private void pushMessage(String msg, String key, String uuid, String version)
throws C3PROException {
setCredentials();
// We send the encrypted message to the Queue. We Base64 encode it
SendMessageRequest mse = new SendMessageRequest(AppConfig.getProp(AppConfig.AWS_SQS_URL), msg);
System.out.println(AppConfig.getProp(AppConfig.AWS_SQS_URL));
// Add SQS Elem metadata: encrypted symmetric key
MessageAttributeValue atr = new MessageAttributeValue();
atr.setStringValue(key);
atr.setDataType("String");
mse.addMessageAttributesEntry(AppConfig.getProp(AppConfig.SECURITY_METADATAKEY), atr);
// Add SQS Elem metadata: public key uuid
atr = new MessageAttributeValue();
atr.setStringValue(uuid);
atr.setDataType("String");
mse.addMessageAttributesEntry(AppConfig.getProp(AppConfig.SECURITY_METADATAKEYID), atr);
atr = new MessageAttributeValue();
atr.setStringValue(version);
atr.setDataType("String");
mse.addMessageAttributesEntry(AppConfig.getProp(AppConfig.FHIR_METADATA_VERSION), atr);
try {
this.sqs.sendMessage(mse);
} catch (Exception e) {
e.printStackTrace();
throw new C3PROException(e.getMessage(), e);
}
}
/**
* Generates a secret symmetric key
*
* @return The generated key
* @throws C3PROException In case an error occurs during the generation
*/
public SecretKey generateSecretKey() throws C3PROException {
SecretKey key = null;
try {
KeyGenerator generator =
KeyGenerator.getInstance(AppConfig.getProp(AppConfig.SECURITY_PRIVATEKEY_BASEALG));
int size = Integer.parseInt(AppConfig.getProp(AppConfig.SECURITY_PRIVATEKEY_SIZE));
SecureRandom random = new SecureRandom();
generator.init(size * 8, random);
key = generator.generateKey();
} catch (Exception e) {
throw new C3PROException(e.getMessage(), e);
}
return key;
}
/**
* Encrypts the given byte array using the provided public key using RSA
*
* @param key The public key
* @param text The message to encrypt
* @return The encrypted message
* @throws C3PROException In case an error occurs during the encryption
*/
public byte[] encryptRSA(PublicKey key, byte[] text) throws C3PROException {
Cipher cipher = null;
byte[] out = null;
try {
cipher = Cipher.getInstance(AppConfig.getProp(AppConfig.SECURITY_PUBLICKEY_ALG));
cipher.init(Cipher.ENCRYPT_MODE, key);
out = cipher.doFinal(text);
} catch (Exception e) {
throw new C3PROException(e.getMessage(), e);
}
return out;
}
/**
* Sends an encrypted message to the SQS (See documentation)
*
* @param resource The resource
* @param publicKey The public key used to encrypt the symetric key
* @param UUIDKey the if of the key
* @param version The version
* @throws C3PROException In case access to SQS is not possible
*/
@Override
public void sendMessageEncrypted(
String resource, PublicKey publicKey, String UUIDKey, String version) throws C3PROException {
setCredentials();
// Generate the symetric private key to encrypt the message
SecretKey symetricKey = generateSecretKey();
byte[] encKeyToSend = null;
byte[] encResource = null;
Cipher cipher;
try {
// We encrypt the symetric key using the public available key
int size = Integer.parseInt(AppConfig.getProp(AppConfig.SECURITY_PRIVATEKEY_SIZE));
// SecureRandom random = new SecureRandom();
// IvParameterSpec iv = new IvParameterSpec(random.generateSeed(16));
encKeyToSend = encryptRSA(publicKey, symetricKey.getEncoded());
// We encrypt the message
cipher = Cipher.getInstance(AppConfig.getProp(AppConfig.SECURITY_PRIVATEKEY_ALG));
// cipher.init(Cipher.ENCRYPT_MODE, symmetricKey, iv);
cipher.init(Cipher.ENCRYPT_MODE, symetricKey, new IvParameterSpec(new byte[size]));
encResource = cipher.doFinal(resource.getBytes(AppConfig.UTF));
} catch (UnsupportedEncodingException e) {
throw new C3PROException(e.getMessage(), e);
} catch (InvalidKeyException e) {
throw new C3PROException(e.getMessage(), e);
} catch (Exception e) {
throw new C3PROException(e.getMessage(), e);
}
pushMessage(
Base64.encodeBase64String(encResource),
Base64.encodeBase64String(encKeyToSend),
UUIDKey,
version);
}
private void setCredentials() throws C3PROException {
if (this.sqs == null) {
AWSCredentials credentials = null;
try {
System.setProperty("aws.profile", AppConfig.getProp(AppConfig.AWS_SQS_PROFILE));
System.out.println(AppConfig.getProp(AppConfig.AWS_SQS_PROFILE));
credentials = new ProfileCredentialsProvider().getCredentials();
} catch (Exception e) {
e.printStackTrace();
throw new C3PROException(
"Cannot load the credentials from the credential profiles file. "
+ "Please make sure that the credentials file is at the correct "
+ "location (~/.aws/credentials), and is in valid format.",
e);
}
this.sqs = new AmazonSQSClient(credentials);
System.out.println(AppConfig.getProp(AppConfig.AWS_SQS_REGION));
Region usWest2 =
Region.getRegion(Regions.fromName(AppConfig.getProp(AppConfig.AWS_SQS_REGION)));
sqs.setRegion(usWest2);
}
}
/**
* Sends a message to the SQS
*
* @param resource The payload
* @throws C3PROException In case access to SQS is not possible
*/
@Override
public void sendMessage(String resource) throws C3PROException {
setCredentials();
this.sqs.sendMessage(
new SendMessageRequest(AppConfig.getProp(AppConfig.AWS_SQS_URL), resource));
}