Metacat

import java.security.PrivateKey;

import java.security.cert.X509Certificate;

import org.apache.http.HttpResponse;

import org.apache.http.conn.scheme.Scheme;

import org.apache.http.conn.ssl.SSLSocketFactory;

import org.dataone.client.RestClient;

import org.dataone.client.auth.CertificateManager;

import org.dataone.service.types.v1.Session;

		logReplication.info("ReplicationService.getURLContent - Before sending request to: " + u.toString());

		// use httpclient to set up SSL

		RestClient client = getSSLClient();

		HttpResponse response = client.doGetRequest(u.toString());

		// get the response content

		InputStream input = response.getEntity().getContent();

		logReplication.info("ReplicationService.getURLContent - After getting response from: " + u.toString());

	/**

	 * Sets up an HttpClient with SSL connection.

	 * Sends client certificate to the server when doing the request.

	 * @return

	 */

	private static RestClient getSSLClient() {

		RestClient client = new RestClient();

		// set up this server's client identity

		String subject = null;

		try {

			X509Certificate certificate = CertificateManager.getInstance().loadCertificateFromFile(PropertyService.getProperty("replication.certificate.file"));

			PrivateKey key = CertificateManager.getInstance().loadPrivateKeyFromFile(PropertyService.getProperty("replication.privatekey.file"));

			subject = CertificateManager.getInstance().getSubjectDN(certificate);

			CertificateManager.getInstance().registerCertificate(subject, certificate, key);

		} catch (Exception e) {

			// this is pretty much required for replication communication

			logReplication.warn("Could find server's client certificate/private key: " + e.getMessage());

		}

		SSLSocketFactory socketFactory = null;

		try {

			socketFactory = CertificateManager.getInstance().getSSLSocketFactory(subject);

		} catch (FileNotFoundException e) {

			// these are somewhat expected for anonymous client use

			logReplication.warn("Could not set up SSL connection for client - likely because the certificate could not be located: " + e.getMessage());

		} catch (Exception e) {

			// this is likely more severe

			logReplication.warn("Funky SSL going on: " + e.getClass() + ":: " + e.getMessage());

		}

		try {

			//443 is the default port, this value is overridden if explicitly set in the URL

			Scheme sch = new Scheme("https", 443, socketFactory);

			client.getHttpClient().getConnectionManager().getSchemeRegistry().register(sch);

		} catch (Exception e) {

			// this is likely more severe

			logReplication.error("Failed to set up SSL connection for client. Continuing. " + e.getClass() + ":: " + e.getMessage(), e);

		}

		return client;

	}