Andrii Shvaika
5 years ago
25 changed files with 433 additions and 533 deletions
@ -0,0 +1,38 @@ |
|||
/** |
|||
* Copyright © 2016-2021 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.transport.lwm2m.config; |
|||
|
|||
public interface LwM2MSecureServerConfig { |
|||
|
|||
Integer getId(); |
|||
|
|||
String getHost(); |
|||
|
|||
Integer getPort(); |
|||
|
|||
String getSecureHost(); |
|||
|
|||
Integer getSecurePort(); |
|||
|
|||
String getPublicX(); |
|||
|
|||
String getPublicY(); |
|||
|
|||
String getPrivateEncoded(); |
|||
|
|||
String getCertificateAlias(); |
|||
|
|||
} |
|||
@ -0,0 +1,153 @@ |
|||
/** |
|||
* Copyright © 2016-2021 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.transport.lwm2m.config; |
|||
|
|||
import com.google.common.io.Resources; |
|||
import lombok.Getter; |
|||
import lombok.Setter; |
|||
import lombok.extern.slf4j.Slf4j; |
|||
import org.eclipse.leshan.server.model.LwM2mModelProvider; |
|||
import org.springframework.beans.factory.annotation.Value; |
|||
import org.springframework.boot.autoconfigure.condition.ConditionalOnExpression; |
|||
import org.springframework.stereotype.Component; |
|||
|
|||
import javax.annotation.PostConstruct; |
|||
import java.io.File; |
|||
import java.io.FileInputStream; |
|||
import java.io.IOException; |
|||
import java.io.InputStream; |
|||
import java.nio.file.Path; |
|||
import java.nio.file.Paths; |
|||
import java.security.KeyStore; |
|||
import java.security.KeyStoreException; |
|||
import java.security.NoSuchAlgorithmException; |
|||
import java.security.cert.CertificateException; |
|||
|
|||
@Slf4j |
|||
@Component |
|||
@ConditionalOnExpression("('${service.type:null}'=='tb-transport' && '${transport.lwm2m.enabled:false}'=='true') || '${service.type:null}'=='monolith' || '${service.type:null}'=='tb-core'") |
|||
public class LwM2MTransportServerConfig implements LwM2MSecureServerConfig { |
|||
|
|||
@Getter |
|||
@Setter |
|||
private LwM2mModelProvider modelProvider; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.timeout:}") |
|||
private Long timeout; |
|||
|
|||
@Getter |
|||
@Value("${transport.sessions.report_timeout}") |
|||
private long sessionReportTimeout; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.recommended_ciphers:}") |
|||
private boolean recommendedCiphers; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.recommended_supported_groups:}") |
|||
private boolean recommendedSupportedGroups; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.response_pool_size:}") |
|||
private int responsePoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.registered_pool_size:}") |
|||
private int registeredPoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.update_registered_pool_size:}") |
|||
private int updateRegisteredPoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.un_registered_pool_size:}") |
|||
private int unRegisteredPoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.security.key_store_type:}") |
|||
private String keyStoreType; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.security.key_store:}") |
|||
private String keyStorePathFile; |
|||
|
|||
@Getter |
|||
@Setter |
|||
private KeyStore keyStoreValue; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.security.key_store_password:}") |
|||
private String keyStorePassword; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.security.root_alias:}") |
|||
private String rootCertificateAlias; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.security.enable_gen_new_key_psk_rpk:}") |
|||
private Boolean enableGenNewKeyPskRpk; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.id:}") |
|||
private Integer id; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.bind_address:}") |
|||
private String host; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.bind_port:}") |
|||
private Integer port; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.security.bind_address:}") |
|||
private String secureHost; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.security.bind_port:}") |
|||
private Integer securePort; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.security.public_x:}") |
|||
private String publicX; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.security.public_y:}") |
|||
private String publicY; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.security.private_encoded:}") |
|||
private String privateEncoded; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.security.alias:}") |
|||
private String certificateAlias; |
|||
|
|||
|
|||
@PostConstruct |
|||
public void init() { |
|||
try { |
|||
File keyStoreFile = new File(Resources.getResource(keyStorePathFile).toURI()); |
|||
InputStream inKeyStore = new FileInputStream(keyStoreFile); |
|||
keyStoreValue = KeyStore.getInstance(keyStoreType); |
|||
keyStoreValue.load(inKeyStore, keyStorePassword == null ? null : keyStorePassword.toCharArray()); |
|||
} catch (Exception e) { |
|||
log.error("Unable to lookup LwM2M keystore. Reason: " + e.getMessage(), e); |
|||
throw new RuntimeException("Failed to lookup LwM2M keystore", e); |
|||
} |
|||
} |
|||
} |
|||
@ -1,217 +0,0 @@ |
|||
/** |
|||
* Copyright © 2016-2021 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.common.transport.lwm2m; |
|||
|
|||
import lombok.Getter; |
|||
import lombok.Setter; |
|||
import lombok.extern.slf4j.Slf4j; |
|||
import org.eclipse.leshan.server.model.LwM2mModelProvider; |
|||
import org.springframework.beans.factory.annotation.Value; |
|||
import org.springframework.boot.autoconfigure.condition.ConditionalOnExpression; |
|||
import org.springframework.stereotype.Component; |
|||
|
|||
import javax.annotation.PostConstruct; |
|||
import java.io.File; |
|||
import java.io.FileInputStream; |
|||
import java.io.IOException; |
|||
import java.io.InputStream; |
|||
import java.nio.file.Path; |
|||
import java.nio.file.Paths; |
|||
import java.security.KeyStore; |
|||
import java.security.KeyStoreException; |
|||
import java.security.NoSuchAlgorithmException; |
|||
import java.security.cert.CertificateException; |
|||
|
|||
@Slf4j |
|||
@Component |
|||
@ConditionalOnExpression("('${service.type:null}'=='tb-transport' && '${transport.lwm2m.enabled:false}'=='true') || '${service.type:null}'=='monolith' || '${service.type:null}'=='tb-core'") |
|||
public class LwM2MTransportConfigServer { |
|||
|
|||
@Getter |
|||
private String KEY_STORE_DEFAULT_RESOURCE_PATH = "credentials"; |
|||
|
|||
@Getter |
|||
private String KEY_STORE_DEFAULT_FILE = "serverKeyStore.jks"; |
|||
|
|||
@Getter |
|||
private String APP_DIR = "common"; |
|||
|
|||
@Getter |
|||
private String TRANSPORT_DIR = "transport"; |
|||
|
|||
@Getter |
|||
private String LWM2M_DIR = "lwm2m"; |
|||
|
|||
@Getter |
|||
private String SRC_DIR = "src"; |
|||
|
|||
@Getter |
|||
private String MAIN_DIR = "main"; |
|||
|
|||
@Getter |
|||
private String RESOURCES_DIR = "resources"; |
|||
|
|||
@Getter |
|||
private String BASE_DIR_PATH = System.getProperty("user.dir"); |
|||
|
|||
@Getter |
|||
// private String PATH_DATA_MICROSERVICE = "/usr/share/tb-lwm2m-transport/data$";
|
|||
private String PATH_DATA = "data"; |
|||
|
|||
@Getter |
|||
@Setter |
|||
private LwM2mModelProvider modelProvider; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.timeout:}") |
|||
private Long timeout; |
|||
|
|||
@Getter |
|||
@Value("${transport.sessions.report_timeout}") |
|||
private long sessionReportTimeout; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.recommended_ciphers:}") |
|||
private boolean recommendedCiphers; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.recommended_supported_groups:}") |
|||
private boolean recommendedSupportedGroups; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.response_pool_size:}") |
|||
private int responsePoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.registered_pool_size:}") |
|||
private int registeredPoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.update_registered_pool_size:}") |
|||
private int updateRegisteredPoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.un_registered_pool_size:}") |
|||
private int unRegisteredPoolSize; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.secure.key_store_type:}") |
|||
private String keyStoreType; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.secure.key_store_path_file:}") |
|||
private String keyStorePathFile; |
|||
|
|||
@Getter |
|||
@Setter |
|||
private KeyStore keyStoreValue; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.secure.key_store_password:}") |
|||
private String keyStorePasswordServer; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.secure.root_alias:}") |
|||
private String rootAlias; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.secure.enable_gen_new_key_psk_rpk:}") |
|||
private Boolean enableGenNewKeyPskRpk; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.id:}") |
|||
private Integer serverId; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.bind_address:}") |
|||
private String serverHost; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.secure.bind_address_security:}") |
|||
private String serverHostSecurity; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.bind_port_no_sec:}") |
|||
private Integer serverPortNoSec; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.secure.bind_port_security:}") |
|||
private Integer serverPortSecurity; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.secure.public_x:}") |
|||
private String serverPublicX; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.secure.public_y:}") |
|||
private String serverPublicY; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.secure.private_encoded:}") |
|||
private String serverPrivateEncoded; |
|||
|
|||
@Getter |
|||
@Value("${transport.lwm2m.server.secure.alias:}") |
|||
private String serverAlias; |
|||
|
|||
@PostConstruct |
|||
public void init() { |
|||
this.getInKeyStore(); |
|||
} |
|||
|
|||
private KeyStore getInKeyStore() { |
|||
try { |
|||
if (keyStoreValue != null && keyStoreValue.size() > 0) |
|||
return keyStoreValue; |
|||
} catch (KeyStoreException e) { |
|||
log.error("Uninitialized keystore [{}]", keyStoreValue.toString()); |
|||
} |
|||
Path keyStorePath = (keyStorePathFile != null && !keyStorePathFile.isEmpty()) ? Paths.get(keyStorePathFile) : |
|||
(new File(Paths.get(getBaseDirPath(), PATH_DATA, KEY_STORE_DEFAULT_RESOURCE_PATH, KEY_STORE_DEFAULT_FILE).toUri()).isFile()) ? |
|||
Paths.get(getBaseDirPath(), PATH_DATA, KEY_STORE_DEFAULT_RESOURCE_PATH, KEY_STORE_DEFAULT_FILE) : |
|||
Paths.get(getBaseDirPath(), APP_DIR, TRANSPORT_DIR, LWM2M_DIR, SRC_DIR, MAIN_DIR, RESOURCES_DIR, KEY_STORE_DEFAULT_RESOURCE_PATH, KEY_STORE_DEFAULT_FILE); |
|||
File keyStoreFile = new File(keyStorePath.toUri()); |
|||
if (keyStoreFile.isFile()) { |
|||
try { |
|||
InputStream inKeyStore = new FileInputStream(keyStoreFile); |
|||
keyStoreValue = KeyStore.getInstance(keyStoreType); |
|||
keyStoreValue.load(inKeyStore, keyStorePasswordServer == null ? null : keyStorePasswordServer.toCharArray()); |
|||
} catch (CertificateException | NoSuchAlgorithmException | IOException | KeyStoreException e) { |
|||
log.error("[{}] Unable to load KeyStore files server, folder is not a directory", e.getMessage()); |
|||
keyStoreValue = null; |
|||
} |
|||
log.info("[{}] Load KeyStore files server, folder is a directory", keyStoreFile.getAbsoluteFile()); |
|||
} else { |
|||
log.error("[{}] Unable to load KeyStore files server, is not a file", keyStoreFile.getAbsoluteFile()); |
|||
keyStoreValue = null; |
|||
} |
|||
return keyStoreValue; |
|||
} |
|||
|
|||
private String getBaseDirPath() { |
|||
Path FULL_FILE_PATH; |
|||
if (BASE_DIR_PATH.endsWith("bin")) { |
|||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH.replaceAll("bin$", "")); |
|||
} else if (BASE_DIR_PATH.endsWith("conf")) { |
|||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH.replaceAll("conf$", "")); |
|||
} else if (BASE_DIR_PATH.endsWith("application")) { |
|||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH.substring(0, BASE_DIR_PATH.length() - "application".length())); |
|||
} else { |
|||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH); |
|||
} |
|||
return FULL_FILE_PATH.toUri().getPath(); |
|||
} |
|||
} |
|||
Loading…
Reference in new issue