/* * Copyright (C) 2008-2023, Juick * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU Affero General Public License as * published by the Free Software Foundation, either version 3 of the * License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Affero General Public License for more details. * * You should have received a copy of the GNU Affero General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ package com.juick; import com.juick.www.api.activity.model.objects.Actor; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.core.io.Resource; import org.tomitribe.churchkey.Key; import org.tomitribe.churchkey.Keys; import javax.net.ssl.KeyManagerFactory; import java.io.IOException; import java.io.InputStream; import java.security.*; import java.security.cert.Certificate; import java.security.cert.CertificateException; public class KeystoreManager { private static final Logger logger = LoggerFactory.getLogger("ActivityPub"); private PrivateKey privateKey; private PublicKey publicKey; private String pem; public KeystoreManager(Resource keystore, String keystorePassword) { try (InputStream ksIs = keystore.getInputStream()) { KeyStore ks = KeyStore.getInstance("PKCS12"); ks.load(ksIs, keystorePassword.toCharArray()); KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory .getDefaultAlgorithm()); kmf.init(ks, keystorePassword.toCharArray()); privateKey = (PrivateKey) ks.getKey("1", keystorePassword.toCharArray()); Certificate certificate = ks.getCertificate("1"); var keyPair = new KeyPair(certificate.getPublicKey(), privateKey); publicKey = keyPair.getPublic(); pem = new String(Keys.of(getPublicKey()).encode(Key.Format.PEM)).replace("\r\n", "\n"); } catch (IOException | KeyStoreException | NoSuchAlgorithmException | UnrecoverableKeyException | CertificateException e) { logger.error("Keystore error", e); } } public PrivateKey getPrivateKey() { return privateKey; } public PublicKey getPublicKey() { return publicKey; } public String getPublicKeyPem() { return pem; } public static java.security.Key publicKeyOf(Actor person) { String pubkeyPem = person.getPublicKey().getPublicKeyPem(); return Keys.decode(pubkeyPem.getBytes()).getKey(); } }