HTTPS Support ?

[searchbox-io]

HTTPS Support ?

[peterhawkins]

you can use https with it now:

load key stores from files and 

static SSLSocketFactory getSSLSocketFactory() {
SSLSocketFactory sf = new SSLSocketFactory("SSL", keyStore, "changeit", trustStore,
SecureRandom.getInstance("SHA1PRNG"), new AllowAllHostnameVerifier())
return sf
}

private initJestClient(Set servers) {
// Configuration
ClientConfig clientConfig = new ClientConfig()
clientConfig.getServerProperties().put(ClientConstants.SERVER_LIST, servers)
// Construct a new Jest client according to configuration via factory
JestClientFactory factory = new JestClientFactory()
factory.setClientConfig(clientConfig)
client = factory.getObject()
// ssl
SSLSocketFactory sf = securityUtils.getSSLSocketFactory()
client.httpClient.connectionManager.schemeRegistry.register(new Scheme("https", sf, 8443))
}

 hope this helps!

---

Peter Hawkins
Sr Software Engineer

---

From: Javier Antoniucci [email protected]
To: searchbox-io/Jest [email protected]
Sent: Monday, April 1, 2013 10:15 AM
Subject: [Jest] HTTPS Support ? (#34)

Are there plans to include HTTPS support ?
—
Reply to this email directly or view it on GitHub.

[jantoniucci]

Works! Thanks!

[ferhatsb]

Sorry for not being involved, was fighting with production issues.
@peterhawkins thanks for suggestion, really made me smile how you helped here. Spirit of open source.

We may add this internally and construct according to given end points.

[tomidp]

Hi All
I try with @peterhawkins way but not work. Do you have any more advice to make it work?
Thank you

[ferhatsb]

Any error messages which it can guide us?

[tomidp]

Hi Ferhat

Thanks for your reply.
I am trying to connect to elastic search with jetty plugin and enable ssl. I use the sample project on : https://github.com/searchbox-io/java-jest-sample.

No error messages, because the code already marked a error on line

client.httpClient.connectionManager.schemeRegistry.register(new Scheme("https", sf, 8443));

This is the full code

@configuration
public class SpringConfiguration {
@bean
public JestClient jestClient() throws Exception {

    String connectionUrl = "https://localhost:9443";

    // Configuration
    ClientConfig clientConfig = new ClientConfig.Builder(connectionUrl).multiThreaded(true).build();

    // Construct a new Jest client according to configuration via factory
    JestClientFactory factory = new JestClientFactory();
    factory.setClientConfig(clientConfig);

    //ssl 
    SSLSocketFactory sf = getSSLSocketFactory(); 
    JestClient client = factory.getObject();

// SSLSocketFactory sf = getSSLSocketFactory();
client.httpClient.connectionManager.schemeRegistry.register(new Scheme("https", sf, 8443));

    return client;
}

private SSLSocketFactory getSSLSocketFactory() throws KeyManagementException, UnrecoverableKeyException, NoSuchAlgorithmException, KeyStoreException, CertificateException, IOException { 
    InputStream stream = this.getClass().getClassLoader().getResourceAsStream("jettykeystore");
    KeyStore keyStore  = KeyStore.getInstance("pkcs12");
    keyStore.load(stream, "tomi12".toCharArray());
    SSLSocketFactory sf = new SSLSocketFactory("SSL", keyStore, "changeit", keyStore, SecureRandom.getInstance("RSA"), new AllowAllHostnameVerifier()); 
    return sf; 
}

}

Thank you

[ferhatsb]

Try this;
client.getHttpClient().getConnectionManager().getSchemeRegistry().register(new Scheme("https", sf, 8443));

[tomidp]

Hi @ferhatsb

Thank you very much for your reply. Now i have no issue on the code. My code can compile without any error.
But still i can't connect to the elastic-search with jetty plugin, with my generated keystore.

This is my code now

@Bean
public JestClient jestClient() {

    String connectionUrl = "https://localhost:9443";

    // Configuration
    ClientConfig clientConfig = new ClientConfig.Builder(connectionUrl).multiThreaded(true).build();

    // Construct a new Jest client according to configuration via factory
    JestClientFactory factory = new JestClientFactory();
    factory.setClientConfig(clientConfig);

    //ssl 
    SSLSocketFactory sf = getSSLSocketFactory(); 
    JestHttpClient client = (JestHttpClient) factory.getObject();
    client.getHttpClient().getConnectionManager().getSchemeRegistry().register(new Scheme("https", 9443, sf));

    return client;
}

private SSLSocketFactory getSSLSocketFactory() { 
    InputStream stream = this.getClass().getClassLoader().getResourceAsStream("jettykeystore");
    KeyStore keyStore;
    try {
        keyStore = KeyStore.getInstance("JKS");
        keyStore.load(stream, "tomi12".toCharArray());
        SSLSocketFactory sf = new SSLSocketFactory(SSLSocketFactory.SSL, keyStore, "tomi12", keyStore, SecureRandom.getInstance("SHA1PRNG"), new AllowAllHostnameVerifier()); 
        return sf; 
    } catch (KeyStoreException e) {
        log.info("Keystore Exception : {} \n {}",e.getMessage(), e.getClass());
    } catch (NoSuchAlgorithmException e) {
        log.info("NSA Exception : {} \n {}",e.getMessage(), e.getClass());
    } catch (CertificateException e) {
        log.info("Certificate Exception : {} \n {}",e.getMessage(), e.getClass());
    } catch (IOException e) {
        log.info("IO Exception : {} \n {}",e.getMessage(), e.getClass());
    } catch (KeyManagementException e) {
        log.info("KeyManagement Exception : {} \n {}",e.getMessage(), e.getClass());
    } catch (UnrecoverableKeyException e) {
        log.info("Uncoverable Key Exception : {} \n {}",e.getMessage(), e.getClass());
    }
    return null;

}

Right now when i am trying to connect to elastic search, i will get authorization issue.

ERROR AbstractJestClient - An exception occurred while converting json string to map object
INFO SearchService - RESULT : 401 Unauthorized

I am still trying to find the way to make it work.
Thank you

[tomidp]

Hi @ferhatsb

Thanks for your help, now my code working as i expected. Beside register scheme, I need to add auth to my code.

    List<String> authpref = new ArrayList<String>();
    authpref.add(AuthPolicy.BASIC);
    client.getHttpClient().getParams().setParameter(AuthPNames.PROXY_AUTH_PREF, authpref);

    DefaultHttpClient httpClient = (DefaultHttpClient) client.getHttpClient();

    UsernamePasswordCredentials creds = new UsernamePasswordCredentials("user", "password");
    httpClient.getCredentialsProvider().setCredentials(new AuthScope("localhost", 9443), creds);

[ferhatsb]

Hi @tomidp

I was going to advise you to check credentials due to error 401.

Anyway it is sorted now. Also you should be able to;

String connectionUrl = "https://user:password@localhost:9443";

Instead of setting credentials explicitly.

[ravinaik1312]

Looks like the apis have changed, the above implementations to connect ES via Jest does not work as a lot of http client functions are deprecated.

Update on how you would do it now:

SSLContext sslContext = SSLContexts.custom()
.loadTrustMaterial(keyStore, new TrustSelfSignedStrategy())
.useSSL()
.build();

SSLConnectionSocketFactory sf = new SSLConnectionSocketFactory(sslContext, new AllowAllHostnameVerifier());

client.setHttpClient(HttpClientBuilder.create().setSSLSocketFactory(sf).build());