libmongocrypt-helper 1.12.0.0.1001 → 1.13.2.0.1001

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/MongoKeyDecryptor.java

@@ -1,76 +0,0 @@
-/*
- * Copyright 2019-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package com.mongodb.crypt.capi;
-
-import java.nio.ByteBuffer;
-
-/**
- * An interface representing a key decryption operation using a key management service.
- */
-public interface MongoKeyDecryptor {
-
-    /**
-     * Gets the name of the KMS provider, e.g. "aws" or "kmip"
-     *
-     * @return the KMS provider name
-     */
-    String getKmsProvider();
-
-    /**
-     * Gets the host name of the key management service.
-     *
-     * @return the host name
-     */
-    String getHostName();
-
-    /**
-     * Gets the message to send to the key management service.
-     *
-     * <p>
-     * Clients should call this method first, and send the message on a TLS connection to a configured KMS server.
-     * </p>
-     *
-     * @return the message to send
-     */
-    ByteBuffer getMessage();
-
-    /**
-     * Gets the number of bytes that should be received from the KMS server.
-     *
-     * <p>
-     * After sending the message to the KMS server, clients should call this method in a loop, receiving {@code bytesNeeded} from
-     * the KMS server and feeding those bytes to this decryptor, until {@code bytesNeeded} is 0.
-     * </p>
-     *
-     * @return the actual number of bytes that clients should be prepared receive
-     */
-    int bytesNeeded();
-
-    /**
-     * Feed the received bytes to the decryptor.
-     *
-     * <p>
-     * After sending the message to the KMS server, clients should call this method in a loop, receiving the number of bytes indicated by
-     * a call to {@link #bytesNeeded()} from the KMS server and feeding those bytes to this decryptor, until {@link #bytesNeeded()}
-     * returns 0.
-     * </p>
-     *
-     * @param bytes the received bytes
-     */
-    void feed(ByteBuffer bytes);
-}

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/MongoKeyDecryptorImpl.java

@@ -1,105 +0,0 @@
-/*
- * Copyright 2019-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package com.mongodb.crypt.capi;
-
-import com.mongodb.crypt.capi.CAPI.mongocrypt_binary_t;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_kms_ctx_t;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_status_t;
-import com.sun.jna.Pointer;
-import com.sun.jna.ptr.PointerByReference;
-
-import java.nio.ByteBuffer;
-
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_binary_destroy;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_binary_new;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_kms_ctx_bytes_needed;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_kms_ctx_endpoint;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_kms_ctx_feed;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_kms_ctx_get_kms_provider;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_kms_ctx_message;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_kms_ctx_status;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_status;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_status_destroy;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_status_new;
-import static com.mongodb.crypt.capi.CAPIHelper.toBinary;
-import static com.mongodb.crypt.capi.CAPIHelper.toByteBuffer;
-import static org.bson.assertions.Assertions.notNull;
-
-class MongoKeyDecryptorImpl implements MongoKeyDecryptor {
-    private final mongocrypt_kms_ctx_t wrapped;
-
-    MongoKeyDecryptorImpl(final mongocrypt_kms_ctx_t wrapped) {
-        notNull("wrapped", wrapped);
-        this.wrapped = wrapped;
-    }
-
-    @Override
-    public String getKmsProvider() {
-        return mongocrypt_kms_ctx_get_kms_provider(wrapped, null).toString();
-    }
-
-    @Override
-    public String getHostName() {
-        PointerByReference hostNamePointerByReference = new PointerByReference();
-        boolean success = mongocrypt_kms_ctx_endpoint(wrapped, hostNamePointerByReference);
-        if (!success) {
-            throwExceptionFromStatus();
-        }
-        Pointer hostNamePointer = hostNamePointerByReference.getValue();
-        return hostNamePointer.getString(0);
-    }
-
-    @Override
-    public ByteBuffer getMessage() {
-        mongocrypt_binary_t binary = mongocrypt_binary_new();
-
-        try {
-            boolean success = mongocrypt_kms_ctx_message(wrapped, binary);
-            if (!success) {
-                throwExceptionFromStatus();
-            }
-            return toByteBuffer(binary);
-        } finally {
-            mongocrypt_binary_destroy(binary);
-        }
-    }
-
-    @Override
-    public int bytesNeeded() {
-        return mongocrypt_kms_ctx_bytes_needed(wrapped);
-    }
-
-    @Override
-    public void feed(final ByteBuffer bytes) {
-        try (BinaryHolder binaryHolder = toBinary(bytes)) {
-            boolean success = mongocrypt_kms_ctx_feed(wrapped, binaryHolder.getBinary());
-            if (!success) {
-                throwExceptionFromStatus();
-            }
-        }
-    }
-
-    private void throwExceptionFromStatus() {
-        mongocrypt_status_t status = mongocrypt_status_new();
-        mongocrypt_kms_ctx_status(wrapped, status);
-        MongoCryptException e = new MongoCryptException(status);
-        mongocrypt_status_destroy(status);
-        throw e;
-    }
-
-}

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/MongoLocalKmsProviderOptions.java

@@ -1,83 +0,0 @@
-/*
- * Copyright 2019-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package com.mongodb.crypt.capi;
-
-import java.nio.ByteBuffer;
-
-import static org.bson.assertions.Assertions.notNull;
-
-/**
- * The options for configuring a local KMS provider.
- */
-public class MongoLocalKmsProviderOptions {
-
-    private final ByteBuffer localMasterKey;
-
-    /**
-     * Construct a builder for the options
-     *
-     * @return the builder
-     */
-    public static Builder builder() {
-        return new Builder();
-    }
-
-    /**
-     * Gets the local master key
-     *
-     * @return the local master key
-     */
-    public ByteBuffer getLocalMasterKey() {
-        return localMasterKey;
-    }
-
-    /**
-     * The builder for the options
-     */
-    public static class Builder {
-        private ByteBuffer localMasterKey;
-
-        private Builder() {
-        }
-
-        /**
-         * Sets the local master key.
-         *
-         * @param localMasterKey the local master key
-         * @return this
-         */
-        public Builder localMasterKey(final ByteBuffer localMasterKey) {
-            this.localMasterKey = localMasterKey;
-            return this;
-        }
-
-        /**
-         * Build the options.
-         *
-         * @return the options
-         */
-        public MongoLocalKmsProviderOptions build() {
-            return new MongoLocalKmsProviderOptions(this);
-        }
-    }
-
-    private MongoLocalKmsProviderOptions(final Builder builder) {
-        this.localMasterKey = notNull("Local KMS provider localMasterKey", builder.localMasterKey);
-
-    }
-}

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/MongoRewrapManyDataKeyOptions.java

@@ -1,104 +0,0 @@
-/*
- * Copyright 2008-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package com.mongodb.crypt.capi;
-
-import org.bson.BsonDocument;
-
-/**
- * The rewrap many data key options
- *
- * <p>
- *     The masterKey document MUST have the fields corresponding to the given provider as specified in masterKey.
- * </p>
- *
- * @since 1.5
- */
-public class MongoRewrapManyDataKeyOptions {
-
-    private final String provider;
-    private final BsonDocument masterKey;
-
-    /**
-     * Options builder
-     */
-    public static class Builder {
-        private String provider;
-        private BsonDocument masterKey;
-
-        /**
-         * The provider
-         *
-         * @param provider the provider
-         * @return this
-         */
-        public Builder provider(final String provider) {
-            this.provider = provider;
-            return this;
-        }
-
-        /**
-         * Add the master key.
-         *
-         * @param masterKey the master key
-         * @return this
-         */
-        public Builder masterKey(final BsonDocument masterKey) {
-            this.masterKey = masterKey;
-            return this;
-        }
-
-        /**
-         * Build the options.
-         *
-         * @return the options
-         */
-        public MongoRewrapManyDataKeyOptions build() {
-            return new MongoRewrapManyDataKeyOptions(this);
-        }
-    }
-
-    /**
-     * Create a builder for the options.
-     *
-     * @return the builder
-     */
-    public static Builder builder() {
-        return new Builder();
-    }
-
-    /**
-     * @return the provider name
-     */
-    public String getProvider() {
-        return provider;
-    }
-
-    /**
-     * Gets the master key for the data key.
-     *
-     * @return the master key
-     */
-    public BsonDocument getMasterKey() {
-        return masterKey;
-    }
-
-    private MongoRewrapManyDataKeyOptions(final Builder builder) {
-        provider = builder.provider;
-        masterKey = builder.masterKey;
-    }
-}
-

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/SLF4JLogger.java

@@ -1,110 +0,0 @@
-
-/*
- * Copyright 2008-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package com.mongodb.crypt.capi;
-
-import org.slf4j.LoggerFactory;
-
-class SLF4JLogger implements Logger {
-
-    private final org.slf4j.Logger delegate;
-
-    SLF4JLogger(final String name) {
-        this.delegate = LoggerFactory.getLogger(name);
-    }
-
-    @Override
-    public String getName() {
-        return delegate.getName();
-    }
-
-    @Override
-    public boolean isTraceEnabled() {
-        return delegate.isTraceEnabled();
-    }
-
-    @Override
-    public void trace(final String msg) {
-        delegate.trace(msg);
-    }
-
-    @Override
-    public void trace(final String msg, final Throwable t) {
-        delegate.trace(msg, t);
-    }
-
-    @Override
-    public boolean isDebugEnabled() {
-        return delegate.isDebugEnabled();
-    }
-
-    @Override
-    public void debug(final String msg) {
-        delegate.debug(msg);
-    }
-
-    @Override
-    public void debug(final String msg, final Throwable t) {
-        delegate.debug(msg, t);
-    }
-
-    @Override
-    public boolean isInfoEnabled() {
-        return delegate.isInfoEnabled();
-    }
-
-    @Override
-    public void info(final String msg) {
-        delegate.info(msg);
-    }
-
-    @Override
-    public void info(final String msg, final Throwable t) {
-        delegate.info(msg, t);
-    }
-
-    @Override
-    public boolean isWarnEnabled() {
-        return delegate.isWarnEnabled();
-    }
-
-    @Override
-    public void warn(final String msg) {
-        delegate.warn(msg);
-    }
-
-    @Override
-    public void warn(final String msg, final Throwable t) {
-        delegate.warn(msg, t);
-    }
-
-    @Override
-    public boolean isErrorEnabled() {
-        return delegate.isErrorEnabled();
-    }
-
-    @Override
-    public void error(final String msg) {
-        delegate.error(msg);
-    }
-
-    @Override
-    public void error(final String msg, final Throwable t) {
-        delegate.error(msg, t);
-    }
-}

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/SecureRandomCallback.java

@@ -1,51 +0,0 @@
-/*
- * Copyright 2008-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package com.mongodb.crypt.capi;
-
-import com.mongodb.crypt.capi.CAPI.cstring;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_binary_t;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_random_fn;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_status_t;
-import com.sun.jna.Pointer;
-
-import java.security.SecureRandom;
-
-import static com.mongodb.crypt.capi.CAPI.MONGOCRYPT_STATUS_ERROR_CLIENT;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_status_set;
-import static com.mongodb.crypt.capi.CAPIHelper.writeByteArrayToBinary;
-
-class SecureRandomCallback implements mongocrypt_random_fn {
-    private final SecureRandom secureRandom;
-
-    SecureRandomCallback(final SecureRandom secureRandom) {
-        this.secureRandom = secureRandom;
-    }
-
-    @Override
-    public boolean random(final Pointer ctx, final mongocrypt_binary_t out, final int count, final mongocrypt_status_t status) {
-        try {
-            byte[] randomBytes = new byte[count];
-            secureRandom.nextBytes(randomBytes);
-            writeByteArrayToBinary(out, randomBytes);
-            return true;
-        } catch (Exception e) {
-            mongocrypt_status_set(status, MONGOCRYPT_STATUS_ERROR_CLIENT, 0, new cstring(e.toString()), -1);
-            return false;
-        }
-    }
-}

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/SigningRSAESPKCSCallback.java

@@ -1,76 +0,0 @@
-/*
- * Copyright 2008-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package com.mongodb.crypt.capi;
-
-import com.mongodb.crypt.capi.CAPI.cstring;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_binary_t;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_hmac_fn;
-import com.mongodb.crypt.capi.CAPI.mongocrypt_status_t;
-import com.sun.jna.Pointer;
-
-import javax.crypto.Mac;
-import javax.crypto.spec.SecretKeySpec;
-
-import java.security.InvalidKeyException;
-import java.security.KeyFactory;
-import java.security.NoSuchAlgorithmException;
-import java.security.PrivateKey;
-import java.security.Signature;
-import java.security.SignatureException;
-import java.security.spec.InvalidKeySpecException;
-import java.security.spec.KeySpec;
-import java.security.spec.PKCS8EncodedKeySpec;
-
-import static com.mongodb.crypt.capi.CAPI.MONGOCRYPT_STATUS_ERROR_CLIENT;
-import static com.mongodb.crypt.capi.CAPI.mongocrypt_status_set;
-import static com.mongodb.crypt.capi.CAPIHelper.toByteArray;
-import static com.mongodb.crypt.capi.CAPIHelper.writeByteArrayToBinary;
-
-class SigningRSAESPKCSCallback implements mongocrypt_hmac_fn {
-
-    private static final String KEY_ALGORITHM = "RSA";
-    private static final String SIGN_ALGORITHM = "SHA256withRSA";
-
-    SigningRSAESPKCSCallback() {
-    }
-
-    @Override
-    public boolean hmac(final Pointer ctx, final mongocrypt_binary_t key, final mongocrypt_binary_t in,
-                        final mongocrypt_binary_t out, final mongocrypt_status_t status) {
-        try {
-            byte[] result = getSignature(toByteArray(key), toByteArray(in));
-            writeByteArrayToBinary(out, result);
-            return true;
-        } catch (Exception e) {
-            mongocrypt_status_set(status, MONGOCRYPT_STATUS_ERROR_CLIENT, 0, new cstring(e.toString()), -1);
-            return false;
-        }
-    }
-
-    static byte[] getSignature(final byte[] privateKeyBytes, final byte[] dataToSign) throws NoSuchAlgorithmException, InvalidKeySpecException, InvalidKeyException, SignatureException {
-        KeySpec keySpec = new PKCS8EncodedKeySpec(privateKeyBytes);
-        KeyFactory keyFactory = KeyFactory.getInstance(KEY_ALGORITHM);
-        PrivateKey privateKey = keyFactory.generatePrivate(keySpec);
-
-        Signature privateSignature = Signature.getInstance(SIGN_ALGORITHM);
-        privateSignature.initSign(privateKey);
-        privateSignature.update(dataToSign);
-
-        return privateSignature.sign();
-    }
-}

data/ext/libmongocrypt/libmongocrypt/bindings/java/mongocrypt/src/main/java/com/mongodb/crypt/capi/package-info.java

@@ -1,18 +0,0 @@
-/*
- * Copyright 2019-present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package com.mongodb.crypt.capi;