/* Copyright 2004, 2005, 2006 Acegi Technology Pty Limited
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.springframework.security.providers.cas.ticketvalidator;

import org.springframework.security.providers.cas.TicketValidator;
import org.springframework.security.ui.cas.ServiceProperties;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;

import org.springframework.beans.factory.InitializingBean;
import org.springframework.util.Assert;
import org.springframework.util.StringUtils;

import java.io.File;


/**
 * Convenience abstract base for <code>TicketValidator</code>s.
 *
 * @author Ben Alex
 * @version $Id$
 */
public abstract class AbstractTicketValidator implements TicketValidator, InitializingBean {
    //~ Static fields/initializers =====================================================================================

    private static final Log logger = LogFactory.getLog(AbstractTicketValidator.class);

    //~ Instance fields ================================================================================================

    private ServiceProperties serviceProperties;
    private String casValidate;
    private String trustStore;

    //~ Methods ========================================================================================================

    public void afterPropertiesSet() throws Exception {
        Assert.hasLength(casValidate, "A casValidate URL must be set");
        Assert.notNull(serviceProperties, "serviceProperties must be specified");

        if (StringUtils.hasLength(trustStore)) {
            logger.info("Setting system property 'javax.net.ssl.trustStore' to value [" + trustStore + "]");

            if (! (new File(trustStore)).exists()) {
                throw new IllegalArgumentException("Parameter 'trustStore' file does not exist at " + trustStore);
            }

            System.setProperty("javax.net.ssl.trustStore", trustStore);
        }
    }

    /**
     * Mandatory URL to CAS' proxy ticket valiation service.<P>This is usually something like
     * <code>https://www.mycompany.com/cas/proxyValidate</code>.</p>
     *
     * @return the CAS proxy ticket validation URL
     */
    public String getCasValidate() {
        return casValidate;
    }

    public ServiceProperties getServiceProperties() {
        return serviceProperties;
    }

    /**
     * Optional property which will be used to set the system property <code>javax.net.ssl.trustStore</code>.
     *
     * @return the <code>javax.net.ssl.trustStore</code> that will be set during bean initialization, or
     *         <code>null</code> to leave the system property unchanged
     */
    public String getTrustStore() {
        return trustStore;
    }

    public void setCasValidate(String casValidate) {
        this.casValidate = casValidate;
    }

    public void setServiceProperties(ServiceProperties serviceProperties) {
        this.serviceProperties = serviceProperties;
    }

    public void setTrustStore(String trustStore) {
        this.trustStore = trustStore;
    }
}

@@ -1717,16 +1717,50 @@
 stStore;
+%0A    private String trustPassword;
 %0A%0A    //
@@ -2509,16 +2509,162 @@
        %7D
+%0A%0A        if (StringUtils.hasLength(trustPassword)) %7B%0A            System.setProperty(%22javax.net.ssl.trustStorePassword%22, trustPassword);%0A        %7D
 %0A    %7D%0A%0A
@@ -3729,24 +3729,24 @@
 ustStore) %7B%0A
-
         this
@@ -3776,11 +3776,281 @@
 e;%0A    %7D
+%0A%0A    /**%0A     * Optional property which causes the system property %3Ctt%3Ejavax.net.ssl.trustStorePassword%3C/tt%3E to be set.%0A     *%0A     * @param trustPassword%0A     */%0A    public void setTrustPassword(String trustPassword) %7B%0A        this.trustPassword = trustPassword;%0A    %7D
 %0A%7D%0A

Add a trustPassword to AbstractTicketValidator for use with password protected keystores (as in the sample application).