Package com.yahoo.vespa.athenz.identity

Class SiaIdentityProvider

java.lang.Object

com.yahoo.component.AbstractComponent

com.yahoo.vespa.athenz.identity.SiaIdentityProvider

All Implemented Interfaces:

com.yahoo.component.Component, com.yahoo.component.Deconstructable, ServiceIdentityProvider, Comparable<com.yahoo.component.Component>

public class SiaIdentityProvider
extends com.yahoo.component.AbstractComponent
implements ServiceIdentityProvider

A ServiceIdentityProvider that provides the credentials stored on file system.

Author:

mortent, bjorncs

Field Summary

Fields inherited from class com.yahoo.component.AbstractComponent

isDeconstructable

Constructor Summary

Constructors

Constructor	Description
SiaIdentityProvider(AthenzIdentity service, Path siaPath, Path clientTruststoreFile)
SiaIdentityProvider(AthenzIdentity service, Path privateKeyFile, Path certificateFile, Path clientTruststoreFile)
SiaIdentityProvider(SiaProviderConfig config)

Method Summary

Modifier and Type	Method	Description
Path	certificatePath()
SSLContext	createIdentitySslContextWithTrustStore(Path trustStoreFile)
void	deconstruct()
com.yahoo.security.X509CertificateWithKey	getIdentityCertificateWithKey()
SSLContext	getIdentitySslContext()
AthenzIdentity	identity()
Path	privateKeyPath()

Methods inherited from class com.yahoo.component.AbstractComponent

clone, compareTo, getClassName, getId, getIdString, hasInitializedId, initId, isDeconstructable, setIsDeconstructable, toString

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

SiaIdentityProvider

@Inject
public SiaIdentityProvider(SiaProviderConfig config)

SiaIdentityProvider

public SiaIdentityProvider(AthenzIdentity service,
 Path siaPath,
 Path clientTruststoreFile)

SiaIdentityProvider

public SiaIdentityProvider(AthenzIdentity service,
 Path privateKeyFile,
 Path certificateFile,
 Path clientTruststoreFile)

Method Details

identity

public AthenzIdentity identity()

Specified by:

identity in interface ServiceIdentityProvider

Returns:

The Athenz identity of the environment

getIdentitySslContext

public SSLContext getIdentitySslContext()

Specified by:

getIdentitySslContext in interface ServiceIdentityProvider

Returns:

SSLContext that is automatically updated.

getIdentityCertificateWithKey

public com.yahoo.security.X509CertificateWithKey getIdentityCertificateWithKey()

Specified by:

getIdentityCertificateWithKey in interface ServiceIdentityProvider

Returns:

Current certificate and private key. Unlike ServiceIdentityProvider.getIdentitySslContext() underlying credentials are not automatically updated.

certificatePath

public Path certificatePath()

Specified by:

certificatePath in interface ServiceIdentityProvider

Returns:

Path to X.509 certificate in PEM format

privateKeyPath

public Path privateKeyPath()

Specified by:

privateKeyPath in interface ServiceIdentityProvider

Returns:

Path to private key in PEM format

createIdentitySslContextWithTrustStore

public SSLContext createIdentitySslContextWithTrustStore(Path trustStoreFile)

deconstruct

public void deconstruct()

Specified by:

deconstruct in interface com.yahoo.component.Deconstructable

Overrides:

deconstruct in class com.yahoo.component.AbstractComponent