instance-identity-module-instance-identity-1.5/ 0000755 0000000 0000000 00000000000 12616216150 020424 5 ustar root root instance-identity-module-instance-identity-1.5/pom.xml 0000644 0000000 0000000 00000002456 12616216150 021750 0 ustar root root
4.0.0
org.jenkins-ci.plugins
plugin
1.609.1
org.jenkins-ci.modules
instance-identity
1.5
jenkins-module
Instance Identity
Maintains an RSA key pair that can serve as a foundation of authentication when communicating with Jenkins
scm:git:git://github.com/jenkinsci/${project.artifactId}-module.git
scm:git:ssh://git@github.com/jenkinsci/${project.artifactId}-module.git
instance-identity-1.5
MIT License
http://www.opensource.org/licenses/mit-license.php
org.bouncycastle
bcpkix-jdk15on
1.53
instance-identity-module-instance-identity-1.5/src/ 0000755 0000000 0000000 00000000000 12616216150 021213 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/ 0000755 0000000 0000000 00000000000 12616216150 022172 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/java/ 0000755 0000000 0000000 00000000000 12616216150 023113 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/java/org/ 0000755 0000000 0000000 00000000000 12616216150 023702 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/java/org/jenkinsci/ 0000755 0000000 0000000 00000000000 12616216150 025657 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/java/org/jenkinsci/main/ 0000755 0000000 0000000 00000000000 12616216150 026603 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/java/org/jenkinsci/main/modules/ 0000755 0000000 0000000 00000000000 12616216150 030253 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000153 00000000000 011602 L ustar root root instance-identity-module-instance-identity-1.5/src/test/java/org/jenkinsci/main/modules/instance_identity/ instance-identity-module-instance-identity-1.5/src/test/java/org/jenkinsci/main/modules/instance_ide0000755 0000000 0000000 00000000000 12616216150 032621 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000204 00000000000 011577 L ustar root root instance-identity-module-instance-identity-1.5/src/test/java/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest.java instance-identity-module-instance-identity-1.5/src/test/java/org/jenkinsci/main/modules/instance_ide0000644 0000000 0000000 00000006643 12616216150 032634 0 ustar root root /*
* The MIT License
*
* Copyright 2014 Jesse Glick.
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in
* all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
* THE SOFTWARE.
*/
package org.jenkinsci.main.modules.instance_identity;
import hudson.Util;
import hudson.model.PageDecorator;
import java.io.File;
import java.io.FileInputStream;
import static org.junit.Assert.*;
import org.junit.Rule;
import org.junit.Test;
import org.jvnet.hudson.test.JenkinsRule;
import org.jvnet.hudson.test.recipes.LocalData;
public class InstanceIdentityTest {
@Rule public JenkinsRule r = new JenkinsRule();
private static final String TEST_IDENTITY = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R6FrlvuyBPstxHKCnRL+oKzEGlgGydD/1Tj/LhCAzgXKnJZFEvo3rrz8CqcWbW3gt04bNXcET9NvAATisR1KP2Zi3EUG/jsXy7q9tr9t0NVAgGC5i5MtU+VFo/te0xAou7nsGng6T/FCXCq1nSeBdfAEQ23+fwyNtJpSbP2EqOrycLox+Xh6M91rt1c3JEHEe/FIrD+NhHQ4m6R/HwWH6DDq8W7P8y9j9/ToVSBBZr0pRETBZre5nkJiwJ/EWnbjqqJ/LguOMTukxPXe8/b9CDFrkuzpYUn8ChtL0DDCE/SoI9jwBSXwj5kQyNoyC9sVrbmEbuAPZ2dRzcDen09CwIDAQAB";
@LocalData
@Test public void compatibility() throws Exception {
assertIdentity();
}
@LocalData
@Test public void reread() throws Exception {
assertIdentity();
}
@LocalData
@Test public void identityKeyCorrupted() throws Exception {
String md5CurruptedIdentityKeyFile = "527cb65e89275095a238256b3d31b07a";
File d = r.jenkins.getRootDir();
File identityKeyFile = new File(d, "identity.key.enc");
FileInputStream fis = new FileInputStream(identityKeyFile);
String md5NewIdentityKeyFile = org.apache.commons.codec.digest.DigestUtils.md5Hex(fis);
fis.close();
assertFalse(md5NewIdentityKeyFile.equals(md5CurruptedIdentityKeyFile));
InstanceIdentity instanceIdentity = new InstanceIdentity(identityKeyFile, null);
assertNotNull(instanceIdentity);
}
@LocalData
@Test
public void identityKeyNotExist() throws Exception {
File d = r.jenkins.getRootDir();
assertTrue(new File(d, "identity.key.enc").isFile());
assertFalse(new File(d, "identity.key").isFile());
}
private void assertIdentity() throws Exception {
assertEquals(TEST_IDENTITY, r.jenkins.getExtensionList(PageDecorator.class).get(PageDecoratorImpl.class).getEncodedPublicKey());
File d = r.jenkins.getRootDir();
assertTrue(new File(d, "identity.key.enc").isFile());
assertFalse(new File(d, "identity.key").isFile());
}
}
instance-identity-module-instance-identity-1.5/src/test/resources/ 0000755 0000000 0000000 00000000000 12616216150 024204 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/ 0000755 0000000 0000000 00000000000 12616216150 024773 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/ 0000755 0000000 0000000 00000000000 12616216150 026750 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/ 0000755 0000000 0000000 00000000000 12616216150 027674 5 ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/ 0000755 0000000 0000000 00000000000 12616216150 031344 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000160 00000000000 011600 L ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instance_identity/ instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instanc0000755 0000000 0000000 00000000000 12616216150 032724 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000205 00000000000 011600 L ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest/ instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instanc0000755 0000000 0000000 00000000000 12616216150 032724 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000226 00000000000 011603 L ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest/compatibility.zip instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instanc0000644 0000000 0000000 00000003421 12616216150 032726 0 ustar root root PK
khsD&
' identity.key -----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
PK
khsD&
' identity.key PK > ././@LongLink 0000644 0000000 0000000 00000000235 00000000000 011603 L ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest/identityKeyCorrupted.zip instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instanc0000644 0000000 0000000 00000007524 12616216150 032736 0 ustar root root PK dF identity.key.encUX VT ±GS֨怞
k$}ZedvNO1طrxKa ִ8qjV) ?բDh 2 w;'џ(:=\{/Cn|CK:0U?5d"(Տgy_+[t
@}4A
g-^ehϲRA
UlĄM#Yqs4 .q3$ ;"yw$fY}m;Ru zu]>$$juŁQE,CrO u_8nph@ s7/ gKilƏ8`]p9֭c=.kxAȶnC_=z^ō0z^t00GPgRK%9
%Ab#3qA3˚l s7v8}W;%LR&I2GQ w `c iA$ٍDgk-:nC`OCA̼MZu"./0
3qF=0Dy _ qe7=B Ld8}Ia-eM
{aL |$}pϢUGqWD^ [-q ׃l2 EGωt`;J˦qx*D!y>/ICt A@ߵhWߒĜЃ! ~@G8|̨h5wN.OxF*HA>ݲ Cxs';^>iֻgN
}!1zG&2+!m>t
;5WC bت 7K I(i/d#WaqR%JB3^/
g7ߜ`#1ܳ8PPq8b;#K<Ç rӣYۑ.zDXrXMm
|)kxVڱA9Ce/cvJ :)'>ZgXIރ9_cd%\dg0Xnm_Ψ%(GL3Ҿx" J>}@˸z8^av^7.NL7jz=Ǽ%@fp(Ez7z AF*S + ܭuMwDgR.PKaap PK
WF __MACOSX/UX UWUUWU PK
WF __MACOSX/secrets/UX UWUUWU PK DasD __MACOSX/secrets/._master.keyUX IWU{)S c`cg`b`MLVVP' 1 CBL@솦!.XPWXXWPo```hmjjibjfdj힟SadQjmldbakhlhkbhkiajdnbjbh PK* PK tD I secrets/org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYUX IWU+S 0 AZuڤ>AS@\bOJHW,<;?ZeTT PKG|5 0 PK tD T __MACOSX/secrets/._org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYUX IWU+S c`cg`b`MLVVP' 1 CBL@솦!.XPWXXWPo```hmjjibjfdj힟SadQjmldbakhlhkbhkiajdnbjbh PK* PK /F __MACOSX/._secretsUX IWU
WU c`cg`b`MLVVP' 1 CBL@솦!.XPWXXWPo```hmjjibjfdj힟SadQjmldbakhlhkbhkiajdnbjbh PK* PK dF*lL @ identity.key.encUX C= +e G]? 3#PBood&6JzR/أP^eHdqb3!ѡDo KQρVm|'◆ra4)<ͷAH
SよĜO`4YڌYeO.}?b~h C@m;}2OQ»V\DӶH-Z" -.rh5[ +jg$M٧roF; .ԉzg"gQm ؟ @hneXuZ2'
ED.[V͍~:Ijw7&<=j+e)SsmPH5-P#l)橁 ђ6k,R2@_u77 4j oNA:N?d 7}5$ j
L 3!
(, )Au!OAcp
t vv(29^&<=#`TqrwA;q "-4K@ r
H}MS
l(sYs M{)>{EW [agsBx#m 4M 'f_2/j "XUaN+
Eckesx4>WRv.BAVwsǦso}?u3`\dOv"c ƒr0+jgyKhK@Nlv| >>WcY]@6ŏ0h__d
?E?@u$GcV7 \ΓTJ) IrT RpX.F[ytY{"\ݥH I0x6F>۠br-z6i ,ͮ˯M ^U>E ѽ+w7NSN֩ojJwaAmm>ZLk$=]՜ xݻaߢT1O[>(6JӇ&aԶGN/҂ _UBVE~< .
|UOՖ$3 %Jd"x|2 hͼwJ~uZLDpz #bomG Im͒otV"\?r:k^0,4+hm~lnRr ~N+5?ul.|(t "i7&lq@#n~FbROsqHJV軄'~q|;
FfaS|D [ h`n94sl3?@vRqԕ4/){1vŜr_hE\z-
R wͧ+_v }
vFűxV]o#;kM8#_"O>T(/2j{&.4}וU\cr)1[{v3=| %m: S_<2)N7=]4a&dg*h? PK
DisDaap secrets/master.keybc497f8128e4b716d9ed1992522b82e5c85d58ded36fca0af9cdb4226d9d3806d9c7a3e969485fa54240afd4d3810089dc56a24a988292236aa835074ab9cc9d5979a22a4ff849ed9cf6a1de2f7767705b73e69e8c2ed1b6d9d38bc9b5eaabdebbd51f216dcfc774af8f5ab6f176691e32084bffc1fc079876dfe67eeb6cc122PK
tDG|0 0 I secrets/org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYAZuڤ>AS@\bOJHW,<;?ZeTT PK
MuD~FS identity.key.enc PK
DisDaap secrets/master.keyPK
tDG|0 0 I secrets/org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYPK ././@LongLink 0000644 0000000 0000000 00000000234 00000000000 011602 L ustar root root instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest/identityKeyNotExist.zip instance-identity-module-instance-identity-1.5/src/test/resources/org/jenkinsci/main/modules/instanc0000644 0000000 0000000 00000004047 12616216150 032733 0 ustar root root PK
кF secrets/UX ZUZU PK DasD secrets/master.keyUX ZU{)S %
1S>3Ҿx" J>}@˸z8^av^7.NL7jz=Ǽ%@fp(Ez7z AF*S + ܭuMwDgR.PKaap PK
F __MACOSX/UX DZUDZU PK
F __MACOSX/secrets/UX DZUDZU PK DasD __MACOSX/secrets/._master.keyUX ZU{)S c`cg`b`MLVVP' 1 CBL@솦!.XPWXXWPo```hmjjibbnl`힟SadQjmbfnlbbkbfkkb`flinj PK PK tD I secrets/org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYUX ZU+S 0 AZuڤ>AS@\bOJHW,<;?ZeTT PKG|5 0 PK tD T __MACOSX/secrets/._org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYUX ZU+S c`cg`b`MLVVP' 1 CBL@솦!.XPWXXWPo```hmjjibbnl`힟SadQjmbfnlbbkbfkkb`flinj PK PK кF __MACOSX/._secretsUX ZUZU c`cg`b`MLVVP' 1 CBL@솦!.XPWXXWPo```hmjjibbnl`힟SadQjmbfnlbbkbfkkb`flinj PK PK
кF @A secrets/UX ZUZUPK DasDaap @6 secrets/master.keyUX ZU{)SPK
F @A __MACOSX/UX DZUDZUPK
F @AV __MACOSX/secrets/UX DZUDZUPK DasD @ __MACOSX/secrets/._master.keyUX ZU{)SPK tDG|5 0 I @큁 secrets/org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYUX ZU+SPK tD T @= __MACOSX/secrets/._org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYUX ZU+SPK кF @` __MACOSX/._secretsUX ZUZUPK A instance-identity-module-instance-identity-1.5/src/main/ 0000755 0000000 0000000 00000000000 12616216150 022137 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/java/ 0000755 0000000 0000000 00000000000 12616216150 023060 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/java/org/ 0000755 0000000 0000000 00000000000 12616216150 023647 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/ 0000755 0000000 0000000 00000000000 12616216150 025624 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/ 0000755 0000000 0000000 00000000000 12616216150 026550 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/modules/ 0000755 0000000 0000000 00000000000 12616216150 030220 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000153 00000000000 011602 L ustar root root instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/modules/instance_identity/ instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/modules/instance_ide0000755 0000000 0000000 00000000000 12616216150 032566 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000200 00000000000 011573 L ustar root root instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/modules/instance_identity/InstanceIdentity.java instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/modules/instance_ide0000644 0000000 0000000 00000013754 12616216150 032602 0 ustar root root package org.jenkinsci.main.modules.instance_identity;
import hudson.FilePath;
import hudson.Util;
import hudson.model.PageDecorator;
import java.io.File;
import java.io.FileOutputStream;
import java.io.FileReader;
import java.io.IOException;
import java.io.OutputStream;
import java.io.Reader;
import java.io.StringReader;
import java.io.StringWriter;
import java.security.GeneralSecurityException;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.SecureRandom;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.util.logging.Level;
import java.util.logging.Logger;
import jenkins.model.Jenkins;
import jenkins.security.CryptoConfidentialKey;
import org.apache.commons.io.FileUtils;
import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder;
import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter;
import org.bouncycastle.openssl.PEMKeyPair;
import org.bouncycastle.openssl.PEMParser;
import org.bouncycastle.openssl.PEMWriter;
/**
* Captures the RSA key pair that identifies/authenticates this instance.
* Useful wherever we need to authenticate Jenkins against something external to it ({@code sshd-module} for example).
*
* @author Kohsuke Kawaguchi
*/
public class InstanceIdentity {
private final KeyPair keys;
public InstanceIdentity() throws IOException {
this(new File(Jenkins.getInstance().getRootDir(), "identity.key.enc"), new File(Jenkins.getInstance().getRootDir(), "identity.key"));
}
public InstanceIdentity(File keyFile) throws IOException {
this(keyFile, null);
}
InstanceIdentity(File keyFile, File oldKeyFile) throws IOException {
KeyPairGenerator gen;
try {
gen = KeyPairGenerator.getInstance("RSA");
} catch (Exception e) {
throw new AssertionError(e); // RSA algorithm should be always there
}
if (oldKeyFile!= null && oldKeyFile.exists()) { //Process old KeyFile
keys = read(null, oldKeyFile, gen);
write(keys, keyFile);
Util.deleteFile(oldKeyFile);
} else { //Process KeyFile
KeyPair tempKeys = read(keyFile, null, gen);
if(tempKeys!=null) { //Assign the KeyPair in case the read is successful
keys = tempKeys;
} else { //Generate a new KeyFile in case it doesn't exist or it is corrupted
gen.initialize(2048, new SecureRandom()); // going beyond 2048 requires crypto extension
keys = gen.generateKeyPair();
write(keys, keyFile);
}
}
}
private static KeyPair read(File keyFile, File oldKeyFile, KeyPairGenerator gen) throws IOException {
// a hack to work around a problem in PEMParser (or JCE, depending on how you look at it.)
// I can't just pass in null as a provider --- JCE doesn't default to the default provider,
// but it chokes that I passed in null. Urgh.
byte[] enc;
KeyPair keyPair = null;
Reader in;
String provider = gen.getProvider().getName();
if (keyFile != null) { //Get the Reader for keyFile and handle if corrupted
try {
enc = FileUtils.readFileToByteArray(keyFile);
in = new StringReader(new String(KEY.decrypt().doFinal(enc), "UTF-8"));
PEMParser r = new PEMParser(in);
Object o = r.readObject();
JcaPEMKeyConverter converter = new JcaPEMKeyConverter().setProvider(provider);
keyPair = converter.getKeyPair((PEMKeyPair) o);
} catch (GeneralSecurityException x) {
LOGGER.log(Level.SEVERE, String.format("identity.key.enc is corrupted. Identity.key.enc will be deleted and a new one will be generated"), x);
return null;
} catch (IOException e) {
LOGGER.log(Level.SEVERE, String.format("identity.key.enc doesn't exist. New Identity.key.enc will be generated"), e);
return null;
}
} else if (oldKeyFile != null) { //Get the Reader for oldKeyFile
in = new FileReader(oldKeyFile);
PEMParser r = new PEMParser(in);
Object o = r.readObject();
JcaPEMKeyConverter converter = new JcaPEMKeyConverter().setProvider(provider);
keyPair = converter.getKeyPair((PEMKeyPair) o);
}
return keyPair;
}
private static void write(KeyPair keys, File keyFile) throws IOException {
StringWriter sw = new StringWriter();
PEMWriter w = new PEMWriter(sw);
try {
w.writeObject(keys);
} finally {
w.close();
}
OutputStream os = new FileOutputStream(keyFile);
try {
os.write(KEY.encrypt().doFinal(sw.toString().getBytes("UTF-8")));
} catch (GeneralSecurityException x) {
throw new IOException(x);
} finally {
os.close();
}
makeReadOnly(keyFile);
}
// Would be neater to actually write an encrypted RSA key in PEM format, but could not wrangle BouncyCastle into reading the result, so just doing generic encryption instead:
private static final CryptoConfidentialKey KEY = new CryptoConfidentialKey(InstanceIdentity.class, "KEY");
/**
* Try to make the key read-only.
*/
private static void makeReadOnly(File keyFile) {
try {
new FilePath(keyFile).chmod(0600);
} catch (Throwable e) {
LOGGER.log(Level.WARNING, "Failed to make read only: "+keyFile,e);
}
}
public RSAPublicKey getPublic() {
return (RSAPublicKey)keys.getPublic();
}
public RSAPrivateKey getPrivate() {
return (RSAPrivateKey)keys.getPrivate();
}
public static InstanceIdentity get() {
return Jenkins.getInstance().getExtensionList(PageDecorator.class).get(PageDecoratorImpl.class).identity;
}
private static final Logger LOGGER = Logger.getLogger(InstanceIdentity.class.getName());
}
././@LongLink 0000644 0000000 0000000 00000000201 00000000000 011574 L ustar root root instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/modules/instance_identity/PageDecoratorImpl.java instance-identity-module-instance-identity-1.5/src/main/java/org/jenkinsci/main/modules/instance_ide0000644 0000000 0000000 00000001333 12616216150 032570 0 ustar root root package org.jenkinsci.main.modules.instance_identity;
import hudson.Extension;
import hudson.model.PageDecorator;
import org.apache.commons.codec.binary.Base64;
import java.io.IOException;
import java.security.interfaces.RSAPublicKey;
/**
* Advertises the public key.
*
* @author Kohsuke Kawaguchi
*/
@Extension
public class PageDecoratorImpl extends PageDecorator {
public final InstanceIdentity identity;
public PageDecoratorImpl() throws IOException {
super(PageDecoratorImpl.class);
this.identity = new InstanceIdentity();
}
public String getEncodedPublicKey() {
RSAPublicKey key = identity.getPublic();
return new String(Base64.encodeBase64(key.getEncoded()));
}
}
instance-identity-module-instance-identity-1.5/src/main/resources/ 0000755 0000000 0000000 00000000000 12616216150 024151 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/resources/org/ 0000755 0000000 0000000 00000000000 12616216150 024740 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/ 0000755 0000000 0000000 00000000000 12616216150 026715 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/ 0000755 0000000 0000000 00000000000 12616216150 027641 5 ustar root root instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/modules/ 0000755 0000000 0000000 00000000000 12616216150 031311 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000160 00000000000 011600 L ustar root root instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/modules/instance_identity/ instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/modules/instanc0000755 0000000 0000000 00000000000 12616216150 032671 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000202 00000000000 011575 L ustar root root instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/modules/instance_identity/PageDecoratorImpl/ instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/modules/instanc0000755 0000000 0000000 00000000000 12616216150 032671 5 ustar root root ././@LongLink 0000644 0000000 0000000 00000000223 00000000000 011600 L ustar root root instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/modules/instance_identity/PageDecoratorImpl/httpHeaders.jelly instance-identity-module-instance-identity-1.5/src/main/resources/org/jenkinsci/main/modules/instanc0000644 0000000 0000000 00000000215 12616216150 032671 0 ustar root root
instance-identity-module-instance-identity-1.5/LICENSE.txt 0000644 0000000 0000000 00000002110 12616216150 022241 0 ustar root root The MIT License
Copyright (c) 2011-, CloudBees, Inc. and contributors
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.
instance-identity-module-instance-identity-1.5/.gitignore 0000644 0000000 0000000 00000000036 12616216150 022413 0 ustar root root target
*.iml
*.iws
*.ipr
work