src/java.security.jgss/share/classes/sun/security/jgss/wrapper/SunNativeProvider.java
author weijun
Thu, 13 Jun 2019 10:06:07 +0800
changeset 55354 74f0622db875
parent 51398 3c389a284345
permissions -rw-r--r--
6722928: Support SSPI as a native GSS-API provider Reviewed-by: erikj, nwilliams, valeriep
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     1
/*
55354
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
     2
 * Copyright (c) 2005, 2019, Oracle and/or its affiliates. All rights reserved.
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     3
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
90ce3da70b43 Initial load
duke
parents:
diff changeset
     4
 *
90ce3da70b43 Initial load
duke
parents:
diff changeset
     5
 * This code is free software; you can redistribute it and/or modify it
90ce3da70b43 Initial load
duke
parents:
diff changeset
     6
 * under the terms of the GNU General Public License version 2 only, as
5506
202f599c92aa 6943119: Rebrand source copyright notices
ohair
parents: 5300
diff changeset
     7
 * published by the Free Software Foundation.  Oracle designates this
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     8
 * particular file as subject to the "Classpath" exception as provided
5506
202f599c92aa 6943119: Rebrand source copyright notices
ohair
parents: 5300
diff changeset
     9
 * by Oracle in the LICENSE file that accompanied this code.
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    10
 *
90ce3da70b43 Initial load
duke
parents:
diff changeset
    11
 * This code is distributed in the hope that it will be useful, but WITHOUT
90ce3da70b43 Initial load
duke
parents:
diff changeset
    12
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
90ce3da70b43 Initial load
duke
parents:
diff changeset
    13
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
90ce3da70b43 Initial load
duke
parents:
diff changeset
    14
 * version 2 for more details (a copy is included in the LICENSE file that
90ce3da70b43 Initial load
duke
parents:
diff changeset
    15
 * accompanied this code).
90ce3da70b43 Initial load
duke
parents:
diff changeset
    16
 *
90ce3da70b43 Initial load
duke
parents:
diff changeset
    17
 * You should have received a copy of the GNU General Public License version
90ce3da70b43 Initial load
duke
parents:
diff changeset
    18
 * 2 along with this work; if not, write to the Free Software Foundation,
90ce3da70b43 Initial load
duke
parents:
diff changeset
    19
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    20
 *
5506
202f599c92aa 6943119: Rebrand source copyright notices
ohair
parents: 5300
diff changeset
    21
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
202f599c92aa 6943119: Rebrand source copyright notices
ohair
parents: 5300
diff changeset
    22
 * or visit www.oracle.com if you need additional information or have any
202f599c92aa 6943119: Rebrand source copyright notices
ohair
parents: 5300
diff changeset
    23
 * questions.
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    24
 */
90ce3da70b43 Initial load
duke
parents:
diff changeset
    25
90ce3da70b43 Initial load
duke
parents:
diff changeset
    26
package sun.security.jgss.wrapper;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    27
90ce3da70b43 Initial load
duke
parents:
diff changeset
    28
import java.util.HashMap;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    29
import java.security.Provider;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    30
import java.security.AccessController;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    31
import java.security.PrivilegedAction;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    32
import org.ietf.jgss.Oid;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    33
import sun.security.action.PutAllAction;
40416
5d91b2fd668c 8130181: Deprecate java.security.Provider(String, double, String), add Provider(Strin
valeriep
parents: 33992
diff changeset
    34
import static sun.security.util.SecurityConstants.PROVIDER_VER;
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    35
90ce3da70b43 Initial load
duke
parents:
diff changeset
    36
/**
90ce3da70b43 Initial load
duke
parents:
diff changeset
    37
 * Defines the Sun NativeGSS provider for plugging in the
90ce3da70b43 Initial load
duke
parents:
diff changeset
    38
 * native GSS mechanisms to Java GSS.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    39
 *
90ce3da70b43 Initial load
duke
parents:
diff changeset
    40
 * List of supported mechanisms depends on the local
90ce3da70b43 Initial load
duke
parents:
diff changeset
    41
 * machine configuration.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    42
 *
90ce3da70b43 Initial load
duke
parents:
diff changeset
    43
 * @author Yu-Ching Valerie Peng
90ce3da70b43 Initial load
duke
parents:
diff changeset
    44
 */
90ce3da70b43 Initial load
duke
parents:
diff changeset
    45
90ce3da70b43 Initial load
duke
parents:
diff changeset
    46
public final class SunNativeProvider extends Provider {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    47
90ce3da70b43 Initial load
duke
parents:
diff changeset
    48
    private static final long serialVersionUID = -238911724858694204L;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    49
90ce3da70b43 Initial load
duke
parents:
diff changeset
    50
    private static final String NAME = "SunNativeGSS";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    51
    private static final String INFO = "Sun Native GSS provider";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    52
    private static final String MF_CLASS =
90ce3da70b43 Initial load
duke
parents:
diff changeset
    53
        "sun.security.jgss.wrapper.NativeGSSFactory";
50508
6aa873a6dae9 8194073: Invalid SunNativeProvider.INSTANCE initialization
valeriep
parents: 47216
diff changeset
    54
    private static final HashMap<String, String> MECH_MAP;
6aa873a6dae9 8194073: Invalid SunNativeProvider.INSTANCE initialization
valeriep
parents: 47216
diff changeset
    55
    static final Provider INSTANCE;
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    56
    static boolean DEBUG;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    57
    static void debug(String message) {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    58
        if (DEBUG) {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    59
            if (message == null) {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    60
                throw new NullPointerException();
90ce3da70b43 Initial load
duke
parents:
diff changeset
    61
            }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    62
            System.out.println(NAME + ": " + message);
90ce3da70b43 Initial load
duke
parents:
diff changeset
    63
        }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    64
    }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    65
90ce3da70b43 Initial load
duke
parents:
diff changeset
    66
    static {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    67
        MECH_MAP =
10336
0bb1999251f8 7064075: Security libraries don't build with javac -Xlint:all,-deprecation -Werror
jjg
parents: 9035
diff changeset
    68
            AccessController.doPrivileged(
55354
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
    69
                new PrivilegedAction<>() {
10336
0bb1999251f8 7064075: Security libraries don't build with javac -Xlint:all,-deprecation -Werror
jjg
parents: 9035
diff changeset
    70
                    public HashMap<String, String> run() {
51398
3c389a284345 8209416: Refactoring GetPropertyAction calls in security libs
weijun
parents: 50508
diff changeset
    71
                        DEBUG = Boolean.parseBoolean(
3c389a284345 8209416: Refactoring GetPropertyAction calls in security libs
weijun
parents: 50508
diff changeset
    72
                            System.getProperty("sun.security.nativegss.debug"));
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    73
                        try {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    74
                            System.loadLibrary("j2gss");
90ce3da70b43 Initial load
duke
parents:
diff changeset
    75
                        } catch (Error err) {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    76
                            debug("No j2gss library found!");
90ce3da70b43 Initial load
duke
parents:
diff changeset
    77
                            if (DEBUG) err.printStackTrace();
90ce3da70b43 Initial load
duke
parents:
diff changeset
    78
                            return null;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    79
                        }
55354
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
    80
                        String[] gssLibs;
51398
3c389a284345 8209416: Refactoring GetPropertyAction calls in security libs
weijun
parents: 50508
diff changeset
    81
                        String defaultLib
3c389a284345 8209416: Refactoring GetPropertyAction calls in security libs
weijun
parents: 50508
diff changeset
    82
                                = System.getProperty("sun.security.jgss.lib");
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
    83
                        if (defaultLib == null || defaultLib.trim().equals("")) {
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    84
                            String osname = System.getProperty("os.name");
90ce3da70b43 Initial load
duke
parents:
diff changeset
    85
                            if (osname.startsWith("SunOS")) {
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
    86
                                gssLibs = new String[]{ "libgss.so" };
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    87
                            } else if (osname.startsWith("Linux")) {
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
    88
                                gssLibs = new String[]{
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
    89
                                    "libgssapi.so",
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
    90
                                    "libgssapi_krb5.so",
8388
bc5ae489cd71 7016698: test sun/security/krb5/runNameEquals.sh failed on Ubuntu
weijun
parents: 5506
diff changeset
    91
                                    "libgssapi_krb5.so.2",
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
    92
                                };
17435
ec797e955dca 8010192: Enable native JGSS provider on Mac
weijun
parents: 14780
diff changeset
    93
                            } else if (osname.contains("OS X")) {
ec797e955dca 8010192: Enable native JGSS provider on Mac
weijun
parents: 14780
diff changeset
    94
                                gssLibs = new String[]{
ec797e955dca 8010192: Enable native JGSS provider on Mac
weijun
parents: 14780
diff changeset
    95
                                    "libgssapi_krb5.dylib",
ec797e955dca 8010192: Enable native JGSS provider on Mac
weijun
parents: 14780
diff changeset
    96
                                    "/usr/lib/sasl2/libgssapiv2.2.so",
ec797e955dca 8010192: Enable native JGSS provider on Mac
weijun
parents: 14780
diff changeset
    97
                               };
55354
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
    98
                            } else if (osname.contains("Windows")) {
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
    99
                                // Full path needed, DLL is in jre/bin
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
   100
                                gssLibs = new String[]{ System.getProperty("java.home")
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
   101
                                        + "\\bin\\sspi_bridge.dll" };
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
   102
                            } else {
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
   103
                                gssLibs = new String[0];
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
   104
                            }
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   105
                        } else {
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   106
                            gssLibs = new String[]{ defaultLib };
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
   107
                        }
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   108
                        for (String libName: gssLibs) {
23585
e4412d1b53d3 8031003: [Parfait] warnings from jdk/src/share/native/sun/security/jgss/wrapper: JNI exception pending
valeriep
parents: 22121
diff changeset
   109
                            if (GSSLibStub.init(libName, DEBUG)) {
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   110
                                debug("Loaded GSS library: " + libName);
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   111
                                Oid[] mechs = GSSLibStub.indicateMechs();
55354
74f0622db875 6722928: Support SSPI as a native GSS-API provider
weijun
parents: 51398
diff changeset
   112
                                HashMap<String,String> map = new HashMap<>();
5300
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   113
                                for (int i = 0; i < mechs.length; i++) {
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   114
                                    debug("Native MF for " + mechs[i]);
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   115
                                    map.put("GssApiMechanism." + mechs[i],
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   116
                                            MF_CLASS);
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   117
                                }
a291a0bff79f 6944847: native gss lib names on linux
weijun
parents: 2
diff changeset
   118
                                return map;
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
   119
                            }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   120
                        }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   121
                        return null;
90ce3da70b43 Initial load
duke
parents:
diff changeset
   122
                    }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   123
                });
50508
6aa873a6dae9 8194073: Invalid SunNativeProvider.INSTANCE initialization
valeriep
parents: 47216
diff changeset
   124
        // initialize INSTANCE after MECH_MAP is constructed
6aa873a6dae9 8194073: Invalid SunNativeProvider.INSTANCE initialization
valeriep
parents: 47216
diff changeset
   125
        INSTANCE = new SunNativeProvider();
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
   126
    }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   127
90ce3da70b43 Initial load
duke
parents:
diff changeset
   128
    public SunNativeProvider() {
90ce3da70b43 Initial load
duke
parents:
diff changeset
   129
        /* We are the Sun NativeGSS provider */
40416
5d91b2fd668c 8130181: Deprecate java.security.Provider(String, double, String), add Provider(Strin
valeriep
parents: 33992
diff changeset
   130
        super(NAME, PROVIDER_VER, INFO);
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
   131
90ce3da70b43 Initial load
duke
parents:
diff changeset
   132
        if (MECH_MAP != null) {
90ce3da70b43 Initial load
duke
parents:
diff changeset
   133
            AccessController.doPrivileged(new PutAllAction(this, MECH_MAP));
90ce3da70b43 Initial load
duke
parents:
diff changeset
   134
        }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   135
    }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   136
}