RSAKeyEnvironmentProvider.java

/*
 * Copyright (c) 2002-2022, City of Paris
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 *  1. Redistributions of source code must retain the above copyright notice
 *     and the following disclaimer.
 *
 *  2. Redistributions in binary form must reproduce the above copyright notice
 *     and the following disclaimer in the documentation and/or other materials
 *     provided with the distribution.
 *
 *  3. Neither the name of 'Mairie de Paris' nor 'Lutece' nor the names of its
 *     contributors may be used to endorse or promote products derived from
 *     this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 *
 * License 1.0
 */
package fr.paris.lutece.util.rsa;

import java.security.GeneralSecurityException;
import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import java.util.Base64;

import fr.paris.lutece.portal.service.datastore.DatastoreService;

public class RSAKeyEnvironmentProvider implements IRSAKeyProvider 
{

    private static final String ENV_VAR_PUBLIC_KEY = "lutece_rsa_public_key";
    private static final String ENV_VAR_PRIVATE_KEY = "lutece_rsa_private_key";
    private static final String MESSAGE_NOT_FOUND = "RSA Key env vars not found";

    @Override
    public PublicKey getPublicKey( ) throws GeneralSecurityException 
    {
        if ( System.getenv( ENV_VAR_PUBLIC_KEY ) != null )
        {
            X509EncodedKeySpec keySpecPublic = new X509EncodedKeySpec(
                    Base64.getDecoder( ).decode( System.getenv( ENV_VAR_PUBLIC_KEY ).getBytes( ) ) );

            KeyFactory keyFactory = KeyFactory.getInstance( "RSA" );

            return keyFactory.generatePublic( keySpecPublic );
        }
        else
        {
            throw new GeneralSecurityException( MESSAGE_NOT_FOUND );
        }
    }
    
    @Override
    public PrivateKey getPrivateKey ( ) throws GeneralSecurityException 
    {
        if ( System.getenv( ENV_VAR_PRIVATE_KEY ) != null )
        {
            PKCS8EncodedKeySpec keySpecPrivate = new PKCS8EncodedKeySpec(
                    Base64.getDecoder( ).decode( System.getenv( ENV_VAR_PRIVATE_KEY ).getBytes( ) ) );

            KeyFactory keyFactory = KeyFactory.getInstance( "RSA" );

            return keyFactory.generatePrivate( keySpecPrivate );
        }
        else
        {
            throw new GeneralSecurityException( MESSAGE_NOT_FOUND );
        }
    }

}