Spring Integration - TCP SSL Support

[ppussar]

Hi,

I am trying to implement a TCP Server, which does client certificate authentication on its connections. I added a TcpSocketSupport Bean as described in the documentation.

However I get a ClassCastException during the serverSocket cast, as it is still a ServerSocket and not a SSLServerSocket.

So I tryed (without success) to overwrite the TcpSocketFactorySupport Bean:

@Bean
    public TcpSocketSupport tcpSocketSupport(serverProperties serverProperties) {
        if (serverProperties.getSsl().isEnabled()) {
            return new DefaultTcpSocketSupport() {
                @Override
                public void postProcessServerSocket(ServerSocket serverSocket) {
                    ((SSLServerSocket) serverSocket).setNeedClientAuth(true);
                }
            };
        } else {
            return new DefaultTcpSocketSupport();
        }
    }

    @Bean
    public TcpSocketFactorySupport tcpSocketFactorySupport(
            ServerProperties serverProperties,
            TcpSSLContextSupport tcpSSLContextSupport) {

        if (serverProperties.getSsl().isEnabled()) {
            return new DefaultTcpNetSSLSocketFactorySupport(tcpSSLContextSupport);
        } else {
            return new DefaultTcpNetSocketFactorySupport();
        }
    }

But it has no effect. I guess it is not working as I am using the DSL syntax, which does not support SSL?:

IntegrationFlow.from(Tcp.inboundGateway(
                                Tcp.netServer(serverPort)
                                        .tcpSocketSupport(tcpSocketSupport)
                                        .deserializer(mySerde)
                                        .serializer(mySerde)
                                        .soTimeout(Integer.MAX_VALUE)
                                        .singleUseConnections(false)
                                        .mapper(tcpMessageMapper))
                        .id(TCP_GATEWAY_ID)
                        .errorChannel(ERROR_CHANNEL_NAME)
                        .replyChannel(REPLY_CHANNEL_NAME))

Is there a way to set the tcpSocketFactorySupport to DefaultTcpNetSSLSocketFactorySupport via DSL?

[garyrussell]

The DSL does not currently support the tcpSocketFactorySupport property.

I will convert this to an issue to add support to the DSL.

As a work around you can define a TcpConnectionFactoryFactoryBean @Bean instead and inject the object it creates (TcpNetServerConnectionFactory) into the flow.

[garyrussell]

#4013

[ppussar]

Hello Gary,
Thank you for your quick reply. The workaround you suggested works perfectly.
I am looking forward to the DSL solution 👍