode : [{}] \n" + |
|||
" Elliptic Curve parameters : [{}] \n", |
|||
Hex.encodeHexString(pubKey.getEncoded()), |
|||
privHex, |
|||
Hex.encodeHexString(x), |
|||
Hex.encodeHexString(y), |
|||
privHex, |
|||
ecPublicKey.getParams().toString()); |
|||
} |
|||
} |
|||
} |
|||
|
|||
Loading…
Reference in new issue