1 files changed, 128 insertions, 0 deletions
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/MoccaContextListener.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/MoccaContextListener.java
new file mode 100644
index 00000000..8d65c92e
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/MoccaContextListener.java
@@ -0,0 +1,128 @@
+/*
+* Copyright 2009 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package at.gv.egiz.bku.online.webapp;
+
+import iaik.security.ecc.provider.ECCProvider;
+import iaik.security.provider.IAIK;
+import iaik.xml.crypto.XSecProvider;
+
+import java.security.Provider;
+import java.security.Security;
+import java.util.ArrayList;
+import java.util.List;
+
+import javax.servlet.ServletContext;
+import javax.servlet.ServletContextEvent;
+import javax.servlet.ServletContextListener;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+public class MoccaContextListener implements ServletContextListener {
+  
+  public static final String DISABLE_SECURITY_PROVIDER_REGISTRATION = "disableSecurityProviderRegistration";
+  
+  private Logger log = LoggerFactory.getLogger(MoccaContextListener.class);
+
+  private final List<Provider> selfRegisteredProviders = new ArrayList<Provider>(); 
+  
+  @Override
+  public void contextDestroyed(ServletContextEvent sce) {
+    log.info("Deregistering self registered security providers.");
+    
+    for (Provider provider : selfRegisteredProviders) {
+      Security.removeProvider(provider.getName());
+    }
+    selfRegisteredProviders.clear();
+    
+  }
+
+  @Override
+  public void contextInitialized(ServletContextEvent sce) {
+    
+    ServletContext servletContext = sce.getServletContext();
+    if (!Boolean.parseBoolean(servletContext.getInitParameter(DISABLE_SECURITY_PROVIDER_REGISTRATION))) {
+      log.info("Looking for required and registered security providers ...");
+      
+      registerProviders();
+      
+      if (!selfRegisteredProviders.isEmpty()) {
+        log.warn("Security providers have been registered. "
+            + "This may affect other contexts in the same container!");
+      }
+      
+      if (log.isDebugEnabled()) {
+        StringBuilder sb = new StringBuilder();
+        sb.append("Registered providers: ");
+        int i = 1;
+        for (Provider prov : Security.getProviders()) {
+          sb.append("\n" + (i++) + ". : " + prov);
+        }
+        log.debug(sb.toString());
+      }
+    }
+
+
+  }
+
+  
+  protected void registerProvider(Provider provider, int position) {
+    String name = provider.getName();
+    if (Security.getProvider(name) == null) {
+      // register IAIK provider at first position
+      try {
+        if (position > 0) {
+          position = Security.insertProviderAt(provider, position);
+        } else {
+          position = Security.addProvider(provider);
+        }
+        log.info("Required security Provider {} was not yet registered. "
+            + "Now registered at position {}.", name, position);
+        selfRegisteredProviders.add(provider);
+      } catch (SecurityException e) {
+        log.info("Failed to register required security Provider.", e);
+      }
+    } else {
+      log.info("Required security Provider {} already registered.", name);
+    }
+    
+  }
+  
+  protected void registerProviders() {
+
+    registerProvider(new IAIK(), 1);
+    registerProvider(new ECCProvider(false), 2);
+    
+    final String name = XSecProvider.NAME;
+    if (Security.getProvider(XSecProvider.NAME) == null) {
+      // register XML Security provider
+      try {
+        XSecProvider.addAsProvider(false);
+        log.info("Required security Provider {} was not yet registered. "
+            + "Now registered.", name);
+        selfRegisteredProviders.add(Security.getProvider(name));
+      } catch (SecurityException e) {
+        log.info("Failed to register required security Provider.", e);
+      }
+    } else {
+      log.info("Required security Provider {} already registered.", name);
+    }
+    
+  }
+
+}