content: package org.apache.cassandra.stress.settings;
  /*
   * 
   * Licensed to the Apache Software Foundation (ASF) under one
   * or more contributor license agreements.  See the NOTICE file
   * distributed with this work for additional information
   * regarding copyright ownership.  The ASF licenses this file
   * to you under the Apache License, Version 2.0 (the
   * "License"); you may not use this file except in compliance
   * with the License.  You may obtain a copy of the License at
   * 
   *   http://www.apache.org/licenses/LICENSE-2.0
   * 
   * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an
   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
   * KIND, either express or implied.  See the License for the
   * specific language governing permissions and limitations
   * under the License.
   * 
   */
  
  
  import java.io.Serializable;
  import java.util.Arrays;
  import java.util.List;
  import java.util.Map;
  
  import org.apache.cassandra.config.EncryptionOptions;
  import org.apache.cassandra.stress.util.ResultLogger;
  
  import static java.lang.String.format;
  import static org.apache.cassandra.stress.settings.SettingsCredentials.TRANSPORT_KEYSTORE_PASSWORD_PROPERTY_KEY;
  import static org.apache.cassandra.stress.settings.SettingsCredentials.TRANSPORT_TRUSTSTORE_PASSWORD_PROPERTY_KEY;
  
  public class SettingsTransport implements Serializable
  {
      private final TOptions options;
      private final SettingsCredentials credentials;
  
      public SettingsTransport(TOptions options, SettingsCredentials credentials)
      {
          this.options = options;
          this.credentials = credentials;
      }
  
      public EncryptionOptions.ClientEncryptionOptions getEncryptionOptions()
      {
          EncryptionOptions.ClientEncryptionOptions encOptions = new EncryptionOptions.ClientEncryptionOptions().applyConfig();
          if (options.trustStore.present())
          {
              EncryptionOptions.Builder<EncryptionOptions.ClientEncryptionOptions> encOptionsBuilder = new EncryptionOptions.ClientEncryptionOptions.Builder(encOptions)
                                          .withEnabled(true)
                                          .withTrustStore(options.trustStore.value())
                                          .withTrustStorePassword(options.trustStorePw.setByUser() ? options.trustStorePw.value() : credentials.transportTruststorePassword)
                                          .withAlgorithm(options.alg.value())
                                          .withProtocol(options.protocol.value())
                                          .withCipherSuites(options.ciphers.value().split(","));
  
              if (options.keyStore.present())
              {
                  encOptionsBuilder.withKeyStore(options.keyStore.value())
                                   .withKeyStorePassword(options.keyStorePw.setByUser() ? options.keyStorePw.value() : credentials.transportKeystorePassword);
              }
              else
              {
                  // mandatory for SSLFactory.createSSLContext(), see CASSANDRA-9325
                  encOptionsBuilder.withKeyStore(encOptions.truststore)
                                   .withKeyStorePassword(encOptions.truststore_password != null ? encOptions.truststore_password : credentials.transportTruststorePassword);
              }
  
              encOptions = encOptionsBuilder.build();
          }
          return encOptions;
      }
  
      // Option Declarations
  
      static class TOptions extends GroupedOptions implements Serializable
      {
          final OptionSimple trustStore = new OptionSimple("truststore=", ".*", null, "SSL: full path to truststore", false);
          final OptionSimple trustStorePw = new OptionSimple("truststore-password=", ".*", null,
                                                             format("SSL: truststore password, when specified, it will override the value in credentials file of key '%s'",
                                                                    TRANSPORT_TRUSTSTORE_PASSWORD_PROPERTY_KEY), false);
          final OptionSimple keyStore = new OptionSimple("keystore=", ".*", null, "SSL: full path to keystore", false);
          final OptionSimple keyStorePw = new OptionSimple("keystore-password=", ".*", null,
                                                           format("SSL: keystore password, when specified, it will override the value in credentials file for key '%s'",
                                                                  TRANSPORT_KEYSTORE_PASSWORD_PROPERTY_KEY), false);
          final OptionSimple protocol = new OptionSimple("ssl-protocol=", ".*", "TLS", "SSL: connection protocol to use", false);
          final OptionSimple alg = new OptionSimple("ssl-alg=", ".*", null, "SSL: algorithm", false);
          final OptionSimple ciphers = new OptionSimple("ssl-ciphers=", ".*",
                                                        "TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA",
                                                        "SSL: comma delimited list of encryption suites to use", false);
  
          @Override
          public List<? extends Option> options()
          {
              return Arrays.asList(trustStore, trustStorePw, keyStore, keyStorePw, protocol, alg, ciphers);
          }
      }
  
      // CLI Utility Methods
      public void printSettings(ResultLogger out)
      {
          String tPassword = options.trustStorePw.setByUser() ? options.trustStorePw.value() : credentials.transportTruststorePassword;
          tPassword = tPassword != null ? "*suppressed*" : tPassword;
  
          String kPassword = options.keyStorePw.setByUser() ? options.keyStore.value() : credentials.transportKeystorePassword;
          kPassword = kPassword != null ? "*suppressed*" : kPassword;
  
          out.printf("  Truststore: %s%n", options.trustStore.value());
          out.printf("  Truststore Password: %s%n", tPassword);
          out.printf("  Keystore: %s%n", options.keyStore.value());
          out.printf("  Keystore Password: %s%n", kPassword);
          out.printf("  SSL Protocol: %s%n", options.protocol.value());
          out.printf("  SSL Algorithm: %s%n", options.alg.value());
          out.printf("  SSL Ciphers: %s%n", options.ciphers.value());
      }
  
      public static SettingsTransport get(Map<String, String[]> clArgs, SettingsCredentials credentials)
      {
          String[] params = clArgs.remove("-transport");
          if (params == null)
              return new SettingsTransport(new TOptions(), credentials);
  
          GroupedOptions options = GroupedOptions.select(params, new TOptions());
          if (options == null)
          {
              printHelp();
              System.out.println("Invalid -transport options provided, see output for valid options");
              System.exit(1);
          }
          return new SettingsTransport((TOptions) options, credentials);
      }
  
      public static void printHelp()
      {
          GroupedOptions.printOptions(System.out, "-transport", new TOptions());
      }
  
      public static Runnable helpPrinter()
      {
          return new Runnable()
          {
              @Override
              public void run()
              {
                  printHelp();
              }
          };
      }
  
  }
  