package com.wechat.pay.contrib.apache.httpclient.auth;
import com.wechat.pay.contrib.apache.httpclient.Credentials;
import com.wechat.pay.contrib.apache.httpclient.cert.CertManagerSingleton;
import java.security.cert.X509Certificate;
import java.util.concurrent.locks.ReentrantLock;
/**
-
在原有CertificatesVerifier基础上，增加定时更新证书功能（默认1小时）
-
@author lianup
-
@since 0.3.0
*/
public class ScheduledUpdateCertificatesVerifier implements Verifier {
protected static final int UPDATE_INTERVAL_MINUTE = 60;
private final ReentrantLock lock;
private final CertManagerSingleton certManagerSingleton;
private final CertificatesVerifier verifier;
public ScheduledUpdateCertificatesVerifier(Credentials credentials, byte[] apiv3Key) {
lock = new ReentrantLock();
certManagerSingleton = CertManagerSingleton.getInstance();
initCertManager(credentials, apiv3Key);
verifier = new CertificatesVerifier(certManagerSingleton.getCertificates());
}
public void initCertManager(Credentials credentials, byte[] apiv3Key) {
if (credentials == null || apiv3Key.length == 0) {
throw new IllegalArgumentException("credentials或apiv3Key为空");
}
certManagerSingleton.init(credentials, apiv3Key, UPDATE_INTERVAL_MINUTE);
}
@Override
public X509Certificate getLatestCertificate() {
return certManagerSingleton.getLatestCertificate();
}
@Override
public boolean verify(String serialNumber, byte[] message, String signature) {
if (serialNumber.isEmpty() || message.length == 0 || signature.isEmpty()) {
throw new IllegalArgumentException("serialNumber或message或signature为空");
}
if (lock.tryLock()) {
try {
verifier.updateCertificates(certManagerSingleton.getCertificates());
} finally {
lock.unlock();
}
}
return verifier.verify(serialNumber, message, signature);
}
/**
- 该方法已废弃，请勿使用
- @return null
*/
@Deprecated
@Override
public X509Certificate getValidCertificate() {
return null;
}
/**
- 停止定时更新，停止后无法再重新启动
*/
public void stopScheduledUpdate() {
certManagerSingleton.close();
}
}