Share Solutions

Thursday, 25 January 2018

Cassandra java driver With SSL

I want to present you an java code for cassandra client with SSL and Cluster. I am not sharing keystores but i pressume you can get that info from google. I also want to provide you and reference sites i have gone through:

import java.io.File;
import java.io.InputStream;
import java.security.KeyStore;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.TrustManagerFactory;

import org.apache.commons.io.FileUtils;
import org.json.JSONArray;
import org.json.JSONObject;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.datastax.driver.core.Cluster;
import com.datastax.driver.core.Cluster.Builder;
import com.datastax.driver.core.Host;
import com.datastax.driver.core.JdkSSLOptions;
import com.datastax.driver.core.Metadata;
import com.datastax.driver.core.Session;

/**
 *  "dbinfo": {
      "port": 9042,
      "truststorepath":"/path/to/truststore.jks",
      "truststoresecret":"password of truststore",
      "nodes": [
         "127.0.0.2",
         "127.0.0.1"
      ],
      "ssl": false
   },
 * 
 * 
 * 
 * This is an implementation of a simple Java Cassandra client.
 *
 */
public class CassandraClient {
 private static final Logger logme = LoggerFactory.getLogger(CassandraClient.class);

 private Cluster cluster;

 private Session session;

 /**
  * For single node instance setup
  * 
  * @param node
  * @param port
  */
 public void connectToServer(final String node, final Integer port) {

  Builder b = Cluster.builder().addContactPoint(node);

  if (port != null) {
   b.withPort(port);
  }
  cluster = b.build();

  Metadata metadata = cluster.getMetadata();
  logme.info("Cassandra: Cluster name: " + metadata.getClusterName());

  for (Host host : metadata.getAllHosts()) {
   logme.info("Cassandra:Datacenter: " + host.getDatacenter() + " Host: " + host.getAddress() + " Rack: "
     + host.getRack());
  }

  session = cluster.connect();
 }

 /**
  * 
  * For multi node instance setup
  * 
  * @param cfg
  */
 public void connectToServer(JSONObject cfg) {

  Builder b = Cluster.builder();

  JSONObject cassandra = cfg.getJSONObject("dbinfo");
  JSONArray nodes = cassandra.getJSONArray("nodes");

  for (Object node : nodes) {
   b.addContactPoint(node.toString());

  }
  boolean ssl = cassandra.optBoolean("ssl", false);
  int port = cassandra.optInt("port", 9042);
  b.withPort(port);

  if (ssl) {

   String trustPath = cassandra.getString("truststorepath");
   String trustSecret = cassandra.getString("truststoresecret");
   if (trustPath == null || trustSecret == null) {
    logme.error(" *********   Please provide truststore details for cassandra ****************");
   }
   JdkSSLOptions sslOptions = getSSLOptionsFromTrustStore(trustPath, trustSecret);
   b.withSSL(sslOptions);
  }

  cluster = b.build();

  Metadata metadata = cluster.getMetadata();
  logme.info("Cassandra: Cluster name: " + metadata.getClusterName());

  for (Host host : metadata.getAllHosts()) {
   logme.info("Cassandra:Datacenter: " + host.getDatacenter() + " Host: " + host.getAddress() + " Rack: "
     + host.getRack());
  }

  session = cluster.connect();
 }

 public Session getSession() {
  return this.session;
 }

 public void close() {
  session.close();
  cluster.close();
 }

 private JdkSSLOptions getSSLOptionsFromTrustStore(String trustStoreLocation, String trustStorePassword) {
  Cluster cluster;
  SSLContext sslcontext = null;

  try {

   InputStream is = FileUtils.openInputStream(new File(trustStoreLocation));
   KeyStore keystore = KeyStore.getInstance("jks");
   char[] pwd = trustStorePassword.toCharArray();
   keystore.load(is, pwd);
   TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
   tmf.init(keystore);
   TrustManager[] tm = tmf.getTrustManagers();

   sslcontext = SSLContext.getInstance("TLSv1");
   sslcontext.init(null, tm, null);

  } catch (Exception e) {
   logme.error(e.getMessage(), e);
  }

  JdkSSLOptions sslOptions = JdkSSLOptions.builder().withSSLContext(sslcontext).build();

  return sslOptions;
 }

}

Monday, 27 November 2017

Best Serializer till now for me in java KRYO

These days we are looking for best serializer for java objects . I came across KRYO . This is one of the best one as of now for network/file persistance/db.

I thought of making this KRYO known to everyone . Thats why I posted here as reference.

Good Work by Esoteric Software . 👍👍👍

Refer:
Kryo-Github
http://www.baeldung.com/kryo
https://blog.hazelcast.com/kryo-serializer/

Tuesday, 26 September 2017

BER TLV Tag Parsing in Java

Q: Java code for BER TLV tag identification and Length Identification of EMV Fields from Device or HOST ??

Solution:

I tried writing stuff for myself and I thought it helps to you on reading dynamic TLV tag name and Length in java

package com.ohms.rnd.emv;

import java.math.BigInteger;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.Set;
import java.util.stream.Collectors;

import org.apache.commons.codec.DecoderException;
import org.apache.commons.codec.binary.Hex;


/**
 * 
 * Ref: page :173:Coding of the Tag Field of BER-TLV Data Objects 
 * http://mech.vub.ac.be/teaching/info/mechatronica/finished_projects_2007/Groep%201/Smartcard_files/EMV%20v4.1%20Book%203.pdf
 * 
 * @author 
 *
 */
public class BERTLV {


 private static Set<String> specialtags= Arrays.stream(new String[]{/*"91","71","72"*/}).collect(Collectors.toSet());;
 public static void main(String[] args) {
  
  
  List<String> tlvs= new ArrayList<>();
  //Request Tags
  tlvs.add("77299f2701009f360200419f2608c74d18b08248fefc9f10120110201009248400000000000000000029ff");
  tlvs.add("9f2701009f360200419f2608c74d18b08248fefc9f10120110201009248400000000000000000029ff");
  tlvs.add("9F4005FF80F0F001");
  tlvs.add("9F0206000000012345");
  tlvs.add("9F0306000000004000");
  tlvs.add("9F26088E19ED4BCA5C670A");
  tlvs.add("82025C00");
  tlvs.add("5F340102");
  tlvs.add("9F3602000A");
  tlvs.add("9F0702FF00");
  tlvs.add("9F080208C1");
  tlvs.add("9F09021001");
  tlvs.add("8A025931");
  tlvs.add("9F3403A40002");
  tlvs.add("9F270180");
  tlvs.add("9F1E0853455249414C3132");
  tlvs.add("9F0D05F040008800");
  tlvs.add("9F0E05FCF8FCF8F0");
  tlvs.add("9F0F05FCF8FCF8F0");
  tlvs.add("5F28020840");
  tlvs.add("9F390100");
  tlvs.add("9F3303010101");
  tlvs.add("9F1A020840");
  tlvs.add("9F350122");
  tlvs.add("95050000048000");
  tlvs.add("5F2A020840");
  tlvs.add("9A03140131");
  tlvs.add("9B024800");
  tlvs.add("9F2103123456");//////////////////////
  tlvs.add("9C0100");
  tlvs.add("9F370400BC614E");
  tlvs.add("4F07A0000000031010");
  tlvs.add("9F0607A0000000031010");
  tlvs.add("9F7C0412345678");
  tlvs.add("8407A0000000031010");
  tlvs.add("9F6E05123456789A");
  tlvs.add("9F6E0401020304");
  tlvs.add("9F6E0401020304");
  tlvs.add("9F1006010A03600000");
  tlvs.add("9F5B052000000000");
  tlvs.add("9F4104000001B3");
  tlvs.add("8C209F02069F03069F1A0295055F2A029A039C019F37049F35019F45029F34039B028D08910A8A0295059B028E1000000000000000005F0341035E030203");
  tlvs.add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
  
  //response
  tlvs.add("910A2263BCC1C2D9C4420013");
  tlvs.add("710A0102030405060708090A");
  tlvs.add("720A0102030405060708090A");
  tlvs.add("8C209F02069F03069F1A0295055F2A029A039C019F37049F35019F45029F34039B028D08910A8A0295059B028E1000000000000000005F0341035E030203");
  

  
  tlvs.forEach(x-> {
   try {
    parseBERTLVTag(x);
   } catch (DecoderException e) {
    // TODO Auto-generated catch block
    e.printStackTrace();
   }
  });
  
  
  
  
  
 }
 
 //B1 Coding of the Tag Field of BER-TLV Data  Objects 
 public static void parseBERTLVTag(String tlv) throws DecoderException 
 {
  if(tlv==null || "".equalsIgnoreCase(tlv)) return;
  
  System.out.println("============= START ["+tlv+"]==================");

  
  boolean inTagRead= true;
  Map<String,String> tags= new HashMap<>();
  
  StringBuilder _tmp = new StringBuilder();
  String lastTag = null;
  int old_index = 0;
  boolean isFirstTagByte = true;
  
  boolean more=true;
  while (more) 
  {
   
   String hByte = tlv.substring(old_index,(old_index = old_index+2));
   if(inTagRead)
   {
    if(isLastTagByte(hByte, isFirstTagByte))
    {
     inTagRead=false;
     _tmp.append(hByte);
     lastTag =  _tmp.toString();
     System.out.println("Tag["+lastTag+"]");
     tags.put(lastTag, null);
     _tmp= new StringBuilder(); 
    }else
    {
     _tmp.append(hByte);
    }
    
    isFirstTagByte = false;
    
   }else//Length
   {
    
    isFirstTagByte = true;
    if(!isSpecialTag(lastTag)) {
    
     if(isLastLengthByte(hByte)) {
      inTagRead=true;
      _tmp.append(hByte);
      int len =  Integer.parseInt(_tmp.toString(), 16 );
      //read len*2
      System.out.println(" Length ["+len+"]");
      String data =  tlv.substring(old_index, (old_index = old_index+len*2));
      String tmpData= lastTag+":"+_tmp.toString()+":h"+data;
      System.out.println(" Data ["+tmpData+"]");
      _tmp = new StringBuilder();

      tags.put(lastTag, tmpData); 
      
     }else
     {
      _tmp.append(hByte);
     }

    }else { //Special tag not TLV format
     
     
     
     int len=10;
     String data =  "";//tlv.substring(old_index, (old_index = old_index+len*2));
     String tmpData= lastTag+":0A:h"+data;
     System.out.println(" Data ["+tmpData+"]");
     _tmp = new StringBuilder();

     tags.put(lastTag, tmpData);
     
    }
        
    
    
   }
   
   more= tlv.length()<=old_index?false:true;
//   if(tlv.length()<=old_index) more=false;
   
    
   
   
  }//END OF WHILE
  
  
  System.out.println("------------  as MAP  ---------------------");
  tags.forEach((x,y)->{System.out.println("Tag["+x+"] Value["+y+"]");});
  System.out.println("===============================");
  
 }
 
 
 public static boolean isLastTagByte(String onehexByte, boolean firstByte) throws DecoderException
 {
  
   byte tagByte = Hex.decodeHex(onehexByte.toCharArray())[0];
   
   if(firstByte && (tagByte & 0x1f) == 0x1f) {
    return false;
   } else if (!firstByte && (tagByte & 0x80) == 0x80) {
    return false;
   } else {
    return true;
   }
 }
 
 public static boolean isLastLengthByte(String onehexByte) {
  
  String binVal = new BigInteger(onehexByte, 16).toString(2);
  binVal= fillChars(false, binVal, 8, "0"); 
  if(binVal.startsWith("0")) return true;
   
   return true;

 }
 public static String fillChars(String fillChar,int times)
 {
  StringBuffer builder=new StringBuffer();
  if(fillChar==null)
   return "";
  for (int i = 0; i < times; i++) 
  {
   builder.append(fillChar);
  }
  return builder.toString();
 }
 public static String fillChars(boolean isLeftJustified,String data,int length,String fillChar)
 {
  StringBuffer ret=new StringBuffer(); 
  String fill=null;
  if(data!=null && !data.equalsIgnoreCase(""))
  {
   
   int datLength=data.length();
   int diff=-1;
   if(datLength<length)
   {
    diff=length-datLength; 
    
    fill=fillChars(fillChar, diff);
    
    if(isLeftJustified)
    {
     ret.append(data);
     ret.append(fill);
    }else
    {
     ret.append(fill);
     ret.append(data);
    }
   }else if(datLength==length)
   {
    ret.append(data);
   }
   
  }else
  {
   
   ret.append(fillChars(fillChar, length));
   
  }
 return ret.toString(); 
 }
 
 private static boolean isSpecialTag(String tagName) 
 {
  return specialtags.contains(tagName);
 }
 
 
}

Friday, 15 September 2017

Error - trustAnchors parameter must be non-empty

Question: Error - trustAnchors parameter must be non-empty

Answer:
It means either you have not provided your trust store or your policy jars not supported.
Replace JCE Policy Jars in order to support bigger encryption algorithm key lengths and trustAnchors issue.

java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

Question: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

Answer:
It means certificate your are trying to validate is not passed the verification. No certificate macthed with Signed certificate.

Wednesday, 12 July 2017

How to generate Certificate in Java

How to create a certificate from Keypair of issuer and subject?

Create w a two X500Name objects one for isuer and one for subject.

X500Name issuer = new X500Name(IETFUtils.rDNsFromString("C=rootca,OU=rootca,O=Thawate", RFC4519Style.INSTANCE));
X500Name subject = new X500Name(IETFUtils.rDNsFromString("C=company,OU=12345,O=Organization", RFC4519Style.INSTANCE));X509CertificateObject cert1 = generateCert("company", companyKeypair, false, caKeypair.getPublic(), caKeypair.getPrivate(),issuer,subject);
Certificate[] certChain = new Certificate[1];  
certChain[0] = (Certificate) cert1;  
ks.setKeyEntry("identity", (Key)companyKeypair.getPrivate(), ksPass, certChain);

call below method as shown above.

 private X509CertificateObject generateCert(String keyName, KeyPair kp, boolean isCertAuthority, PublicKey signerPublicKey, PrivateKey signerPrivateKey,X500Name issuer,X500Name subject)
      throws IOException, CertIOException, OperatorCreationException, CertificateException, NoSuchAlgorithmException {
    Calendar startDate = Calendar.getInstance();
    Calendar endDate = Calendar.getInstance();
    endDate.add(Calendar.DAY_OF_YEAR, 10);

    BigInteger serialNumber = BigInteger.valueOf((startDate.getTimeInMillis()));
    
    JcaX509v3CertificateBuilder certGen = new JcaX509v3CertificateBuilder(issuer, serialNumber, startDate.getTime(), endDate.getTime(), subject, kp.getPublic());
    JcaX509ExtensionUtils extensionUtils = new JcaX509ExtensionUtils();
    certGen.addExtension(Extension.subjectKeyIdentifier, false, extensionUtils.createSubjectKeyIdentifier(kp.getPublic()));
    certGen.addExtension(Extension.basicConstraints, false, new BasicConstraints(isCertAuthority));
    certGen.addExtension(Extension.authorityKeyIdentifier, false, extensionUtils.createAuthorityKeyIdentifier(signerPublicKey));
    if (isCertAuthority) {
      certGen.addExtension(Extension.keyUsage, true, new KeyUsage(KeyUsage.keyCertSign));
    }
    X509CertificateHolder cert = certGen.build(new JcaContentSignerBuilder("MD5withRSA").build(signerPrivateKey));
    return new X509CertificateObject(cert.toASN1Structure());
  }

Friday, 5 May 2017

SoftHSM2 in java

Challenge:
how to work with softhsm2 in java ?

Solution:

1. Download .msi installer from softhsm2 windows installer.
2. Execute below script to initialize Tokens .

 Microsoft Windows [Version 10.0.14393]
    (c) 2016 Microsoft Corporation. All rights reserved.

    C:\WINDOWS\system32>cd\

    C:\>cd SoftHSM2

    C:\SoftHSM2>cd bin

    C:\SoftHSM2\bin>softhsm2-util.exe --init-token --slot 0 --label "My token 1"
    === SO PIN (4-255 characters) ===
    Please enter SO PIN:
    ERROR: The length of the PIN is out of range.
    === SO PIN (4-255 characters) ===
    ^C
    C:\SoftHSM2\bin>softhsm2-util.exe --init-token --slot 0 --label "My token 1"
    === SO PIN (4-255 characters) ===
    Please enter SO PIN: ****
    Please reenter SO PIN: ****
    === User PIN (4-255 characters) ===
    Please enter user PIN: ****
    Please reenter user PIN: ****
    CKR_SLOT_ID_INVALID: Slot 0 does not exist.

    C:\SoftHSM2\bin>softhsm2-util.exe --show-slots
    Available slots:
    Slot 1526831955
        Slot info:
            Description:      SoftHSM slot ID 0x5b019b53
            Manufacturer ID:  SoftHSM project
            Hardware version: 2.2
            Firmware version: 2.2
            Token present:    yes
        Token info:
            Manufacturer ID:  SoftHSM project
            Model:            SoftHSM v2
            Hardware version: 2.2
            Firmware version: 2.2
            Serial number:    cafa9efc5b019b53
            Initialized:      yes
            User PIN init.:   yes
            Label:            0 token
    Slot 1
        Slot info:
            Description:      SoftHSM slot ID 0x1
            Manufacturer ID:  SoftHSM project
            Hardware version: 2.2
            Firmware version: 2.2
            Token present:    yes
        Token info:
            Manufacturer ID:  SoftHSM project
            Model:            SoftHSM v2
            Hardware version: 2.2
            Firmware version: 2.2
            Serial number:
            Initialized:      no
            User PIN init.:   no
            Label:

    C:\SoftHSM2\bin>softhsm2-util.exe --init-token --slot 1 --label "My token 1"
    === SO PIN (4-255 characters) ===
    Please enter SO PIN: ****
    Please reenter SO PIN: ****
    === User PIN (4-255 characters) ===
    Please enter user PIN: ****
    Please reenter user PIN: ****
    The token has been initialized.

    C:\SoftHSM2\bin>softhsm2-util.exe --show-slots
    Available slots:
    Slot 1242738572
        Slot info:
            Description:      SoftHSM slot ID 0x4a12af8c
            Manufacturer ID:  SoftHSM project
            Hardware version: 2.2
            Firmware version: 2.2
            Token present:    yes
        Token info:
            Manufacturer ID:  SoftHSM project
            Model:            SoftHSM v2
            Hardware version: 2.2
            Firmware version: 2.2
            Serial number:    00fbfb20ca12af8c
            Initialized:      yes
            User PIN init.:   yes
            Label:            My token 1
    Slot 1526831955
        Slot info:
            Description:      SoftHSM slot ID 0x5b019b53
            Manufacturer ID:  SoftHSM project
            Hardware version: 2.2
            Firmware version: 2.2
            Token present:    yes
        Token info:
            Manufacturer ID:  SoftHSM project
            Model:            SoftHSM v2
            Hardware version: 2.2
            Firmware version: 2.2
            Serial number:    cafa9efc5b019b53
            Initialized:      yes
            User PIN init.:   yes
            Label:            0 token
    Slot 2
        Slot info:
            Description:      SoftHSM slot ID 0x2
            Manufacturer ID:  SoftHSM project
            Hardware version: 2.2
            Firmware version: 2.2
            Token present:    yes
        Token info:
            Manufacturer ID:  SoftHSM project
            Model:            SoftHSM v2
            Hardware version: 2.2
            Firmware version: 2.2
            Serial number:
            Initialized:      no
            User PIN init.:   no
            Label:

    C:\SoftHSM2\bin>softhsm2-util.exe --init-token --slot 2 --label "My token 2"
    === SO PIN (4-255 characters) ===
    Please enter SO PIN: ****
    Please reenter SO PIN: ****
    === User PIN (4-255 characters) ===
    Please enter user PIN: ****
    Please reenter user PIN: ****
    The token has been initialized.

    C:\SoftHSM2\bin

Run the below Java Code to access hsm from java .

   import java.security.Key;
    import java.security.KeyStore;
    import java.security.Provider;
    import java.security.Security;

    import javax.crypto.spec.SecretKeySpec;

    import sun.security.pkcs11.SunPKCS11;

    public class TestClass {


         public static void main(String[] args) throws Exception {
                // Set up the Sun PKCS 11 provider
               // String configName = "Z:\\SOFTHSM_INSTALL\\etc\\softhsm2.conf";

             String configName = "softhsm2.cfg";

                Provider p = new SunPKCS11(configName);

                if (-1 == Security.addProvider(p)) {
                    throw new RuntimeException("could not add security provider");
                }

                // Load the key store
                char[] pin = "mypin".toCharArray();
                KeyStore keyStore = KeyStore.getInstance("PKCS11", p);
                keyStore.load(null, pin);

                // AES key
                SecretKeySpec secretKeySpec = new SecretKeySpec("0123456789ABCDEF".getBytes(), "AES");
                Key key = new SecretKeySpec(secretKeySpec.getEncoded(), "AES");

                keyStore.setKeyEntry("AA", key, "1234".toCharArray(), null);
                keyStore.store(null); //this gives me the exception.

         }

    }

Ref: stackoverflow thread