AfflictionNetworks/getdown
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Created ant task for generating signed applet parameters.

Browse Source
This commit is contained in:
Michael Bayne
2007-02-04 00:16:29 +00:00
parent 67ed6fea56
commit 47e3bec864
2 changed files with 160 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/java/com/threerings/getdown/tools/AppletParamSigner.java
+32 -18
View File
@@ -1,3 +1,23 @@
//
// $Id$
//
// Getdown - application installer, patcher and launcher
// Copyright (C) 2004-2006 Three Rings Design, Inc.
//
// This program is free software; you can redistribute it and/or modify it
// under the terms of the GNU General Public License as published by the Free
// Software Foundation; either version 2 of the License, or (at your option)
// any later version.
//
// This program is distributed in the hope that it will be useful, but WITHOUT
// ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
// FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
// more details.
//
// You should have received a copy of the GNU General Public License along with
// this program; if not, write to the: Free Software Foundation, Inc.,
// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
package com.threerings.getdown.tools;
import java.io.BufferedInputStream;
@@ -9,8 +29,8 @@ import java.security.Signature;
import org.apache.commons.codec.binary.Base64;
/**
* Produces a signed hash of the appbase, appname, and image path to ensure
* that signed copies of Getdown are not hijacked to run malicious code.
* Produces a signed hash of the appbase, appname, and image path to ensure that signed copies of
* Getdown are not hijacked to run malicious code.
*/
public class AppletParamSigner
{
@@ -18,12 +38,11 @@ public class AppletParamSigner
{
try {
if (args.length != 7) {
System.err.println(
"AppletParamSigner keystore storepass alias keypass " +
"appbase appname imgpath"
);
System.err.println("AppletParamSigner keystore storepass alias keypass " +
"appbase appname imgpath");
System.exit(255);
}
String keystore = args[0];
String storepass = args[1];
String alias = args[2];
@@ -35,25 +54,20 @@ public class AppletParamSigner
KeyStore store = KeyStore.getInstance("JKS");
store.load(new BufferedInputStream(new FileInputStream(keystore)),
storepass.toCharArray());
PrivateKey key = (PrivateKey)store.getKey(alias,
keypass.toCharArray());
storepass.toCharArray());
PrivateKey key = (PrivateKey)store.getKey(alias, keypass.toCharArray());
Signature sig = Signature.getInstance("SHA1withRSA");
sig.initSign(key);
sig.update(params.getBytes());
String signed = new String(Base64.encodeBase64(sig.sign()));
System.out.println(
"<param name=\"appbase\" value=\"" + appbase + "\" />");
System.out.println(
"<param name=\"appname\" value=\"" + appname + "\" />");
System.out.println(
"<param name=\"bgimage\" value=\"" + imgpath + "\" />");
System.out.println(
"<param name=\"signature\" value=\"" + signed + "\" />");
System.out.println("<param name=\"appbase\" value=\"" + appbase + "\" />");
System.out.println("<param name=\"appname\" value=\"" + appname + "\" />");
System.out.println("<param name=\"bgimage\" value=\"" + imgpath + "\" />");
System.out.println("<param name=\"signature\" value=\"" + signed + "\" />");
} catch (Exception e) {
System.err.println("Failed to produce signature.");
e.printStackTrace();
}
}
}
src/java/com/threerings/getdown/tools/AppletParamTask.java
+128
View File
@@ -0,0 +1,128 @@
//
// $Id$
//
// Getdown - application installer, patcher and launcher
// Copyright (C) 2004-2006 Three Rings Design, Inc.
//
// This program is free software; you can redistribute it and/or modify it
// under the terms of the GNU General Public License as published by the Free
// Software Foundation; either version 2 of the License, or (at your option)
// any later version.
//
// This program is distributed in the hope that it will be useful, but WITHOUT
// ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
// FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
// more details.
//
// You should have received a copy of the GNU General Public License along with
// this program; if not, write to the: Free Software Foundation, Inc.,
// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
package com.threerings.getdown.tools;
import java.io.BufferedInputStream;
import java.io.BufferedReader;
import java.io.File;
import java.io.FileInputStream;
import java.io.FileReader;
import java.io.FileWriter;
import java.io.PrintWriter;
import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.Signature;
import org.apache.commons.codec.binary.Base64;
import org.apache.tools.ant.BuildException;
import org.apache.tools.ant.Task;
/**
* Computes and fills in signed applet parameters. The input file should contain the following
* tokens: <code>@APPBASE@, @APPNAME@, @IMGPATH@, @SIGNATURE@</code> which will be filled in based
* on supplied and computed values.
*/
public class AppletParamTask extends Task
{
public void setAppbase (String appbase)
{
_appbase = appbase;
}
public void setAppname (String appname)
{
_appname = appname;
}
public void setImgpath (String imgpath)
{
_imgpath = imgpath;
}
public void setKeystore (File keystore)
{
_keystore = keystore;
}
public void setStorepass (String storepass)
{
_storepass = storepass;
}
public void setAlias (String alias)
{
_alias = alias;
}
public void setKeypass (String keypass)
{
_keypass = keypass;
}
public void setFile (File file)
{
_input = file;
}
public void setTofile (File tofile)
{
_output = tofile;
}
public void execute () throws BuildException
{
String params = _appbase + _appname + _imgpath;
try {
KeyStore store = KeyStore.getInstance("JKS");
store.load(new BufferedInputStream(new FileInputStream(_keystore)),
_storepass.toCharArray());
PrivateKey key = (PrivateKey)store.getKey(_alias, _keypass.toCharArray());
Signature sig = Signature.getInstance("SHA1withRSA");
sig.initSign(key);
sig.update(params.getBytes());
String signature = new String(Base64.encodeBase64(sig.sign()));
BufferedReader bin = new BufferedReader(new FileReader(_input));
PrintWriter pout = new PrintWriter(new FileWriter(_output));
String line;
while ((line = bin.readLine()) != null) {
line = line.replaceAll("@APPNAME@", _appname);
line = line.replaceAll("@APPBASE@", _appbase);
line = line.replaceAll("@IMGPATH@", _imgpath);
line = line.replaceAll("@SIGNATURE@", signature);
pout.println(line);
}
bin.close();
pout.close();
} catch (Exception e) {
throw new BuildException(e);
}
}
protected String _appbase, _appname, _imgpath;
protected File _keystore, _input, _output;
protected String _storepass = "", _alias, _keypass = "";
}