Skip to content
Snippets Groups Projects
Commit 9a56cd6c authored by Tulio Ribeiro's avatar Tulio Ribeiro
Browse files

The key.jceks needs to be created like this:

keytool -genkey -alias AliasChallengeResponse -keystore key2.jceks -keypass "PassWord" -storepass "PassWord" -storetype JCEKS

Value of CHALLENGE_RESPONSE_SECRET=AliasChallengeResponse

Value of CHALLENGE_RESPONSE_SECRET at CryptoUtil.java is hard coded.
parent 627e47f2
No related branches found
No related tags found
No related merge requests found
......@@ -310,7 +310,6 @@ public abstract class AbstractRPCChannelHandler extends ChannelInboundHandlerAda
try {
switch (getAuthScheme()) {
case CHALLENGE_RESPONSE:
logger.info("Request: {}", request);
handshakeChallengeResponse(request, channel);
break;
case NO_AUTH:
......@@ -336,17 +335,13 @@ public abstract class AbstractRPCChannelHandler extends ChannelInboundHandlerAda
throw new AuthException("No authentication data in " +
"handshake message");
}
logger.info("AuthChallengeResponse: {}, HelloMessage: {}",
cr,
request);
if (cr.isSetResponse()) {
logger.info("cr.isSetResponse(): {}",cr.isSetResponse());
authenticateResponse(currentChallenge, cr.getResponse());
currentChallenge = null;
channelState = ChannelState.AUTHENTICATED;
handleHello(request, channel);
} else if (cr.isSetChallenge()) {
logger.info("cr.isSetChallenge(): {}", cr.isSetChallenge());
HelloMessage m = new HelloMessage();
if (getLocalNodeId() != null)
m.setNodeId(getLocalNodeId());
......@@ -355,13 +350,9 @@ public abstract class AbstractRPCChannelHandler extends ChannelInboundHandlerAda
m.setHeader(header);
SyncMessage bsm = new SyncMessage(MessageType.HELLO);
bsm.setHello(m);
logger.info("AQUI CHEGA 1 ");
AuthChallengeResponse reply = new AuthChallengeResponse();
logger.info("AQUI CHEGA 2 cr.getChallenge(): {} ",cr.getChallenge());
reply.setResponse(generateResponse(cr.getChallenge()));
logger.info("AQUI CHEGA 3");
m.setAuthChallengeResponse(reply);
logger.info("AQUI CHEGA 4");
channel.writeAndFlush(bsm);
} else {
throw new AuthException("No authentication data in " +
......
......@@ -19,7 +19,7 @@ net.floodlightcontroller.devicemanager.internal.DeviceManagerImpl,\
net.floodlightcontroller.accesscontrollist.ACL,\
net.floodlightcontroller.statistics.StatisticsCollector
org.sdnplatform.sync.internal.SyncManager.authScheme=CHALLENGE_RESPONSE
org.sdnplatform.sync.internal.SyncManager.keyStorePath=/etc/floodlight/key.jceks
org.sdnplatform.sync.internal.SyncManager.keyStorePath=/etc/floodlight/key2.jceks
org.sdnplatform.sync.internal.SyncManager.dbPath=/var/lib/floodlight/
org.sdnplatform.sync.internal.SyncManager.keyStorePassword=PassWord
org.sdnplatform.sync.internal.SyncManager.port=6642
......
......@@ -17,7 +17,7 @@ net.floodlightcontroller.devicemanager.internal.DeviceManagerImpl,\
net.floodlightcontroller.accesscontrollist.ACL,\
net.floodlightcontroller.statistics.StatisticsCollector
org.sdnplatform.sync.internal.SyncManager.authScheme=CHALLENGE_RESPONSE
org.sdnplatform.sync.internal.SyncManager.keyStorePath=/etc/floodlight/key.jceks
org.sdnplatform.sync.internal.SyncManager.keyStorePath=/etc/floodlight/key2.jceks
org.sdnplatform.sync.internal.SyncManager.dbPath=/var/lib/floodlight2/
org.sdnplatform.sync.internal.SyncManager.keyStorePassword=PassWord
org.sdnplatform.sync.internal.SyncManager.port=6643
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment