BYOKCostanti.java

  1. /*
  2.  * GovWay - A customizable API Gateway 
  3.  * https://govway.org
  4.  * 
  5.  * Copyright (c) 2005-2025 Link.it srl (https://link.it). 
  6.  * 
  7.  * This program is free software: you can redistribute it and/or modify
  8.  * it under the terms of the GNU General Public License version 3, as published by
  9.  * the Free Software Foundation.
  10.  *
  11.  * This program is distributed in the hope that it will be useful,
  12.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14.  * GNU General Public License for more details.
  15.  *
  16.  * You should have received a copy of the GNU General Public License
  17.  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18.  *
  19.  */

  21. package org.openspcoop2.utils.certificate.byok;

  23. import java.util.ArrayList;
  24. import java.util.List;

  26. /**
  27.  * BYOKCostanti
  28.  *
  29.  * @author Poli Andrea (apoli@link.it)
  30.  * @author $Author$
  31.  * @version $Rev$, $Date$
  32.  */
  33. public class BYOKCostanti {
  34.     
  35.     private BYOKCostanti() {}

  37.     public static final String SECURITY_PROPERTY_PREFIX = "security.";
  38.     
  39.     public static final String SECURITY_PROPERTY_SUFFIX_WRAP_KMS = "kms.wrap";
  40.     public static final String SECURITY_PROPERTY_SUFFIX_WRAP_KSM_DEPRECATED = "ksm.wrap";
  41.     
  42.     public static final String SECURITY_PROPERTY_SUFFIX_UNWRAP_KMS = "kms.unwrap";
  43.     public static final String SECURITY_PROPERTY_SUFFIX_UNWRAP_KSM_DEPRECATED = "ksm.unwrap";
  44.     
  45.     public static final String SECURITY_PROPERTY_SUFFIX_INPUT_KMS = "kms.param.";
  46.     public static final String SECURITY_PROPERTY_SUFFIX_INPUT_KSM_DEPRECATED = "ksm.param.";
  47.     
  48.     
  49.     
  50.     public static final String PROPERTY_PREFIX_KMS = "kms.";
  51.     public static final String PROPERTY_PREFIX_KSM_DEPRECATED = "ksm.";
  52.     
  53.     public static final String PROPERTY_SUFFIX_LABEL = "label";
  54.     public static final String PROPERTY_SUFFIX_TYPE = "type";
  55.     
  56.     public static final String PROPERTY_SUFFIX_MODE = "mode";
  57.     public static final String PROPERTY_MODE_WRAP = "wrap";
  58.     public static final String PROPERTY_MODE_UNWRAP = "unwrap";
  59.     
  60.     public static final String PROPERTY_SUFFIX_ENCRYPTION_MODE = "encryptionMode";
  61.     public static final String PROPERTY_ENCRYPTION_MODE_LOCAL = "local";
  62.     public static final String PROPERTY_ENCRYPTION_MODE_REMOTE = "remote";
  63.     
  64.     public static final String PROPERTY_SUFFIX_INPUT = "input.";
  65.     public static final String PROPERTY_SUFFIX_INPUT_NAME = ".name";
  66.     public static final String PROPERTY_SUFFIX_INPUT_LABEL = ".label";
  67.     
  68.     
  69.     public static final String PROPERTY_SUFFIX_HTTP_ENDPOINT = "http.endpoint";
  70.     public static final String PROPERTY_SUFFIX_HTTP_METHOD = "http.method";
  71.     public static final String PROPERTY_SUFFIX_HTTP_HEADER = "http.header.";
  72.     public static final String PROPERTY_SUFFIX_HTTP_PAYLOAD_INLINE = "http.payload.inline";
  73.     public static final String PROPERTY_SUFFIX_HTTP_PAYLOAD_PATH = "http.payload.path";
  74.     
  75.     public static final String PROPERTY_SUFFIX_HTTP_USERNAME = "http.username";
  76.     public static final String PROPERTY_SUFFIX_HTTP_PASSWORD = "http.password";
  77.     
  78.     public static final String PROPERTY_SUFFIX_HTTP_CONNECTION_TIMEOUT = "http.connectionTimeout";
  79.     public static final String PROPERTY_SUFFIX_HTTP_READ_TIMEOUT = "http.readTimeout";

  81.     public static final String PROPERTY_SUFFIX_HTTPS = "https";
  82.     
  83.     public static final String PROPERTY_SUFFIX_HTTPS_VERIFICA_HOSTNAME = "https.hostnameVerifier";
  84.     
  85.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_SERVER = "https.serverAuth";
  86.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_SERVER_TRUSTSTORE_PATH = "https.serverAuth.trustStore.path";
  87.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_SERVER_TRUSTSTORE_TYPE = "https.serverAuth.trustStore.type";
  88.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_SERVER_TRUSTSTORE_PASSWORD = "https.serverAuth.trustStore.password";
  89.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_SERVER_CRLS = "https.serverAuth.trustStore.crls";
  90.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_SERVER_OCSP_POLICY = "https.serverAuth.trustStore.ocspPolicy";
  91.     
  92.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_CLIENT = "https.clientAuth";
  93.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_CLIENT_KEYSTORE_PATH = "https.clientAuth.keyStore.path";
  94.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_CLIENT_KEYSTORE_TYPE = "https.clientAuth.keyStore.type";
  95.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_CLIENT_KEYSTORE_PASSWORD = "https.clientAuth.keyStore.password";
  96.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_CLIENT_KEY_ALIAS = "https.clientAuth.key.alias";
  97.     public static final String PROPERTY_SUFFIX_HTTPS_AUTENTICAZIONE_CLIENT_KEY_PASSWORD = "https.clientAuth.key.password";

  99.     public static final String PROPERTY_SUFFIX_HTTP_RESPONSE_BASE64_ENCODED = "http.response.base64Encoded";
  100.     public static final String PROPERTY_SUFFIX_HTTP_RESPONSE_HEX_ENCODED = "http.response.hexEncoded";
  101.     public static final String PROPERTY_SUFFIX_HTTP_RESPONSE_JSON_PATH = "http.response.jsonPath";
  102.     public static final String PROPERTY_SUFFIX_HTTP_RESPONSE_JSON_PATH_BASE64_ENCODED = "http.response.jsonPath.base64Encoded";
  103.     public static final String PROPERTY_SUFFIX_HTTP_RESPONSE_JSON_PATH_HEX_ENCODED = "http.response.jsonPath.hexEncoded";
  104.     
  105.     
  106.     
  107.     public static final String PROPERTY_LOCAL_ENCRYPTION_ENGINE_JAVA = "java";
  108.     public static final String PROPERTY_LOCAL_ENCRYPTION_ENGINE_JOSE = "jose";
  109.     public static final String PROPERTY_LOCAL_ENCRYPTION_ENGINE_OPENSSL = "openssl";
  110.     
  111.     public static final String PROPERTY_LOCAL_ENCODING_BASE64 = "base64";
  112.     public static final String PROPERTY_LOCAL_ENCODING_HEX = "hex";
  113.         
  114.     public static final String PROPERTY_SUFFIX_LOCAL_IMPL = "local.impl";
  115.     
  116.     public static final String PROPERTY_SUFFIX_LOCAL_KEYSTORE_TYPE = "local.keystore.type";
  117.     public static final String PROPERTY_SUFFIX_LOCAL_KEYSTORE_PATH = "local.keystore.path";
  118.     public static final String PROPERTY_SUFFIX_LOCAL_KEYSTORE_PASSWORD = "local.keystore.password";
  119.     
  120.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_PATH = "local.key.path";
  121.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_INLINE = "local.key.inline";
  122.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_ENCODING = "local.key.encoding";
  123.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_ALGORITHM = "local.key.algorithm";
  124.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_ALIAS = "local.key.alias";
  125.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_PASSWORD = "local.key.password";
  126.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_ID = "local.key.id";
  127.     public static final String PROPERTY_SUFFIX_LOCAL_KEY_WRAP = "local.key.wrap";
  128.     
  129.     public static final String PROPERTY_SUFFIX_LOCAL_PUBLIC_KEY_PATH = "local.publicKey.path";
  130.     public static final String PROPERTY_SUFFIX_LOCAL_PUBLIC_KEY_INLINE = "local.publicKey.inline";
  131.     public static final String PROPERTY_SUFFIX_LOCAL_PUBLIC_KEY_ENCODING = "local.publicKey.encoding";
  132.     
  133.     public static final String PROPERTY_SUFFIX_LOCAL_PW = "local.password";
  134.     public static final String PROPERTY_SUFFIX_LOCAL_PW_TYPE = "local.password.type";
  135.     /**public static final String PROPERTY_LOCAL_PW_TYPE_OPENSSL_AES_128_CBC = "openssl-aes-128-cbc";
  136.     public static final String PROPERTY_LOCAL_PW_TYPE_OPENSSL_AES_192_CBC = "openssl-aes-192-cbc";*/
  137.     public static final String PROPERTY_LOCAL_PW_TYPE_OPENSSL_AES_256_CBC = "openssl-aes-256-cbc";
  138.     public static final String PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_128_CBC = "openssl-pbkdf2-aes-128-cbc";
  139.     public static final String PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_192_CBC = "openssl-pbkdf2-aes-192-cbc";
  140.     public static final String PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_256_CBC = "openssl-pbkdf2-aes-256-cbc";
  141.     private static final List<String> localPwdTypes = new ArrayList<>();
  142.     static {
  143.         /**localPwdTypes.add(PROPERTY_LOCAL_PW_TYPE_OPENSSL_AES_128_CBC);
  144.         localPwdTypes.add(PROPERTY_LOCAL_PW_TYPE_OPENSSL_AES_192_CBC);*/
  145.         localPwdTypes.add(PROPERTY_LOCAL_PW_TYPE_OPENSSL_AES_256_CBC);
  146.         localPwdTypes.add(PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_128_CBC);
  147.         localPwdTypes.add(PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_192_CBC);
  148.         localPwdTypes.add(PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_256_CBC);
  149.     }
  150.     public static List<String> getLocalPasswordTypes() {
  151.         return localPwdTypes;
  152.     }
  153.     public static boolean isOpenSSLPasswordDerivationKeyMode(String mode) {
  154.         return PROPERTY_LOCAL_PW_TYPE_OPENSSL_AES_256_CBC.equals(mode) ||
  155.                 PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_128_CBC.equals(mode) ||
  156.                 PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_192_CBC.equals(mode) ||
  157.                 PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_256_CBC.equals(mode);
  158.     }
  159.     public static boolean isOpenSSLPBKDF2PasswordDerivationKeyMode(String mode) {
  160.         return PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_128_CBC.equals(mode) ||
  161.                 PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_192_CBC.equals(mode) ||
  162.                 PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_256_CBC.equals(mode);
  163.     }
  164.     public static final String PROPERTY_LOCAL_PW_TYPE_DEFAULT = PROPERTY_LOCAL_PW_TYPE_OPENSSL_PBKDF2_AES_256_CBC;
  165.     public static final String PROPERTY_SUFFIX_LOCAL_PWD_ITERATION = "local.password.iter";
  166.         
  167.     public static final String PROPERTY_SUFFIX_LOCAL_CONTENT_ALGORITHM = "local.algorithm";
  168.     
  169.     public static final String PROPERTY_SUFFIX_LOCAL_ENCODING = "local.encoding";

  171.     public static final String PROPERTY_SUFFIX_LOCAL_JOSE_INCLUDE_CERT = "local.include.cert";
  172.     public static final String PROPERTY_SUFFIX_LOCAL_JOSE_INCLUDE_PUBLIC_KEY = "local.include.public.key";
  173.     public static final String PROPERTY_SUFFIX_LOCAL_JOSE_INCLUDE_KEY_ID = "local.include.key.id";
  174.     public static final String PROPERTY_SUFFIX_LOCAL_JOSE_INCLUDE_CERT_SHA1 = "local.include.cert.sha1";
  175.     public static final String PROPERTY_SUFFIX_LOCAL_JOSE_INCLUDE_CERT_SHA256 = "local.include.cert.sha256";
  176.     
  177.     
  178.     
  179.     
  180.     public static final String VARIABILE_KMS_KEY = "${kms-key}";
  181.     public static final String VARIABILE_KMS_KEY_URL_ENCODED = "${kms-urlencoded-key}";
  182.     public static final String VARIABILE_KMS_KEY_BASE64 = "${kms-base64-key}";
  183.     public static final String VARIABILE_KMS_KEY_BASE64_URL_ENCODED = "${kms-base64-urlencoded-key}";
  184.     public static final String VARIABILE_KMS_KEY_HEX = "${kms-hex-key}";
  185.     public static final String VARIABILE_KMS_KEY_HEX_URL_ENCODED = "${kms-hex-urlencoded-key}";
  186.     // deprecated
  187.     public static final String VARIABILE_KSM_KEY_DEPRECATED = "${ksm-key}";
  188.     public static final String VARIABILE_KSM_KEY_URL_ENCODED_DEPRECATED = "${ksm-urlencoded-key}";
  189.     public static final String VARIABILE_KSM_KEY_BASE64_DEPRECATED = "${ksm-base64-key}";
  190.     public static final String VARIABILE_KSM_KEY_BASE64_URL_ENCODED_DEPRECATED = "${ksm-base64-urlencoded-key}";
  191.     public static final String VARIABILE_KSM_KEY_HEX_DEPRECATED = "${ksm-hex-key}";
  192.     public static final String VARIABILE_KSM_KEY_HEX_URL_ENCODED_DEPRECATED = "${ksm-hex-urlencoded-key}";
  193.     
  194.     
  195.     public static final String VARIABILE_KMS = "kms";
  196.     public static final String VARIABILE_KMS_KEY_PREFIX = "${kms:";
  197.     // deprecated
  198.     public static final String VARIABILE_KSM_DEPRECATED = "ksm";
  199.     public static final String VARIABILE_KSM_KEY_PREFIX_DEPRECATED = "${ksm:";
  200.     
  201.     
  202.     
  203.     public static final String GOVWAY_RUNTIME_CONTEXT="govway-runtime";
  204.     public static final String GOVWAY_RUNTIME_ENDPOINT_WRAP="endpoint-wrap";
  205.     public static final String GOVWAY_RUNTIME_ENDPOINT_UNWRAP="endpoint-unwrap";
  206.     public static final String GOVWAY_RUNTIME_USERNAME="username";
  207.     public static final String GOVWAY_RUNTIME_PASSWORD="password";
  208.     
  209.     
  210.     public static final String PROPERTY_GOVWAY_SECURITY = "govway.security";
  211.     public static final String PROPERTY_GOVWAY_SECURITY_RUNTIME = "govway.security.runtime";
  212. }
Created with JaCoCo 0.8.8.202204050719