AdvancedSinglePskStore instead.@Deprecated public class StaticPskStore extends Object implements PskStore
This implementation always returns the same identity/Key for all peers and is mainly intended for testing and evaluation purposes.
NB Keeping keys in in-memory is not a good idea for production. Instead, keys should be kept in an encrypted store.
| Constructor and Description |
|---|
StaticPskStore(PskPublicInformation identity,
byte[] key)
Deprecated.
Creates a new store for an identity and key.
|
StaticPskStore(String identity,
byte[] key)
Deprecated.
Creates a new store for an identity and key.
|
| Modifier and Type | Method and Description |
|---|---|
PskPublicInformation |
getIdentity(InetSocketAddress inetAddress)
Deprecated.
Gets the identity to use for a PSK based handshake with a given
peer.
|
PskPublicInformation |
getIdentity(InetSocketAddress peerAddress,
ServerNames virtualHost)
Deprecated.
Gets the identity to use for a PSK based handshake with a given
peer.
|
SecretKey |
getKey(PskPublicInformation identity)
Deprecated.
Gets the pre-shared key for a given identity.
|
SecretKey |
getKey(ServerNames serverNames,
PskPublicInformation identity)
Deprecated.
Gets the pre-shared key for a given identity in the scope of a server
name.
|
public StaticPskStore(String identity, byte[] key)
identity - The (single) identity to always use.key - The (single) key for the identity.public StaticPskStore(PskPublicInformation identity, byte[] key)
identity - The (single) identity to always use.key - The (single) key for the identity.public PskPublicInformation getIdentity(InetSocketAddress inetAddress)
PskStoreA DTLS client uses this method to determine the identity to include in its CLIENT_KEY_EXCHANGE message during a PSK based DTLS handshake with the peer.
getIdentity in interface PskStoreinetAddress - The IP address of the peer to perform the handshake
with.null if no peer with the given
address is registered.public PskPublicInformation getIdentity(InetSocketAddress peerAddress, ServerNames virtualHost)
PskStoreA DTLS client uses this method to determine the identity to include in its CLIENT_KEY_EXCHANGE message during a PSK based DTLS handshake with the peer.
getIdentity in interface PskStorepeerAddress - The IP address and port of the peer to perform the
handshake with.virtualHost - The virtual host at the peer to connect to. If
null, the identity will be looked up in the
global scope, yielding the same result as
PskStore.getIdentity(InetSocketAddress).null if no peer with the given
address and virtual host is registered.public SecretKey getKey(PskPublicInformation identity)
PskStoreA DTLS server can use this method to look up the pre-shared key for an identity provided by the client as part of a PSK key exchange.
The implementation is intended to normalize the identity by a matching entry, if that entry is not UTF-8 compliant encoded.
The returned key isSecretUtil.destroy(javax.crypto.SecretKey)ed after usage.getKey in interface PskStoreidentity - The identity to look up the key for.null if the given identity is unknown.PskPublicInformation.normalize(String)public SecretKey getKey(ServerNames serverNames, PskPublicInformation identity)
PskStoreA DTLS server can use this method to look up the pre-shared key for an identity provided by the client as part of a PSK key exchange.
The key is looked up in the context of the virtual host that the client has provided in the Server Name Indication extension contained in its CLIENT_HELLO message.
The implementation is intended to normalize the identity by a matching entry, if that entry is not UTF-8 compliant encoded.
The returned key is intended to be be a copy. If the usedSecretKey implements Destroyable, it will be cleaned up
by SecretUtil.destroy(javax.crypto.SecretKey)ed after its usage.getKey in interface PskStoreserverNames - The name of the host that the client wants to connect
to as provided in the Server Name Indication HELLO
extension during the DTLS handshake. The key returned for the
given identity is being looked up in the context of this host
name.identity - The identity to look up the key for.null if no matching identity has been
registered for any of the server name types.PskPublicInformation.normalize(String)Copyright © 2023 Eclipse Foundation. All rights reserved.