Package org.acemq.amqp.security.dev

Class DevelopmentCertificates

java.lang.Object

org.acemq.amqp.security.dev.DevelopmentCertificates

public final class DevelopmentCertificates
extends Object

Generates a throwaway certificate authority and the certificates a local broker and client need, so that running with TLS on a developer's machine is one command rather than an afternoon with openssl.

Everything produced here carries ACEMQ DEVELOPMENT ONLY - DO NOT TRUST in its subject, and AceMQ refuses such a certificate unless the policy explicitly calls allowDevelopmentCertificates(). That is the point: a self-signed authority that drifts into production is worse than no encryption, because everything looks protected and nothing is verified. These fail closed instead.

Certificates are short-lived by default. A development certificate that never expires is one that outlives the reason it was created.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	DevelopmentCertificates.Result	What generate(java.nio.file.Path, java.lang.String, char[], java.time.Duration) wrote.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	MARKER	Written into every subject, and refused by the library unless explicitly allowed.

Constructor Summary

Constructors

Constructor	Description
DevelopmentCertificates()

Method Summary

Modifier and Type	Method	Description
DevelopmentCertificates.Result	generate(Path directory, String brokerHost, char[] password, Duration validity)	Writes a CA, a broker certificate, a client certificate and the two keystores AceMQ reads.
String	rabbitMqConfiguration(Path certificateDirectoryInContainer)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

MARKER

public static final String MARKER

Written into every subject, and refused by the library unless explicitly allowed.

See Also:

• Constant Field Values

Constructor Details

DevelopmentCertificates

public DevelopmentCertificates()

Method Details

generate

public DevelopmentCertificates.Result generate(Path directory,
 String brokerHost,
 char[] password,
 Duration validity)
                                        throws IOException,
GeneralSecurityException

Writes a CA, a broker certificate, a client certificate and the two keystores AceMQ reads.

Parameters:

directory - where to write them; created if absent

brokerHost - the host the broker will be reached at, which becomes the certificate's common name and a subject alternative name

password - protects the generated keystores

validity - how long the certificates are good for

Returns:

what was written

Throws:

IOException - if the files cannot be written

GeneralSecurityException - if the certificates cannot be generated

rabbitMqConfiguration

public String rabbitMqConfiguration(Path certificateDirectoryInContainer)

Returns:

a rabbitmq.conf that serves TLS with what generate(java.nio.file.Path, java.lang.String, char[], java.time.Duration) wrote