Skip to content

O
Openfire
Commit b4d73f9e authored by Guus der Kinderen's avatar Guus der Kinderen
Browse files
Options

OF-159: Tabs to spaces

parent 2344bcd8
Hide whitespace changes
Inline Side-by-side
Showing with 198 additions and 198 deletions
src/java/org/jivesoftware/util/S2STestService.java
View file @ b4d73f9e
......@@ -41,202 +41,202 @@ import org.xmpp.packet.Packet;
*/
public class S2STestService {
private static final org.slf4j.Logger Log = LoggerFactory.getLogger(S2STestService.class);
private Semaphore waitUntil;
private String domain;
/**
* @param domain The host to test.
*/
public S2STestService(String domain) {
this.domain = domain;
}
/**
* Run a test against the domain.
* @return K-V pairs of debug information.
* @throws Exception On error.
*/
public Map<String, String> run() throws Exception {
waitUntil = new Semaphore(0);
Map<String, String> results = new HashMap<>();
// Tear down existing routes.
final SessionManager sessionManager = SessionManager.getInstance();
for (final Session incomingServerSession : sessionManager.getIncomingServerSessions( domain ) )
{
incomingServerSession.close();
}
final Session outgoingServerSession = sessionManager.getOutgoingServerSession( domain );
if ( outgoingServerSession != null )
{
outgoingServerSession.close();
}
// Intercept logging.
final StringBuilder logs = new StringBuilder();
Appender appender = interceptLogging(logs);
// Intercept packets.
PacketInterceptor interceptor = new S2SInterceptor();
InterceptorManager.getInstance().addInterceptor(interceptor);
// Send ping.
Log.info("Sending server to server ping request to " +domain);
sendPing();
// Wait for success or exceed socket 5s timeout.
waitUntil.tryAcquire(6, TimeUnit.SECONDS);
// Check on the connection status.
logSessionStatus();
// Prepare response.
results.put("certs", getCertificates());
results.put("stanzas", interceptor.toString());
results.put("logs", logs.toString());
// Cleanup
InterceptorManager.getInstance().removeInterceptor(interceptor);
Logger.getRootLogger().removeAppender(appender);
return results;
}
/**
* Begins intercepting logging.
*
* @param logs The StringBuilder to collect log output.
* @return A reference to the log4j appender which receives log output.
*/
private Appender interceptLogging(final StringBuilder logs) {
WriterAppender appender = new WriterAppender() {
@Override
public void append(LoggingEvent event) {
logs.append(String.format("%s: %s: %s\n",
new Date(event.getTimeStamp()).toString(),
event.getLevel().toString(),
event.getRenderedMessage()));
String[] throwableInfo = event.getThrowableStrRep();
if (throwableInfo != null) {
for (String line : throwableInfo) {
logs.append(line +"\n");
}
}
}
};
appender.setLayout(new PatternLayout("%d [%p|%c|%C{1}] %m%n"));
appender.setThreshold(Level.ALL);
appender.activateOptions();
Logger.getRootLogger().addAppender(appender);
return appender;
}
/**
* Logs the status of the session.
*/
private void logSessionStatus() {
OutgoingServerSession session = XMPPServer.getInstance().getSessionManager().getOutgoingServerSession(domain);
if (session != null) {
int connectionStatus = session.getStatus();
switch(connectionStatus) {
case Session.STATUS_CONNECTED:
Log.info("Session is connected.");
break;
case Session.STATUS_CLOSED:
Log.info("Session is closed.");
break;
case Session.STATUS_AUTHENTICATED:
Log.info("Session is authenticated.");
break;
}
} else {
Log.info("Failed to establish server to server session.");
}
}
/**
* Sends a server to server ping request.
*/
private void sendPing() {
final IQ pingRequest = new IQ(Type.get);
pingRequest.setChildElement("ping", IQPingHandler.NAMESPACE);
pingRequest.setFrom(XMPPServer.getInstance().getServerInfo().getXMPPDomain());
pingRequest.setTo(domain);
XMPPServer.getInstance().getIQRouter().route(pingRequest);
}
/**
* @return A String representation of the certificate chain for the connection to the domain under test.
*/
private String getCertificates() {
Session session = XMPPServer.getInstance().getSessionManager().getOutgoingServerSession(domain);
StringBuilder certs = new StringBuilder();
if (session != null) {
Log.info("Successfully negotiated TLS connection.");
Certificate[] certificates = session.getPeerCertificates();
for (Certificate certificate : certificates) {
X509Certificate x509cert = (X509Certificate) certificate;
certs.append("--\nSubject: ");
certs.append(x509cert.getSubjectDN());
List<String> subjectAltNames = new SANCertificateIdentityMapping().mapIdentity(x509cert);
if (!subjectAltNames.isEmpty()) {
certs.append("\nSubject Alternative Names: ");
for (String subjectAltName : subjectAltNames) {
certs.append("\n ");
certs.append(subjectAltName);
}
}
certs.append("\nNot Before: ");
certs.append(x509cert.getNotBefore());
certs.append("\nNot After: ");
certs.append(x509cert.getNotAfter());
certs.append("\n\n-----BEGIN CERTIFICATE-----\n");
certs.append(DatatypeConverter.printBase64Binary(
certificate.getPublicKey().getEncoded()).replaceAll("(.{64})", "$1\n"));
certs.append("\n-----END CERTIFICATE-----\n\n");
}
}
return certs.toString();
}
/**
* Packet interceptor for the duration of our S2S test.
*/
private class S2SInterceptor implements PacketInterceptor {
private StringBuilder xml = new StringBuilder();
/**
* Keeps a log of the XMPP traffic, releasing the wait lock on response received.
*/
@Override
public void interceptPacket(Packet packet, Session session, boolean incoming, boolean processed)
throws PacketRejectedException {
if (!processed
&& (domain.equals(packet.getFrom().getDomain()) || domain.equals(packet.getTo().getDomain()))) {
xml.append(packet.toXML());
xml.append('\n');
// If we've received our IQ response, stop waiting.
if (domain.equals(packet.getFrom().getDomain()) && "result".equals(packet.getElement().attributeValue("type"))) {
Log.info("Successful server to server response received.");
waitUntil.release();
}
}
}
/**
* Returns the received stanzas as a String.
*/
public String toString() {
return xml.toString();
}
}
private static final org.slf4j.Logger Log = LoggerFactory.getLogger(S2STestService.class);
private Semaphore waitUntil;
private String domain;
/**
* @param domain The host to test.
*/
public S2STestService(String domain) {
this.domain = domain;
}
/**
* Run a test against the domain.
* @return K-V pairs of debug information.
* @throws Exception On error.
*/
public Map<String, String> run() throws Exception {
waitUntil = new Semaphore(0);
Map<String, String> results = new HashMap<>();
// Tear down existing routes.
final SessionManager sessionManager = SessionManager.getInstance();
for (final Session incomingServerSession : sessionManager.getIncomingServerSessions( domain ) )
{
incomingServerSession.close();
}
final Session outgoingServerSession = sessionManager.getOutgoingServerSession( domain );
if ( outgoingServerSession != null )
{
outgoingServerSession.close();
}
// Intercept logging.
final StringBuilder logs = new StringBuilder();
Appender appender = interceptLogging(logs);
// Intercept packets.
PacketInterceptor interceptor = new S2SInterceptor();
InterceptorManager.getInstance().addInterceptor(interceptor);
// Send ping.
Log.info("Sending server to server ping request to " +domain);
sendPing();
// Wait for success or exceed socket 5s timeout.
waitUntil.tryAcquire(6, TimeUnit.SECONDS);
// Check on the connection status.
logSessionStatus();
// Prepare response.
results.put("certs", getCertificates());
results.put("stanzas", interceptor.toString());
results.put("logs", logs.toString());
// Cleanup
InterceptorManager.getInstance().removeInterceptor(interceptor);
Logger.getRootLogger().removeAppender(appender);
return results;
}
/**
* Begins intercepting logging.
*
* @param logs The StringBuilder to collect log output.
* @return A reference to the log4j appender which receives log output.
*/
private Appender interceptLogging(final StringBuilder logs) {
WriterAppender appender = new WriterAppender() {
@Override
public void append(LoggingEvent event) {
logs.append(String.format("%s: %s: %s\n",
new Date(event.getTimeStamp()).toString(),
event.getLevel().toString(),
event.getRenderedMessage()));
String[] throwableInfo = event.getThrowableStrRep();
if (throwableInfo != null) {
for (String line : throwableInfo) {
logs.append(line +"\n");
}
}
}
};
appender.setLayout(new PatternLayout("%d [%p|%c|%C{1}] %m%n"));
appender.setThreshold(Level.ALL);
appender.activateOptions();
Logger.getRootLogger().addAppender(appender);
return appender;
}
/**
* Logs the status of the session.
*/
private void logSessionStatus() {
OutgoingServerSession session = XMPPServer.getInstance().getSessionManager().getOutgoingServerSession(domain);
if (session != null) {
int connectionStatus = session.getStatus();
switch(connectionStatus) {
case Session.STATUS_CONNECTED:
Log.info("Session is connected.");
break;
case Session.STATUS_CLOSED:
Log.info("Session is closed.");
break;
case Session.STATUS_AUTHENTICATED:
Log.info("Session is authenticated.");
break;
}
} else {
Log.info("Failed to establish server to server session.");
}
}
/**
* Sends a server to server ping request.
*/
private void sendPing() {
final IQ pingRequest = new IQ(Type.get);
pingRequest.setChildElement("ping", IQPingHandler.NAMESPACE);
pingRequest.setFrom(XMPPServer.getInstance().getServerInfo().getXMPPDomain());
pingRequest.setTo(domain);
XMPPServer.getInstance().getIQRouter().route(pingRequest);
}
/**
* @return A String representation of the certificate chain for the connection to the domain under test.
*/
private String getCertificates() {
Session session = XMPPServer.getInstance().getSessionManager().getOutgoingServerSession(domain);
StringBuilder certs = new StringBuilder();
if (session != null) {
Log.info("Successfully negotiated TLS connection.");
Certificate[] certificates = session.getPeerCertificates();
for (Certificate certificate : certificates) {
X509Certificate x509cert = (X509Certificate) certificate;
certs.append("--\nSubject: ");
certs.append(x509cert.getSubjectDN());
List<String> subjectAltNames = new SANCertificateIdentityMapping().mapIdentity(x509cert);
if (!subjectAltNames.isEmpty()) {
certs.append("\nSubject Alternative Names: ");
for (String subjectAltName : subjectAltNames) {
certs.append("\n ");
certs.append(subjectAltName);
}
}
certs.append("\nNot Before: ");
certs.append(x509cert.getNotBefore());
certs.append("\nNot After: ");
certs.append(x509cert.getNotAfter());
certs.append("\n\n-----BEGIN CERTIFICATE-----\n");
certs.append(DatatypeConverter.printBase64Binary(
certificate.getPublicKey().getEncoded()).replaceAll("(.{64})", "$1\n"));
certs.append("\n-----END CERTIFICATE-----\n\n");
}
}
return certs.toString();
}
/**
* Packet interceptor for the duration of our S2S test.
*/
private class S2SInterceptor implements PacketInterceptor {
private StringBuilder xml = new StringBuilder();
/**
* Keeps a log of the XMPP traffic, releasing the wait lock on response received.
*/
@Override
public void interceptPacket(Packet packet, Session session, boolean incoming, boolean processed)
throws PacketRejectedException {
if (!processed
&& (domain.equals(packet.getFrom().getDomain()) || domain.equals(packet.getTo().getDomain()))) {
xml.append(packet.toXML());
xml.append('\n');
// If we've received our IQ response, stop waiting.
if (domain.equals(packet.getFrom().getDomain()) && "result".equals(packet.getElement().attributeValue("type"))) {
Log.info("Successful server to server response received.");
waitUntil.release();
}
}
}
/**
* Returns the received stanzas as a String.
*/
public String toString() {
return xml.toString();
}
}
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

Technounit-GROUP 2023