content: /**
   * Licensed to the Apache Software Foundation (ASF) under one or more
   * contributor license agreements.  See the NOTICE file distributed with
   * this work for additional information regarding copyright ownership.
   * The ASF licenses this file to You under the Apache License, Version 2.0
   * (the "License"); you may not use this file except in compliance with
   * the License.  You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package org.apache.activemq.transport.nio;
  
  import java.io.IOException;
  import java.net.Socket;
  import java.net.URI;
  import java.net.URISyntaxException;
  import java.net.UnknownHostException;
  import java.nio.ByteBuffer;
  import java.util.Map;
  
  import javax.net.ServerSocketFactory;
  import javax.net.SocketFactory;
  import javax.net.ssl.SSLContext;
  import javax.net.ssl.SSLEngine;
  import javax.net.ssl.SSLSocketFactory;
  
  import org.apache.activemq.broker.SslContext;
  import org.apache.activemq.transport.Transport;
  import org.apache.activemq.transport.TransportServer;
  import org.apache.activemq.transport.tcp.SslTransport;
  import org.apache.activemq.transport.tcp.TcpTransport;
  import org.apache.activemq.transport.tcp.TcpTransport.InitBuffer;
  import org.apache.activemq.transport.tcp.TcpTransportServer;
  import org.apache.activemq.util.IOExceptionSupport;
  import org.apache.activemq.util.IntrospectionSupport;
  import org.apache.activemq.wireformat.WireFormat;
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;
  
  public class NIOSSLTransportFactory extends NIOTransportFactory {
      private static final Logger LOG = LoggerFactory.getLogger(NIOSSLTransportFactory.class);
  
      protected SSLContext context;
  
      @Override
      protected TcpTransportServer createTcpTransportServer(URI location, ServerSocketFactory serverSocketFactory) throws IOException, URISyntaxException {
          return new NIOSSLTransportServer(context, this, location, serverSocketFactory);
      }
  
      @Override
      public TransportServer doBind(URI location) throws IOException {
          if (SslContext.getCurrentSslContext() != null) {
              try {
                  context = SslContext.getCurrentSslContext().getSSLContext();
              } catch (Exception e) {
                  throw new IOException(e);
              }
          }
          return super.doBind(location);
      }
  
      /**
       * Overriding to allow for proper configuration through reflection but
       * delegate to get common configuration
       */
      @Override
      public Transport compositeConfigure(Transport transport, WireFormat format, Map options) {
          if (transport instanceof SslTransport) {
              SslTransport sslTransport = (SslTransport) transport.narrow(SslTransport.class);
              IntrospectionSupport.setProperties(sslTransport, options);
          } else if (transport instanceof NIOSSLTransport) {
              NIOSSLTransport sslTransport = (NIOSSLTransport) transport.narrow(NIOSSLTransport.class);
              IntrospectionSupport.setProperties(sslTransport, options);
          }
  
          return super.compositeConfigure(transport, format, options);
      }
  
      /**
       * Overriding to use SslTransports.
       */
      @Override
      protected Transport createTransport(URI location, WireFormat wf) throws UnknownHostException, IOException {
  
          URI localLocation = null;
          String path = location.getPath();
          // see if the path is a local URI location
          if (path != null && path.length() > 0) {
              int localPortIndex = path.indexOf(':');
              try {
                  Integer.parseInt(path.substring(localPortIndex + 1, path.length()));
                  String localString = location.getScheme() + ":/" + path;
                  localLocation = new URI(localString);
              } catch (Exception e) {
                  LOG.warn("path isn't a valid local location for SslTransport to use", e);
              }
          }
          SocketFactory socketFactory = createSocketFactory();
          return new SslTransport(wf, (SSLSocketFactory) socketFactory, location, localLocation, false);
      }
  
      @Override
      public TcpTransport createTransport(WireFormat wireFormat, Socket socket,
              SSLEngine engine, InitBuffer initBuffer, ByteBuffer inputBuffer)
              throws IOException {
          return new NIOSSLTransport(wireFormat, socket, engine, initBuffer, inputBuffer);
      }
  
      /**
       * Creates a new SSL SocketFactory. The given factory will use user-provided
       * key and trust managers (if the user provided them).
       *
       * @return Newly created (Ssl)SocketFactory.
       * @throws IOException
       */
      @Override
      protected SocketFactory createSocketFactory() throws IOException {
          if (SslContext.getCurrentSslContext() != null) {
              SslContext ctx = SslContext.getCurrentSslContext();
              try {
                  return ctx.getSSLContext().getSocketFactory();
              } catch (Exception e) {
                  throw IOExceptionSupport.create(e);
              }
          } else {
              return SSLSocketFactory.getDefault();
          }
  
      }
  
  }
  