x

src/main/java/com/egolm/sso/clients/SAPServiceFactory.java

 package com.egolm.sso.clients;
 
 import java.io.File;
+import java.io.FileInputStream;
+import java.io.IOException;
 import java.net.MalformedURLException;
 import java.net.URL;
+import java.security.KeyStore;
 import java.util.HashMap;
 import java.util.Map;
 
+import javax.net.ssl.KeyManager;
+import javax.net.ssl.KeyManagerFactory;
+import javax.net.ssl.TrustManager;
+import javax.net.ssl.TrustManagerFactory;
 import javax.security.auth.callback.Callback;
 import javax.security.auth.callback.CallbackHandler;
 import javax.xml.namespace.QName;
@@ -13,7 +20,10 @@ import javax.xml.ws.Service;
 
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
+import org.apache.cxf.configuration.jsse.TLSClientParameters;
+import org.apache.cxf.endpoint.Client;
 import org.apache.cxf.frontend.ClientProxy;
+import org.apache.cxf.transport.http.HTTPConduit;
 import org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor;
 import org.apache.ws.security.handler.WSHandlerConstants;
 import org.apache.wss4j.common.ext.WSPasswordCallback;
@@ -32,13 +42,27 @@ public class SAPServiceFactory {
 	@Value("${schneider.password}")
 	private String password;
 	
+	@Value("CLIENT_KEYSTORE.FILEPATH")
+	private String keyStoreFile;
+	
+	@Value("CLIENT_KEYSTORE.PASSWORD")
+	private String keyStorePassword;
+
 	public <T> T create(Class<T> requiredType, URL wsdlLocation, QName serviceQName) {
 		assert requiredType != null : "WebService requiredType cannot be null";
 		assert wsdlLocation != null : "WebService wsdlLocation cannot be null";
 		assert serviceQName != null : "WebService serviceQName cannot be null";
 		Service dyService = Service.create(wsdlLocation, serviceQName);
 		T service = dyService.getPort(requiredType);
-		ClientProxy.getClient(service).getOutInterceptors().add(getWSS4JOutInterceptor());
+		Client client = ClientProxy.getClient(service);
+		client.getOutInterceptors().add(this.getWSS4JOutInterceptor());
+		HTTPConduit httpConduit = (HTTPConduit) client.getConduit();
+		TLSClientParameters tlsParams = httpConduit.getTlsClientParameters();
+		tlsParams = tlsParams == null ? new TLSClientParameters() : tlsParams;
+		tlsParams.setSecureSocketProtocol("SSL");
+		tlsParams.setKeyManagers(getKeyManagers());
+		tlsParams.setTrustManagers(getTrustManagers());
+		httpConduit.setTlsClientParameters(tlsParams);
 		return service;
 	}
 
@@ -79,4 +103,60 @@ public class SAPServiceFactory {
 		PasswordText, PasswordNone, PasswordDigest
 	}
 
+	
+	private static TrustManager[] trustManagers = null;
+	private static KeyManager[] keyManagers = null;
+	
+	private TrustManager[] getTrustManagers() {
+		if(trustManagers == null) {
+			FileInputStream fis = null;
+			try {
+				String alg = TrustManagerFactory.getDefaultAlgorithm();
+				TrustManagerFactory factory = TrustManagerFactory.getInstance(alg);
+				fis = new FileInputStream(new File(keyStoreFile));
+				KeyStore ks = KeyStore.getInstance("JKS");
+				ks.load(fis, keyStorePassword.toCharArray());
+				fis.close();
+				factory.init(ks);
+				trustManagers = factory.getTrustManagers();
+			} catch (Exception e) {
+				logger.error("Load TrustManager fail [" + keyStoreFile + "]", e);
+			} finally {
+				if(fis != null) {
+					try {
+						fis.close();
+					} catch (IOException e) {
+						logger.error(keyStoreFile, e);
+					}
+				}
+			}
+		}
+		return trustManagers;
+	}
+
+	private KeyManager[] getKeyManagers() {
+		if(keyManagers == null) {
+			FileInputStream fis = null;
+			try {
+				fis = new FileInputStream(new File(keyStoreFile));
+				String alg = KeyManagerFactory.getDefaultAlgorithm();
+				KeyManagerFactory factory = KeyManagerFactory.getInstance(alg);
+				KeyStore ks = KeyStore.getInstance("JKS");
+				ks.load(fis, keyStorePassword.toCharArray());
+				factory.init(ks, keyStorePassword.toCharArray());
+				keyManagers = factory.getKeyManagers();
+			} catch (Exception e) {
+				logger.error("Load KeyManager fail [" + keyStoreFile + "]", e);
+			} finally {
+				if(fis != null) {
+					try {
+						fis.close();
+					} catch (IOException e) {
+						logger.error(keyStoreFile, e);
+					}
+				}
+			}
+		}
+		return keyManagers;
+	}
 }

src/main/java/com/egolm/sso/clients/SI_004_INVENTORY_SyncOutService/SI004INVENTORYSyncOutServiceTask.java

@@ -9,7 +9,6 @@ import java.util.Map;
 
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
-import org.apache.cxf.frontend.ClientProxy;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.jdbc.core.JdbcTemplate;
@@ -66,8 +65,7 @@ public class SI004INVENTORYSyncOutServiceTask {
 	}
 
 	public void runTask() throws MalformedURLException {
-		SI004INVENTORYSyncOut service = new SI004INVENTORYSyncOutService(factory.getAbsoluteURL(WSDLPATH)).getPort(SI004INVENTORYSyncOut.class);
-		ClientProxy.getClient(service).getOutInterceptors().add(factory.getWSS4JOutInterceptor());
+		SI004INVENTORYSyncOut service = factory.create(SI004INVENTORYSyncOut.class, factory.getAbsoluteURL(WSDLPATH), SI004INVENTORYSyncOutService.SERVICE);
 		this.sendData(service);
 	}
 	

src/main/java/com/egolm/sso/clients/SI_009_SO_CREATION_AsynOutService/SI009SOCREATIONAsynOutServiceTask.java

@@ -9,7 +9,6 @@ import java.util.Map;
 
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
-import org.apache.cxf.frontend.ClientProxy;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.jdbc.core.JdbcTemplate;
@@ -65,8 +64,7 @@ public class SI009SOCREATIONAsynOutServiceTask {
 	}
 	
 	public void runTask() throws MalformedURLException {
-		SI009SOCREATIONAsynOut service = new SI009SOCREATIONAsynOutService(factory.getAbsoluteURL(WSDLPATH)).getPort(SI009SOCREATIONAsynOut.class);
-		ClientProxy.getClient(service).getOutInterceptors().add(factory.getWSS4JOutInterceptor());
+		SI009SOCREATIONAsynOut service = factory.create(SI009SOCREATIONAsynOut.class, factory.getAbsoluteURL(WSDLPATH), SI009SOCREATIONAsynOutService.SERVICE);
 		this.sendData(service);
 	}
 	

src/main/java/com/egolm/sso/clients/SI_011_ACTUAL_SALES_SyncOutService/SI011ACTUALSALESSyncOutServiceTask.java

@@ -9,7 +9,6 @@ import java.util.Map;
 
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
-import org.apache.cxf.frontend.ClientProxy;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.jdbc.core.JdbcTemplate;
@@ -66,8 +65,7 @@ public class SI011ACTUALSALESSyncOutServiceTask {
 	}
 
 	public void runTask() throws MalformedURLException {
-		SI011ACTUALSALESSyncOut service = new SI011ACTUALSALESSyncOutService(factory.getAbsoluteURL(WSDLPATH)).getPort(SI011ACTUALSALESSyncOut.class);
-		ClientProxy.getClient(service).getOutInterceptors().add(factory.getWSS4JOutInterceptor());
+		SI011ACTUALSALESSyncOut service = factory.create(SI011ACTUALSALESSyncOut.class, factory.getAbsoluteURL(WSDLPATH), SI011ACTUALSALESSyncOutService.SERVICE);
 		this.sendData(service);
 	}
 	

src/main/resources/application.yml

+CLIENT_KEYSTORE:
+  FILEPATH: SSL/sap.keystore
+  PASSWORD: 123456
 isUsedTestController: true
 xmlRoot: xml
 systemId: system
@@ -35,5 +38,3 @@ cxf:
   path: /api/services
   servlet:
     load-on-startup: -1
\ No newline at end of file
-logging:
-  file: logs/spring.log
\ No newline at end of file