public class SecurityManager {
private static final Logger LOG = LoggerFactory.getLogger(SecurityManager.class);
private static final String KEYSTORE_TYPE = "HDImageStore";
private static final String TRUST_MANAGER_ALG = "GOSTX509";
private static final String KEY_MANAGER_ALG = "GOSTX509";

@Inject
private SecurityConfig config;

public SSLContext getSSLContext(UserConfig security) {
try {
SSLContext sslContext = SSLContext.getInstance("GOSTTLS", Security.getProvider("JTLS"));
KeyManager[] keyManagers = getKeyManager(security);
sslContext.init(keyManagers, getTrustManager(), new SecureRandom());
return sslContext;
} catch (GeneralSecurityException e) {
throw new IllegalStateException(e);
}
}

private KeyManager[] getKeyManager(UserConfig security) {
try {
LOG.info("Initializing SSL keystore");
KeyStore keyStore = KeyStore.getInstance(KEYSTORE_TYPE);
keyStore.load(null, null);
KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KEY_MANAGER_ALG);
String keyStorePassword = security.getKeyPass();
char[] password = keyStorePassword != null ? keyStorePassword.toCharArray() : null;
keyManagerFactory.init(keyStore, password);
return keyManagerFactory.getKeyManagers();
} catch (Exception e) {
throw new IllegalStateException(e);
}
}

private TrustManager[] getTrustManager() {
try {
LOG.info("Initializing truststore from location: {}", config.getSslTrustStorePath());
KeyStore trustStore = KeyStore.getInstance(KEYSTORE_TYPE);
InputStream inputStream = new FileInputStream(config.getSslTrustStorePath());
try {
String password = config.getSslTrustStorePassword();
trustStore.load(inputStream, password != null ? password.toCharArray() : null);
TrustManagerFactory factory = TrustManagerFactory.getInstance(TRUST_MANAGER_ALG);
factory.init(trustStore);
return factory.getTrustManagers();
} finally {
inputStream.close();
}
} catch (IOException e) {
throw new IllegalStateException(e);
} catch (GeneralSecurityException e) {
throw new IllegalStateException(e);
}
}
}