com.redhat.rhn.common.security

Class SessionSwap

java.lang.Object

com.redhat.rhn.common.security.SessionSwap

public class SessionSwap
extends java.lang.Object

SessionSwap, a class to handle secure data manipulations in a way consistent with SessionSwap from the perl codebase. Effectively a wrapper to make it a bit easier to exchange data with different parts of our codebase that speak different languages. A session swap token is basically a tuple of a certain form that contains N pieces of hex data and a signature that is based on a shared secret. Someday this should become a true HMAC, but for now, it is an older algorithm.

Field Summary

Fields

Modifier and Type	Field and Description
static char[]	HEX_CHARS

Method Summary

Modifier and Type	Method and Description
static java.lang.String	computeMD5Hash(java.lang.String text) compute md5sum for any arbitrary text
static java.lang.String	encodeData(java.lang.String in) simple wrapper around encodeData(String[]) for easier consumption
static java.lang.String	encodeData(java.lang.String[] in) given an array of strings, compute the hex session swap, which contains both the original data and the 'signature'.
static java.lang.String[]	extractData(java.lang.String in) given a session swap string, this will crack it open and return the data.
static java.lang.String	generateSwapKey(java.lang.String data) compute the md5sum of key1:key2:(data):key3:key4.
static java.lang.String	rhnHmacData(java.util.List<java.lang.String> text) Takes an array of strings and SHA1 hashes the 'joined' results.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HEX_CHARS

public static final char[] HEX_CHARS

Method Detail

encodeData

public static java.lang.String encodeData(java.lang.String[] in)

given an array of strings, compute the hex session swap, which contains both the original data and the 'signature'. so the resulting string is encapsulated and can be passed around as 'signed' data.

Parameters:

in - an array of strings, all of which must be valud hex

Returns:

String of the signature, in the form "D1:D2:D3xHEX" where D1... are the input data and HEX is the hex signature.

encodeData

public static java.lang.String encodeData(java.lang.String in)

simple wrapper around encodeData(String[]) for easier consumption

Parameters:

in - The data to encode

Returns:

The reulting session swap string.

See Also:

encodeData

extractData

public static java.lang.String[] extractData(java.lang.String in)

given a session swap string, this will crack it open and return the data.

Parameters:

in - The session swap to inspect.

Returns:

The data extracted from the session swap

Throws:

SessionSwapTamperException - if the data was tampered with, making it easy to use and trust

generateSwapKey

public static java.lang.String generateSwapKey(java.lang.String data)

compute the md5sum of key1:key2:(data):key3:key4.

Parameters:

data - to compute

Returns:

computed data

computeMD5Hash

public static java.lang.String computeMD5Hash(java.lang.String text)

compute md5sum for any arbitrary text

Parameters:

text - text to hash

Returns:

md5 computed hash value

rhnHmacData

public static java.lang.String rhnHmacData(java.util.List<java.lang.String> text)

Takes an array of strings and SHA1 hashes the 'joined' results. This is a port of the RHN::SessionSwap:rhn_hmac_data method.

Parameters:

text - array to SHA1 hash

Returns:

String of hex chars