OPENDJ-3086 Acquire and distribute encryption keys when applying config cha...

Fabio Pistolesi

07.42.2016 dc85d3be1d993e170e6a2f0af6544ab3ee0b7d76

 opendj-server-legacy/src/main/java/org/opends/server/backends/pluggable/EntryContainer.java

@@ -2362,22 +2362,40 @@
  @Override
  public boolean isConfigurationChangeAcceptable(PluggableBackendCfg cfg, List<LocalizableMessage> unacceptableReasons)
  {
    StringBuilder builder = new StringBuilder();
    for (AttributeIndex attributeIndex : attrIndexMap.values())
    if (cfg.isConfidentialityEnabled())
    {
      if (attributeIndex.isConfidentialityEnabled() && !cfg.isConfidentialityEnabled())
      final String cipherTransformation = cfg.getCipherTransformation();
      final int keyLength = cfg.getCipherKeyLength();

      try
      {
        if (builder.length() > 0)
        {
          builder.append(", ");
        }
        builder.append(attributeIndex.getAttributeType().getNameOrOID());
        serverContext.getCryptoManager().ensureCipherKeyIsAvailable(cipherTransformation, keyLength);
      }
      catch (Exception e)
      {
        unacceptableReasons.add(ERR_BACKEND_FAULTY_CRYPTO_TRANSFORMATION.get(cipherTransformation, keyLength, e));
        return false;
      }
    }
    if (builder.length() > 0)
    else
    {
      unacceptableReasons.add(ERR_BACKEND_CANNOT_CHANGE_CONFIDENTIALITY.get(getBaseDN(), builder.toString()));
      return false;
      StringBuilder builder = new StringBuilder();
      for (AttributeIndex attributeIndex : attrIndexMap.values())
      {
        if (attributeIndex.isConfidentialityEnabled())
        {
          if (builder.length() > 0)
          {
            builder.append(", ");
          }
          builder.append(attributeIndex.getAttributeType().getNameOrOID());
        }
      }
      if (builder.length() > 0)
      {
        unacceptableReasons.add(ERR_BACKEND_CANNOT_CHANGE_CONFIDENTIALITY.get(getBaseDN(), builder.toString()));
        return false;
      }
    }
    return true;
  }