mirror of
https://github.com/corda/corda.git
synced 2024-12-28 00:38:55 +00:00
Merge remote-tracking branch 'open/master' into os-merge-ecce64b
# Conflicts: # node/src/main/kotlin/net/corda/node/utilities/registration/HTTPNetworkRegistrationService.kt
This commit is contained in:
commit
4a77712978
@ -43,6 +43,7 @@ import java.io.*
|
|||||||
import java.lang.reflect.Field
|
import java.lang.reflect.Field
|
||||||
import java.math.BigDecimal
|
import java.math.BigDecimal
|
||||||
import java.net.HttpURLConnection
|
import java.net.HttpURLConnection
|
||||||
|
import java.net.HttpURLConnection.HTTP_OK
|
||||||
import java.net.URL
|
import java.net.URL
|
||||||
import java.nio.ByteBuffer
|
import java.nio.ByteBuffer
|
||||||
import java.nio.charset.Charset
|
import java.nio.charset.Charset
|
||||||
@ -362,10 +363,11 @@ val KClass<*>.packageName: String get() = java.`package`.name
|
|||||||
|
|
||||||
fun URL.openHttpConnection(): HttpURLConnection = openConnection() as HttpURLConnection
|
fun URL.openHttpConnection(): HttpURLConnection = openConnection() as HttpURLConnection
|
||||||
|
|
||||||
fun URL.post(serializedData: OpaqueBytes): ByteArray {
|
fun URL.post(serializedData: OpaqueBytes, vararg properties: Pair<String, String>): ByteArray {
|
||||||
return openHttpConnection().run {
|
return openHttpConnection().run {
|
||||||
doOutput = true
|
doOutput = true
|
||||||
requestMethod = "POST"
|
requestMethod = "POST"
|
||||||
|
properties.forEach { (key, value) -> setRequestProperty(key, value) }
|
||||||
setRequestProperty("Content-Type", "application/octet-stream")
|
setRequestProperty("Content-Type", "application/octet-stream")
|
||||||
outputStream.use { serializedData.open().copyTo(it) }
|
outputStream.use { serializedData.open().copyTo(it) }
|
||||||
checkOkResponse()
|
checkOkResponse()
|
||||||
@ -374,12 +376,13 @@ fun URL.post(serializedData: OpaqueBytes): ByteArray {
|
|||||||
}
|
}
|
||||||
|
|
||||||
fun HttpURLConnection.checkOkResponse() {
|
fun HttpURLConnection.checkOkResponse() {
|
||||||
if (responseCode != 200) {
|
if (responseCode != HTTP_OK) {
|
||||||
val message = errorStream.use { it.reader().readText() }
|
throw IOException("Response Code $responseCode: $errorMessage")
|
||||||
throw IOException("Response Code $responseCode: $message")
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
val HttpURLConnection.errorMessage: String? get() = errorStream?.let { it.use { it.reader().readText() } }
|
||||||
|
|
||||||
inline fun <reified T : Any> HttpURLConnection.responseAs(): T {
|
inline fun <reified T : Any> HttpURLConnection.responseAs(): T {
|
||||||
checkOkResponse()
|
checkOkResponse()
|
||||||
return inputStream.readObject()
|
return inputStream.readObject()
|
||||||
|
@ -58,7 +58,7 @@ class NetworkMapClient(compatibilityZoneURL: URL, val trustedRoot: X509Certifica
|
|||||||
val connection = networkMapUrl.openHttpConnection()
|
val connection = networkMapUrl.openHttpConnection()
|
||||||
val signedNetworkMap = connection.responseAs<SignedNetworkMap>()
|
val signedNetworkMap = connection.responseAs<SignedNetworkMap>()
|
||||||
val networkMap = signedNetworkMap.verifiedNetworkMapCert(trustedRoot)
|
val networkMap = signedNetworkMap.verifiedNetworkMapCert(trustedRoot)
|
||||||
val timeout = connection.cacheControl().maxAgeSeconds().seconds
|
val timeout = connection.cacheControl.maxAgeSeconds().seconds
|
||||||
logger.trace { "Fetched network map update from $networkMapUrl successfully: $networkMap" }
|
logger.trace { "Fetched network map update from $networkMapUrl successfully: $networkMap" }
|
||||||
return NetworkMapResponse(networkMap, timeout)
|
return NetworkMapResponse(networkMap, timeout)
|
||||||
}
|
}
|
||||||
|
@ -10,13 +10,14 @@
|
|||||||
|
|
||||||
package net.corda.node.utilities.registration
|
package net.corda.node.utilities.registration
|
||||||
|
|
||||||
import com.google.common.net.MediaType
|
import net.corda.core.internal.errorMessage
|
||||||
import net.corda.core.internal.openHttpConnection
|
import net.corda.core.internal.openHttpConnection
|
||||||
|
import net.corda.core.internal.post
|
||||||
|
import net.corda.core.utilities.OpaqueBytes
|
||||||
import net.corda.core.utilities.seconds
|
import net.corda.core.utilities.seconds
|
||||||
import net.corda.nodeapi.internal.crypto.X509CertificateFactory
|
import net.corda.nodeapi.internal.crypto.X509CertificateFactory
|
||||||
import okhttp3.CacheControl
|
import okhttp3.CacheControl
|
||||||
import okhttp3.Headers
|
import okhttp3.Headers
|
||||||
import org.apache.commons.io.IOUtils
|
|
||||||
import org.bouncycastle.pkcs.PKCS10CertificationRequest
|
import org.bouncycastle.pkcs.PKCS10CertificationRequest
|
||||||
import java.io.IOException
|
import java.io.IOException
|
||||||
import java.net.HttpURLConnection
|
import java.net.HttpURLConnection
|
||||||
@ -31,7 +32,7 @@ class HTTPNetworkRegistrationService(compatibilityZoneURL: URL) : NetworkRegistr
|
|||||||
|
|
||||||
companion object {
|
companion object {
|
||||||
// TODO: Propagate version information from gradle
|
// TODO: Propagate version information from gradle
|
||||||
val clientVersion = "1.0"
|
const val CLIENT_VERSION = "1.0"
|
||||||
}
|
}
|
||||||
|
|
||||||
@Throws(CertificateRequestException::class)
|
@Throws(CertificateRequestException::class)
|
||||||
@ -39,7 +40,7 @@ class HTTPNetworkRegistrationService(compatibilityZoneURL: URL) : NetworkRegistr
|
|||||||
// Poll server to download the signed certificate once request has been approved.
|
// Poll server to download the signed certificate once request has been approved.
|
||||||
val conn = URL("$registrationURL/$requestId").openHttpConnection()
|
val conn = URL("$registrationURL/$requestId").openHttpConnection()
|
||||||
conn.requestMethod = "GET"
|
conn.requestMethod = "GET"
|
||||||
val maxAge = conn.cacheControl().maxAgeSeconds()
|
val maxAge = conn.cacheControl.maxAgeSeconds()
|
||||||
// Default poll interval to 10 seconds if not specified by the server, for backward compatibility.
|
// Default poll interval to 10 seconds if not specified by the server, for backward compatibility.
|
||||||
val pollInterval = if (maxAge == -1) 10.seconds else maxAge.seconds
|
val pollInterval = if (maxAge == -1) 10.seconds else maxAge.seconds
|
||||||
|
|
||||||
@ -54,33 +55,15 @@ class HTTPNetworkRegistrationService(compatibilityZoneURL: URL) : NetworkRegistr
|
|||||||
}
|
}
|
||||||
HTTP_NO_CONTENT -> CertificateResponse(pollInterval, null)
|
HTTP_NO_CONTENT -> CertificateResponse(pollInterval, null)
|
||||||
HTTP_UNAUTHORIZED -> throw CertificateRequestException("Certificate signing request has been rejected: ${conn.errorMessage}")
|
HTTP_UNAUTHORIZED -> throw CertificateRequestException("Certificate signing request has been rejected: ${conn.errorMessage}")
|
||||||
else -> throwUnexpectedResponseCode(conn)
|
else -> throw IOException("Response Code ${conn.responseCode}: ${conn.errorMessage}")
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
override fun submitRequest(request: PKCS10CertificationRequest): String {
|
override fun submitRequest(request: PKCS10CertificationRequest): String {
|
||||||
// Post request to certificate signing server via http.
|
return String(registrationURL.post(OpaqueBytes(request.encoded), "Client-Version" to CLIENT_VERSION))
|
||||||
val conn = URL("$registrationURL").openHttpConnection()
|
|
||||||
conn.doOutput = true
|
|
||||||
conn.requestMethod = "POST"
|
|
||||||
conn.setRequestProperty("Content-Type", MediaType.OCTET_STREAM.toString())
|
|
||||||
conn.setRequestProperty("Client-Version", clientVersion)
|
|
||||||
conn.outputStream.write(request.encoded)
|
|
||||||
|
|
||||||
return when (conn.responseCode) {
|
|
||||||
HTTP_OK -> IOUtils.toString(conn.inputStream, conn.charset)
|
|
||||||
HTTP_FORBIDDEN -> throw IOException("Client version $clientVersion is forbidden from accessing permissioning server, please upgrade to newer version.")
|
|
||||||
else -> throwUnexpectedResponseCode(conn)
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
private fun throwUnexpectedResponseCode(connection: HttpURLConnection): Nothing {
|
|
||||||
throw IOException("Unexpected response code ${connection.responseCode} - ${connection.errorMessage}")
|
|
||||||
}
|
|
||||||
|
|
||||||
private val HttpURLConnection.charset: String get() = MediaType.parse(contentType).charset().or(Charsets.UTF_8).name()
|
|
||||||
|
|
||||||
private val HttpURLConnection.errorMessage: String get() = IOUtils.toString(errorStream, charset)
|
|
||||||
}
|
}
|
||||||
|
|
||||||
fun HttpURLConnection.cacheControl(): CacheControl = CacheControl.parse(Headers.of(headerFields.filterKeys { it != null }.mapValues { it.value[0] }))
|
val HttpURLConnection.cacheControl: CacheControl get() {
|
||||||
|
return CacheControl.parse(Headers.of(headerFields.filterKeys { it != null }.mapValues { it.value[0] }))
|
||||||
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user