Export Key
The Java_TEKey_ExportKey is used to export a key.
Code Samples
See the Java environment settings for details on setting the project environment.
Java_TEKey_ExportKey
The following example demonstrates the use of the Java_TEKey_ExportKey. NOTE: Exporting a certificate user's key can only be done with an RSA Certificate User
/*****************************************************************************************
*
* Java_TEKey_ExportKey.java - NOTE: Only Use with RSA Certificate User
*
******************************************************************************************/
import tech.pisoft.teagent.TEAgentSSLMConnection;
import tech.pisoft.teagent.TEAgentException;
import java.io.FileInputStream;
import java.io.InputStream;
import java.io.FileNotFoundException;
import tech.pisoft.teagent.TEKey;
import tech.pisoft.teagent.TEAgentConnection;
import java.util.Vector;
import tech.pisoft.teadmin.Administration;
import tech.pisoft.teagent.TEAgentConnectionFactory;
import tech.pisoft.teagent.PAny;
import tech.pisoft.teconfig.AdminConfig;
import tech.pisoft.teconfig.REParameterInfo;
import tech.pisoft.teconfig.TEParameterInfo;
import tech.pisoft.teadmin.AdminException;
import tech.pisoft.teadmin.ACLEntry;
import tech.pisoft.teadmin.ACLInfo;
public class Java_TEKey_ExportKey {
private TEAgentConnection m_conn;
private Vector<TEKey.KeyPair> m_keyPairs;
private String m_strEncrypted1;
private String m_strEncrypted2;
private String m_strTTag1;
private String m_strTTag2;
private String m_strExportServer = "sampleserver";
private int m_nExportSystemId = 1912;
private int m_nPort = 8888;
private int m_nAdminPort = 8888;
private String m_strCertKeyFile2 = "C:\\Documents and Settings\\Administrator\\pkcs12_private_key2.pfx";
public void connect_native(String strServerName, int nPort, String strUsername, String strPasswd) throws TEAgentException
{
// Get a SSL connection instance
m_conn = TEAgentConnectionFactory.getInstance(TEAgentConnectionFactory.SECURE_USER_PASSWORD);
// Make connection
m_conn.open(strServerName, nPort, strUsername, strPasswd);
System.out.println("Connected to " + strServerName + " at " + nPort + " as " + strUsername);
}
public void connect_native_admin(String strServerName, int nPort, String strUsername, String strPasswd) throws TEAgentException
{
m_conn = TEAgentConnectionFactory.getInstance(TEAgentConnectionFactory.SECURE_USER_PASSWORD);
// Connect to server.
m_conn.open(strServerName, nPort, strUsername, strPasswd);
System.out.println("Connected to " + strServerName + " at " + nPort + " as " + strUsername);
}
public void connect_cert(String strServerName, int nPort, String strCertFile, String strPasswd) throws Exception
{
try {
// Get a connection for native user
TEAgentSSLMConnection sslmConn = new TEAgentSSLMConnection();
// Read pfx file
InputStream pfx = new FileInputStream(strCertFile);
// Make connection
sslmConn.open(strServerName, nPort, pfx, strPasswd);
m_conn = sslmConn;
System.out.println("Connected to " + strServerName + " at " + nPort + " as certificate user.");
}
catch(FileNotFoundException fnfex) {
throw new Exception(fnfex.getMessage());
}
}
public void disconnect() throws TEAgentException
{
// Close connection
m_conn.close();
System.out.println("Disconnected from server ");
}
/*
* Export a certificate user's own key with
* TeKey.exportKey(int ExportSystemId, int nCertPrincipalId, KeyPair keyPairs)
* Keys eported with system id and certificate principal id cannot be imported to a server.
*/
public void testExportKey1() throws TEAgentException, Exception {
// Encrypt something to generate keys
System.out.println();
System.out.println("Encrypt something to generate keys:");
connect_cert(m_strExportServer, m_nAdminPort, m_strCertKeyFile2, "ChangeMe-AdminPassword");
StringBuffer strbufTTag1 = new StringBuffer();
StringBuffer strbufTTag2 = new StringBuffer();
m_strEncrypted1 = Java_HelperFunctions.encryptSingle(m_conn, "Dummy data 1", strbufTTag1);
m_strEncrypted2 = Java_HelperFunctions.encryptSingle(m_conn, "Dummy data 2", strbufTTag2);
disconnect();
m_strTTag1 = strbufTTag1.toString();
m_strTTag2 = strbufTTag2.toString();
System.out.println("Keys were generated:");
System.out.println("m_strTTag1 = " + m_strTTag1);
System.out.println("m_strTTag2 = " + m_strTTag2);
// Prepare container
TEKey.KeyPair keyPair1 = new TEKey.KeyPair();
TEKey.KeyPair keyPair2 = new TEKey.KeyPair();
keyPair1.setHiddenLink(m_strTTag1);
keyPair2.setHiddenLink(m_strTTag2);
m_keyPairs = new Vector<TEKey.KeyPair>();
m_keyPairs.add(keyPair1);
m_keyPairs.add(keyPair2);
// Export keys
System.out.println();
System.out.println("Export keys:");
TEKey teKey = new TEKey();
connect_cert(m_strExportServer, m_nAdminPort, m_strCertKeyFile2, "ChangeMe-AdminPassword");
teKey.attachConnection(m_conn);
long nCertPrincipalId = m_conn.getLoginID();
teKey.exportKey(m_nExportSystemId, nCertPrincipalId, m_keyPairs);
teKey.detachConnection();
disconnect();
String exportedTTag1 = keyPair1.getHiddenLink();
String exportedKey1 = keyPair1.getKey();
String exportedTTag2 = keyPair2.getHiddenLink();
String exportedKey2 = keyPair2.getKey();
System.out.println("Keys were exported:");
System.out.println("exportedTTag1 = " + exportedTTag1);
System.out.println("exportedKey1 = " + exportedKey1);
System.out.println("exportedTTag2 = " + exportedTTag2);
System.out.println("exportedKey2 = " + exportedKey2);
}
/*
* Export a native user's key to a certificate user with
* TeKey.exportKey(int ExportSystemId, int nCertPrincipalId, KeyPair keyPairs)
* Each key comes back wrapped to the certificate user's public key.
*/
public void testExportKey2() throws TEAgentException, Exception {
// Get the certificate user's principal ID
System.out.println();
System.out.println("Get the certificate user's principal ID...");
connect_cert(m_strExportServer, m_nAdminPort, m_strCertKeyFile2, "ChangeMe-AdminPassword");
long nCertPrincipalId = m_conn.getLoginID();
System.out.println("nCertPrincipalId = " + nCertPrincipalId);
disconnect();
// Encrypt something to generate keys
System.out.println();
System.out.println("Encrypt something to generate keys:");
connect_native(m_strExportServer, m_nPort, "ls", "ChangeMe-AdminPassword");
StringBuffer strbufTTag1 = new StringBuffer();
StringBuffer strbufTTag2 = new StringBuffer();
m_strEncrypted1 = Java_HelperFunctions.encryptSingle(m_conn, "Dummy data 1", strbufTTag1);
m_strEncrypted2 = Java_HelperFunctions.encryptSingle(m_conn, "Dummy data 2", strbufTTag2);
disconnect();
m_strTTag1 = strbufTTag1.toString();
m_strTTag2 = strbufTTag2.toString();
System.out.println("Keys were generated:");
System.out.println("m_strTTag1 = " + m_strTTag1);
System.out.println("m_strTTag2 = " + m_strTTag2);
// Prepare container
TEKey.KeyPair keyPair1 = new TEKey.KeyPair();
TEKey.KeyPair keyPair2 = new TEKey.KeyPair();
keyPair1.setHiddenLink(m_strTTag1);
keyPair2.setHiddenLink(m_strTTag2);
m_keyPairs = new Vector<TEKey.KeyPair>();
m_keyPairs.add(keyPair1);
m_keyPairs.add(keyPair2);
// Export keys
System.out.println();
System.out.println("Export keys:");
TEKey teKey = new TEKey();
connect_native_admin(m_strExportServer, m_nAdminPort, "ls", "ChangeMe-AdminPassword");
// Add the certificate user to the ACL
addACLEntry(m_strTTag1, nCertPrincipalId);
addACLEntry(m_strTTag2, nCertPrincipalId);
teKey.attachConnection(m_conn);
teKey.exportKey(m_nExportSystemId, nCertPrincipalId, m_keyPairs);
teKey.detachConnection();
disconnect();
System.out.println("Keys were exported:");
System.out.println("exportedTTag1 = " + keyPair1.getHiddenLink());
System.out.println("exportedKey1 length = " + keyPair1.getRawKey().length);
System.out.println("exportedTTag2 = " + keyPair2.getHiddenLink());
System.out.println("exportedKey2 length = " + keyPair2.getRawKey().length);
}
public void addACLEntry(String strTTag, long nCertPrincipalId) throws TEAgentException, AdminException, Exception
{
Administration admin = new Administration();
admin.attachConnection(m_conn);
// User must be owner of the T-tag.
ACLInfo info = admin.getACL(strTTag);
if( info == null )
throw new Exception("ACL info not found !");
System.out.println("");
System.out.println("ACL info got:");
System.out.println(" " + info.toString());
ACLInfo info2 = new ACLInfo();
info2.setACLID( info.getACLID() );
ACLEntry ent2add = new ACLEntry( info2 );
ent2add.setPrincipalID(nCertPrincipalId);
ent2add.setFlag(ACLEntry.ACL_RIGHT_WRITE | ACLEntry.ACL_RIGHT_READ); // ACL right
ent2add.setMaxUsage(ACLEntry.USAGE_NO_LIMIT);
ent2add.setStartTime(0);
ent2add.setEndTime(0);
ent2add.setSystemID(admin.getSystemID());
ent2add.setUserRight(0); // Reserved
admin.updateACL(Administration.ADD_ACLENTRY, info2); // add ACL entry to ACL info.
System.out.println("ACL entry was added to ACL info");
// Get updated info
info = admin.getACL(strTTag);
if( info == null )
throw new Exception("ACL info not found !");
System.out.println("");
System.out.println("ACL info got:");
System.out.println(" " + info.toString());
admin.detachConnection();
}
public static void main(String[] args)
{
try
{
Java_TEKey_ExportKey java_test = new Java_TEKey_ExportKey();
java_test.testExportKey1();
java_test.testExportKey2();
}
catch (TEAgentException te)
{
te.printStackTrace();
}
catch (Exception ex)
{
ex.printStackTrace();
}
}
}
/**************************************************************************************
Encrypt something to generate keys:
Connected to sampleserver at 8888 as certificate user.
Disconnected from server
Keys were generated:
m_strTTag1 = AAAHeLYYdj7b15vZoUNTTpTfg7CHPWfhKaddIYUS0hoMNnAkbPcPkQ==
m_strTTag2 = AAAHeKSYT0G4f60ik0ddkcWby26G6Z7cfWxJDVTHcLeHJiM43lFRqQ==
Export keys:
Connected to sampleserver at 8888 as certificate user.
Disconnected from server
Keys were exported:
exportedTTag1 = AAAHeLYYdj7b15vZoUNTTpTfg7CHPWfhKaddIYUS0hoMNnAkbPcPkQ==
exportedKey1 = Ef2Scl7RBF3zjNro5hFnF3yqfB57QwhwFVzwdbjJTyG0gjthE7b30jqr4dL/y0YvmVvUsJBAV7+7IUeCwDeE9i/GAUVm9bA7/CFzvwen7ij+U8vOvDXRN67RzEUmgOoI+se3A/WFx4hQGsYP23x3cEMoMQtNECeu/99x37zH95A=
exportedTTag2 = AAAHeKSYT0G4f60ik0ddkcWby26G6Z7cfWxJDVTHcLeHJiM43lFRqQ==
exportedKey2 = kNc8Fdr6iYr7Q9/senGQnNpFjndlI2FiGrNXGvC8gIPPaxZVZH7LtLeJSqTVuc5NlsAN/FqtoHvUXPs4PP1oYez9FnmHlUEmGc8UHVJF4XhuWQlRblPJQjplDwEtRcHF8G21uw4Uqvpb5p3S5NcCNNtkDkvruS5XWJq4bjbpEEQ=
Get the certificate user's principal ID...
Connected to sampleserver at 8888 as certificate user.
nCertPrincipalId = 3002
Disconnected from server
Encrypt something to generate keys:
Connected to sampleserver at 8888 as ls
Disconnected from server
Keys were generated:
m_strTTag1 = AAAHePmLHUwyCl/g7Hwhg/zLt8JLpOOz4TDCrDch34vGrXFeEYnsAA==
m_strTTag2 = AAAHeChWDFW8DYmEhzSe+yA1OIVut7QsGOtTA83p+4gStfLYEncHcQ==
Export keys:
Connected to sampleserver at 8888 as ls
ACL info got:
ACLInfo:
<T-tag: AAAHePmLHUwyCl/g7Hwhg/zLt8JLpOOz4TDCrDch34vGrXFeEYnsAA== >
<Create Time: 1196351572 >
<ACLID: 22 >
<Number of ACLEntries: 1 >
ACLEntry:
<Principal ID: 3001 >
<Creation Time: 1196351572 >
<End Time: 0 >
<Start Time: 0 >
<Max Usage: -1 >
<ACL Right: 7 >
<ACLID: 22 >
<User Rights: 0 >
ACL entry was added to ACL info
ACL info got:
ACLInfo:
<T-tag: AAAHePmLHUwyCl/g7Hwhg/zLt8JLpOOz4TDCrDch34vGrXFeEYnsAA== >
<Create Time: 1196351572 >
<ACLID: 22 >
<Number of ACLEntries: 2 >
ACLEntry:
<Principal ID: 3001 >
<Creation Time: 1196351572 >
<End Time: 0 >
<Start Time: 0 >
<Max Usage: -1 >
<ACL Right: 7 >
<ACLID: 22 >
<User Rights: 0 >
ACLEntry:
<Principal ID: 3002 >
<Creation Time: 1196351573 >
<End Time: 0 >
<Start Time: 0 >
<Max Usage: -1 >
<ACL Right: 3 >
<ACLID: 22 >
<User Rights: 0 >
ACL info got:
ACLInfo:
<T-tag: AAAHeChWDFW8DYmEhzSe+yA1OIVut7QsGOtTA83p+4gStfLYEncHcQ== >
<Create Time: 1196351573 >
<ACLID: 23 >
<Number of ACLEntries: 1 >
ACLEntry:
<Principal ID: 3001 >
<Creation Time: 1196351573 >
<End Time: 0 >
<Start Time: 0 >
<Max Usage: -1 >
<ACL Right: 7 >
<ACLID: 23 >
<User Rights: 0 >
ACL entry was added to ACL info
ACL info got:
ACLInfo:
<T-tag: AAAHeChWDFW8DYmEhzSe+yA1OIVut7QsGOtTA83p+4gStfLYEncHcQ== >
<Create Time: 1196351573 >
<ACLID: 23 >
<Number of ACLEntries: 2 >
ACLEntry:
<Principal ID: 3001 >
<Creation Time: 1196351573 >
<End Time: 0 >
<Start Time: 0 >
<Max Usage: -1 >
<ACL Right: 7 >
<ACLID: 23 >
<User Rights: 0 >
ACLEntry:
<Principal ID: 3002 >
<Creation Time: 1196351573 >
<End Time: 0 >
<Start Time: 0 >
<Max Usage: -1 >
<ACL Right: 3 >
<ACLID: 23 >
<User Rights: 0 >
Disconnected from server
Keys were exported:
exportedTTag1 = AAAHePmLHUwyCl/g7Hwhg/zLt8JLpOOz4TDCrDch34vGrXFeEYnsAA==
exportedKey1 length = 128
exportedTTag2 = AAAHeChWDFW8DYmEhzSe+yA1OIVut7QsGOtTA83p+4gStfLYEncHcQ==
exportedKey2 length = 128
**************************************************************************************/