Andrii Shvaika
5 years ago
25 changed files with 433 additions and 533 deletions
@ -0,0 +1,38 @@ |
|||||
|
/** |
||||
|
* Copyright © 2016-2021 The Thingsboard Authors |
||||
|
* |
||||
|
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
|
* you may not use this file except in compliance with the License. |
||||
|
* You may obtain a copy of the License at |
||||
|
* |
||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
* |
||||
|
* Unless required by applicable law or agreed to in writing, software |
||||
|
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
|
* See the License for the specific language governing permissions and |
||||
|
* limitations under the License. |
||||
|
*/ |
||||
|
package org.thingsboard.server.transport.lwm2m.config; |
||||
|
|
||||
|
public interface LwM2MSecureServerConfig { |
||||
|
|
||||
|
Integer getId(); |
||||
|
|
||||
|
String getHost(); |
||||
|
|
||||
|
Integer getPort(); |
||||
|
|
||||
|
String getSecureHost(); |
||||
|
|
||||
|
Integer getSecurePort(); |
||||
|
|
||||
|
String getPublicX(); |
||||
|
|
||||
|
String getPublicY(); |
||||
|
|
||||
|
String getPrivateEncoded(); |
||||
|
|
||||
|
String getCertificateAlias(); |
||||
|
|
||||
|
} |
||||
@ -0,0 +1,153 @@ |
|||||
|
/** |
||||
|
* Copyright © 2016-2021 The Thingsboard Authors |
||||
|
* |
||||
|
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
|
* you may not use this file except in compliance with the License. |
||||
|
* You may obtain a copy of the License at |
||||
|
* |
||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
* |
||||
|
* Unless required by applicable law or agreed to in writing, software |
||||
|
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
|
* See the License for the specific language governing permissions and |
||||
|
* limitations under the License. |
||||
|
*/ |
||||
|
package org.thingsboard.server.transport.lwm2m.config; |
||||
|
|
||||
|
import com.google.common.io.Resources; |
||||
|
import lombok.Getter; |
||||
|
import lombok.Setter; |
||||
|
import lombok.extern.slf4j.Slf4j; |
||||
|
import org.eclipse.leshan.server.model.LwM2mModelProvider; |
||||
|
import org.springframework.beans.factory.annotation.Value; |
||||
|
import org.springframework.boot.autoconfigure.condition.ConditionalOnExpression; |
||||
|
import org.springframework.stereotype.Component; |
||||
|
|
||||
|
import javax.annotation.PostConstruct; |
||||
|
import java.io.File; |
||||
|
import java.io.FileInputStream; |
||||
|
import java.io.IOException; |
||||
|
import java.io.InputStream; |
||||
|
import java.nio.file.Path; |
||||
|
import java.nio.file.Paths; |
||||
|
import java.security.KeyStore; |
||||
|
import java.security.KeyStoreException; |
||||
|
import java.security.NoSuchAlgorithmException; |
||||
|
import java.security.cert.CertificateException; |
||||
|
|
||||
|
@Slf4j |
||||
|
@Component |
||||
|
@ConditionalOnExpression("('${service.type:null}'=='tb-transport' && '${transport.lwm2m.enabled:false}'=='true') || '${service.type:null}'=='monolith' || '${service.type:null}'=='tb-core'") |
||||
|
public class LwM2MTransportServerConfig implements LwM2MSecureServerConfig { |
||||
|
|
||||
|
@Getter |
||||
|
@Setter |
||||
|
private LwM2mModelProvider modelProvider; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.timeout:}") |
||||
|
private Long timeout; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.sessions.report_timeout}") |
||||
|
private long sessionReportTimeout; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.recommended_ciphers:}") |
||||
|
private boolean recommendedCiphers; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.recommended_supported_groups:}") |
||||
|
private boolean recommendedSupportedGroups; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.response_pool_size:}") |
||||
|
private int responsePoolSize; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.registered_pool_size:}") |
||||
|
private int registeredPoolSize; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.update_registered_pool_size:}") |
||||
|
private int updateRegisteredPoolSize; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.un_registered_pool_size:}") |
||||
|
private int unRegisteredPoolSize; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.security.key_store_type:}") |
||||
|
private String keyStoreType; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.security.key_store:}") |
||||
|
private String keyStorePathFile; |
||||
|
|
||||
|
@Getter |
||||
|
@Setter |
||||
|
private KeyStore keyStoreValue; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.security.key_store_password:}") |
||||
|
private String keyStorePassword; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.security.root_alias:}") |
||||
|
private String rootCertificateAlias; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.security.enable_gen_new_key_psk_rpk:}") |
||||
|
private Boolean enableGenNewKeyPskRpk; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.id:}") |
||||
|
private Integer id; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.bind_address:}") |
||||
|
private String host; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.bind_port:}") |
||||
|
private Integer port; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.security.bind_address:}") |
||||
|
private String secureHost; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.security.bind_port:}") |
||||
|
private Integer securePort; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.security.public_x:}") |
||||
|
private String publicX; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.security.public_y:}") |
||||
|
private String publicY; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.security.private_encoded:}") |
||||
|
private String privateEncoded; |
||||
|
|
||||
|
@Getter |
||||
|
@Value("${transport.lwm2m.server.security.alias:}") |
||||
|
private String certificateAlias; |
||||
|
|
||||
|
|
||||
|
@PostConstruct |
||||
|
public void init() { |
||||
|
try { |
||||
|
File keyStoreFile = new File(Resources.getResource(keyStorePathFile).toURI()); |
||||
|
InputStream inKeyStore = new FileInputStream(keyStoreFile); |
||||
|
keyStoreValue = KeyStore.getInstance(keyStoreType); |
||||
|
keyStoreValue.load(inKeyStore, keyStorePassword == null ? null : keyStorePassword.toCharArray()); |
||||
|
} catch (Exception e) { |
||||
|
log.error("Unable to lookup LwM2M keystore. Reason: " + e.getMessage(), e); |
||||
|
throw new RuntimeException("Failed to lookup LwM2M keystore", e); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -1,217 +0,0 @@ |
|||||
/** |
|
||||
* Copyright © 2016-2021 The Thingsboard Authors |
|
||||
* |
|
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|
||||
* you may not use this file except in compliance with the License. |
|
||||
* You may obtain a copy of the License at |
|
||||
* |
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||
* |
|
||||
* Unless required by applicable law or agreed to in writing, software |
|
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|
||||
* See the License for the specific language governing permissions and |
|
||||
* limitations under the License. |
|
||||
*/ |
|
||||
package org.thingsboard.server.common.transport.lwm2m; |
|
||||
|
|
||||
import lombok.Getter; |
|
||||
import lombok.Setter; |
|
||||
import lombok.extern.slf4j.Slf4j; |
|
||||
import org.eclipse.leshan.server.model.LwM2mModelProvider; |
|
||||
import org.springframework.beans.factory.annotation.Value; |
|
||||
import org.springframework.boot.autoconfigure.condition.ConditionalOnExpression; |
|
||||
import org.springframework.stereotype.Component; |
|
||||
|
|
||||
import javax.annotation.PostConstruct; |
|
||||
import java.io.File; |
|
||||
import java.io.FileInputStream; |
|
||||
import java.io.IOException; |
|
||||
import java.io.InputStream; |
|
||||
import java.nio.file.Path; |
|
||||
import java.nio.file.Paths; |
|
||||
import java.security.KeyStore; |
|
||||
import java.security.KeyStoreException; |
|
||||
import java.security.NoSuchAlgorithmException; |
|
||||
import java.security.cert.CertificateException; |
|
||||
|
|
||||
@Slf4j |
|
||||
@Component |
|
||||
@ConditionalOnExpression("('${service.type:null}'=='tb-transport' && '${transport.lwm2m.enabled:false}'=='true') || '${service.type:null}'=='monolith' || '${service.type:null}'=='tb-core'") |
|
||||
public class LwM2MTransportConfigServer { |
|
||||
|
|
||||
@Getter |
|
||||
private String KEY_STORE_DEFAULT_RESOURCE_PATH = "credentials"; |
|
||||
|
|
||||
@Getter |
|
||||
private String KEY_STORE_DEFAULT_FILE = "serverKeyStore.jks"; |
|
||||
|
|
||||
@Getter |
|
||||
private String APP_DIR = "common"; |
|
||||
|
|
||||
@Getter |
|
||||
private String TRANSPORT_DIR = "transport"; |
|
||||
|
|
||||
@Getter |
|
||||
private String LWM2M_DIR = "lwm2m"; |
|
||||
|
|
||||
@Getter |
|
||||
private String SRC_DIR = "src"; |
|
||||
|
|
||||
@Getter |
|
||||
private String MAIN_DIR = "main"; |
|
||||
|
|
||||
@Getter |
|
||||
private String RESOURCES_DIR = "resources"; |
|
||||
|
|
||||
@Getter |
|
||||
private String BASE_DIR_PATH = System.getProperty("user.dir"); |
|
||||
|
|
||||
@Getter |
|
||||
// private String PATH_DATA_MICROSERVICE = "/usr/share/tb-lwm2m-transport/data$";
|
|
||||
private String PATH_DATA = "data"; |
|
||||
|
|
||||
@Getter |
|
||||
@Setter |
|
||||
private LwM2mModelProvider modelProvider; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.timeout:}") |
|
||||
private Long timeout; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.sessions.report_timeout}") |
|
||||
private long sessionReportTimeout; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.recommended_ciphers:}") |
|
||||
private boolean recommendedCiphers; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.recommended_supported_groups:}") |
|
||||
private boolean recommendedSupportedGroups; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.response_pool_size:}") |
|
||||
private int responsePoolSize; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.registered_pool_size:}") |
|
||||
private int registeredPoolSize; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.update_registered_pool_size:}") |
|
||||
private int updateRegisteredPoolSize; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.un_registered_pool_size:}") |
|
||||
private int unRegisteredPoolSize; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.secure.key_store_type:}") |
|
||||
private String keyStoreType; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.secure.key_store_path_file:}") |
|
||||
private String keyStorePathFile; |
|
||||
|
|
||||
@Getter |
|
||||
@Setter |
|
||||
private KeyStore keyStoreValue; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.secure.key_store_password:}") |
|
||||
private String keyStorePasswordServer; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.secure.root_alias:}") |
|
||||
private String rootAlias; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.secure.enable_gen_new_key_psk_rpk:}") |
|
||||
private Boolean enableGenNewKeyPskRpk; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.id:}") |
|
||||
private Integer serverId; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.bind_address:}") |
|
||||
private String serverHost; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.secure.bind_address_security:}") |
|
||||
private String serverHostSecurity; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.bind_port_no_sec:}") |
|
||||
private Integer serverPortNoSec; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.secure.bind_port_security:}") |
|
||||
private Integer serverPortSecurity; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.secure.public_x:}") |
|
||||
private String serverPublicX; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.secure.public_y:}") |
|
||||
private String serverPublicY; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.secure.private_encoded:}") |
|
||||
private String serverPrivateEncoded; |
|
||||
|
|
||||
@Getter |
|
||||
@Value("${transport.lwm2m.server.secure.alias:}") |
|
||||
private String serverAlias; |
|
||||
|
|
||||
@PostConstruct |
|
||||
public void init() { |
|
||||
this.getInKeyStore(); |
|
||||
} |
|
||||
|
|
||||
private KeyStore getInKeyStore() { |
|
||||
try { |
|
||||
if (keyStoreValue != null && keyStoreValue.size() > 0) |
|
||||
return keyStoreValue; |
|
||||
} catch (KeyStoreException e) { |
|
||||
log.error("Uninitialized keystore [{}]", keyStoreValue.toString()); |
|
||||
} |
|
||||
Path keyStorePath = (keyStorePathFile != null && !keyStorePathFile.isEmpty()) ? Paths.get(keyStorePathFile) : |
|
||||
(new File(Paths.get(getBaseDirPath(), PATH_DATA, KEY_STORE_DEFAULT_RESOURCE_PATH, KEY_STORE_DEFAULT_FILE).toUri()).isFile()) ? |
|
||||
Paths.get(getBaseDirPath(), PATH_DATA, KEY_STORE_DEFAULT_RESOURCE_PATH, KEY_STORE_DEFAULT_FILE) : |
|
||||
Paths.get(getBaseDirPath(), APP_DIR, TRANSPORT_DIR, LWM2M_DIR, SRC_DIR, MAIN_DIR, RESOURCES_DIR, KEY_STORE_DEFAULT_RESOURCE_PATH, KEY_STORE_DEFAULT_FILE); |
|
||||
File keyStoreFile = new File(keyStorePath.toUri()); |
|
||||
if (keyStoreFile.isFile()) { |
|
||||
try { |
|
||||
InputStream inKeyStore = new FileInputStream(keyStoreFile); |
|
||||
keyStoreValue = KeyStore.getInstance(keyStoreType); |
|
||||
keyStoreValue.load(inKeyStore, keyStorePasswordServer == null ? null : keyStorePasswordServer.toCharArray()); |
|
||||
} catch (CertificateException | NoSuchAlgorithmException | IOException | KeyStoreException e) { |
|
||||
log.error("[{}] Unable to load KeyStore files server, folder is not a directory", e.getMessage()); |
|
||||
keyStoreValue = null; |
|
||||
} |
|
||||
log.info("[{}] Load KeyStore files server, folder is a directory", keyStoreFile.getAbsoluteFile()); |
|
||||
} else { |
|
||||
log.error("[{}] Unable to load KeyStore files server, is not a file", keyStoreFile.getAbsoluteFile()); |
|
||||
keyStoreValue = null; |
|
||||
} |
|
||||
return keyStoreValue; |
|
||||
} |
|
||||
|
|
||||
private String getBaseDirPath() { |
|
||||
Path FULL_FILE_PATH; |
|
||||
if (BASE_DIR_PATH.endsWith("bin")) { |
|
||||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH.replaceAll("bin$", "")); |
|
||||
} else if (BASE_DIR_PATH.endsWith("conf")) { |
|
||||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH.replaceAll("conf$", "")); |
|
||||
} else if (BASE_DIR_PATH.endsWith("application")) { |
|
||||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH.substring(0, BASE_DIR_PATH.length() - "application".length())); |
|
||||
} else { |
|
||||
FULL_FILE_PATH = Paths.get(BASE_DIR_PATH); |
|
||||
} |
|
||||
return FULL_FILE_PATH.toUri().getPath(); |
|
||||
} |
|
||||
} |
|
||||
Loading…
Reference in new issue