Package org.apache.hadoop.ozone.security

Class OMCertificateClient

java.lang.Object
org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient
org.apache.hadoop.ozone.security.OMCertificateClient
All Implemented Interfaces:
Closeable, AutoCloseable, org.apache.hadoop.hdds.security.x509.certificate.client.CertificateClient
public class OMCertificateClient extends org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient
Certificate client for OzoneManager.

  • Nested Class Summary

    Nested classes/interfaces inherited from class org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient

    org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient.CertificateRenewerService, org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient.InitCase

    Nested classes/interfaces inherited from interface org.apache.hadoop.hdds.security.x509.certificate.client.CertificateClient

    org.apache.hadoop.hdds.security.x509.certificate.client.CertificateClient.InitResponse

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    COMPONENT_NAME
     

    Fields inherited from class org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient

    CERT_FILE_NAME_FORMAT

  • Constructor Summary

    Constructors
    Constructor
    Description
    OMCertificateClient(org.apache.hadoop.hdds.security.SecurityConfig secConfig, org.apache.hadoop.hdds.protocolPB.SCMSecurityProtocolClientSideTranslatorPB scmSecurityClient, OMStorage omStorage, org.apache.hadoop.hdds.protocol.proto.HddsProtos.OzoneManagerDetailsProto omInfo, String serviceId, String scmID, Consumer<String> saveCertIdCallback, Runnable shutdownCallback)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    org.apache.hadoop.hdds.security.x509.certificate.utils.CertificateSignRequest.Builder
    configureCSRBuilder()
    Returns a CSR builder that can be used to create a Certificate sigining request.
    org.slf4j.Logger
    getLogger()
     
    protected org.apache.hadoop.hdds.protocol.proto.SCMSecurityProtocolProtos.SCMGetCertResponseProto
    sign(org.apache.hadoop.hdds.security.x509.certificate.utils.CertificateSignRequest request)
     

    Methods inherited from class org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient

    bootstrapClientKeys, cleanBackupDir, close, createClientTrustManager, createKeyPair, getAllCaCerts, getAllRootCaCerts, getCACertificate, getCACertPath, getCertificate, getCertificate, getCertPath, getComponentName, getKeyManager, getPrivateKey, getPublicKey, getRootCACertificate, getRootCaRotationListener, getScmSecureClient, getSecurityConfig, getTrustChain, getTrustManager, handleCase, init, initWithRecovery, notifyNotificationReceivers, recoverPublicKey, recoverPublicKeyFromPrivateKey, recoverStateIfNeeded, registerNotificationReceiver, registerRootCARotationListener, reloadKeyAndCertificate, renewAndStoreKeyAndCertificate, setCACertificate, shouldStartCertificateRenewerService, signAndStoreCertificate, signData, startCertificateRenewerService, storeCertificate, storeCertificate, threadNamePrefix, timeBeforeExpiryGracePeriod, validateKeyPair, validateKeyPairAndCertificate, verifySignature

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    Methods inherited from interface org.apache.hadoop.hdds.security.x509.certificate.client.CertificateClient

    assertValidKeysAndCertificate

  • Field Details

  • Constructor Details

    • OMCertificateClient

      public OMCertificateClient(org.apache.hadoop.hdds.security.SecurityConfig secConfig, org.apache.hadoop.hdds.protocolPB.SCMSecurityProtocolClientSideTranslatorPB scmSecurityClient, OMStorage omStorage, org.apache.hadoop.hdds.protocol.proto.HddsProtos.OzoneManagerDetailsProto omInfo, String serviceId, String scmID, Consumer<String> saveCertIdCallback, Runnable shutdownCallback)

  • Method Details

    • configureCSRBuilder

      public org.apache.hadoop.hdds.security.x509.certificate.utils.CertificateSignRequest.Builder configureCSRBuilder() throws org.apache.hadoop.hdds.security.exception.SCMSecurityException
      Returns a CSR builder that can be used to create a Certificate sigining request.
      Specified by:
      configureCSRBuilder in interface org.apache.hadoop.hdds.security.x509.certificate.client.CertificateClient
      Overrides:
      configureCSRBuilder in class org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient
      Returns:
      CertificateSignRequest.Builder
      Throws:
      org.apache.hadoop.hdds.security.exception.SCMSecurityException

    • sign

      protected org.apache.hadoop.hdds.protocol.proto.SCMSecurityProtocolProtos.SCMGetCertResponseProto sign(org.apache.hadoop.hdds.security.x509.certificate.utils.CertificateSignRequest request) throws IOException
      Specified by:
      sign in class org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient
      Throws:
      IOException

    • getLogger

      public org.slf4j.Logger getLogger()
      Overrides:
      getLogger in class org.apache.hadoop.hdds.security.x509.certificate.client.DefaultCertificateClient