Java library for SPIFFE support
Go to file
Max Lambrecht ef2cdafab9 Adding utility methods for generating x509 certificates for testing purposes.
Adding jacoco test coverage report plugin.
Adding and improving tests for X509SvidValidator and CertificateUtils.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-05-22 09:31:32 -03:00
gradle/wrapper [WIP]-Define v2 interface, refactor in modules 2020-04-10 14:21:27 -03:00
java-spiffe-core Adding utility methods for generating x509 certificates for testing purposes. 2020-05-22 09:31:32 -03:00
java-spiffe-helper Adding tests to improve coverage for X509Svid, X509SvidValidator, X509BundleSet, SpiffeId, JwtSvid. 2020-05-18 12:11:47 -03:00
java-spiffe-provider Adding tests to improve coverage for X509Svid, X509SvidValidator, X509BundleSet, SpiffeId, JwtSvid. 2020-05-18 12:11:47 -03:00
.gitignore First commit 2018-05-28 12:39:13 -03:00
LICENSE Adding LICENSE 2018-08-22 10:53:38 -03:00
README.md Moving and cleaning dependencies 2020-04-23 07:39:55 -03:00
build.gradle Adding utility methods for generating x509 certificates for testing purposes. 2020-05-22 09:31:32 -03:00
gradlew First commit 2018-05-28 12:39:13 -03:00
gradlew.bat First commit 2018-05-28 12:39:13 -03:00
lombok.config Adding utility methods for generating x509 certificates for testing purposes. 2020-05-22 09:31:32 -03:00
settings.gradle [WIP]-Define v2 interface, refactor in modules 2020-04-10 14:21:27 -03:00

README.md

JAVA-SPIFFE library

Overview

The JAVA-SPIFFE library provides functionality to interact with the Workload API to fetch X509 and JWT SVIDs and Bundles, and a Java Security Provider implementation to be plugged into the Java Security Interface plumbing. This is essentially a X509-SVID based KeyStore and TrustStore implementation that handles the certificates in memory and receives the updates asynchronously from the Workload API. The KeyStore handles the Certificate chain and Private Key to prove identity in a TLS connection, and the TrustStore handles the trusted bundles (supporting federated bundles) and performs peer's certificate and SPIFFE ID verification.

This library is composed of three modules:

java-spiffe-core: core functionality to interact with the Workload API.

java-spiffe-provider: Java Provider implementation.

java-spiffe-helper: Helper to store X509-SVID Certificates in a Java Keystore in disk.

Supports Java 8+

Build the JARs

 $ ./gradlew build
 
 BUILD SUCCESSFUL 

jar files are placed in build/libs in each module.