org.trafodion.jdbc.t4

Class SecPwd

java.lang.Object

org.trafodion.jdbc.t4.SecPwd

public class SecPwd
extends Object

Method Summary

Methods

Modifier and Type	Method and Description
void	encryptPwd(byte[] pwd, byte[] rolename, byte[] pwdkey) This method builds the password key which consists 4 bytes of password id, 128 bytes of role name which would be 128 spaces when role name is null, 32 bytes of the digest message calculated using the session key on the data made up of the procInfo and the encrypted data and 256 bytes (if the 2048 public key is used) or 128 bytes (if the1024 public key is used) encrypted data calculated using the public key on the plain text made up of the session key, the nonce and the password.
byte[]	getCertExpDate() Gets the expiration date of the certificate
static SecPwd	getInstance(Connection con, String directory, String fileName, String serverName, boolean spjMode, byte[] procInfo)
byte[]	getProcInfo()
int	getPwdEBufferLen() Gets length of buffer for password encryption (public) or the length of the token if it is the SPJ mode
void	openCertificate() Processes the active certificate when spjMode is false else does nothing.
static void	removeInstance(Connection con)
void	switchCertificate(byte[] buf) When autodownload is on, client will download the certificate from server when there is no certificate or certificate is stale.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getInstance

public static SecPwd getInstance(Connection con,
                 String directory,
                 String fileName,
                 String serverName,
                 boolean spjMode,
                 byte[] procInfo)
                          throws SecurityException

Returns:

SecPwd

Throws:

SecurityException

removeInstance

public static void removeInstance(Connection con)

openCertificate

public void openCertificate()
                     throws SecurityException

Processes the active certificate when spjMode is false else does nothing. The certificate is processed by calling the Security ctor to creates the password key and initializes it with password id. Gets public key and the length of the public key from the certificate file. Generates nonce and session key.

Throws:

SecurityException

encryptPwd

public void encryptPwd(byte[] pwd,
              byte[] rolename,
              byte[] pwdkey)
                throws SecurityException

This method builds the password key which consists 4 bytes of password id, 128 bytes of role name which would be 128 spaces when role name is null, 32 bytes of the digest message calculated using the session key on the data made up of the procInfo and the encrypted data and 256 bytes (if the 2048 public key is used) or 128 bytes (if the1024 public key is used) encrypted data calculated using the public key on the plain text made up of the session key, the nonce and the password. The password key is generated only when the spjMode is false. When the spjMode is true, 26 bytes of the token is returned instead. Builds password key

Parameters:

pwd - password to be encrypted

rolename - role name to build password key

procInfo - process information (PIN, CPU, segment name and time stamp)

Throws:

SecurityException

getPwdEBufferLen

public int getPwdEBufferLen()
                     throws SecurityException

Gets length of buffer for password encryption (public) or the length of the token if it is the SPJ mode

Throws:

SecurityException

getCertExpDate

public byte[] getCertExpDate()

Gets the expiration date of the certificate

Returns:

an array of bytes presents the certificate's expiration day in the format YYMMDDHHMMSS or a zero length byte array if the it is in the SPJ mode

switchCertificate

public void switchCertificate(byte[] buf)
                       throws SecurityException

When autodownload is on, client will download the certificate from server when there is no certificate or certificate is stale.

Parameters:

buf - content of the certificate pushed from server.

Throws:

SecurityException

getProcInfo

public byte[] getProcInfo()