Re: java bindings

Wes Young <[email protected]> Sat, 22 Aug 2009 20:25:37 -0400
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <[email protected]>
--===============3862962564407819470==
Content-Type: multipart/signed; boundary=Apple-Mail-1--50485309; micalg=sha1; protocol="application/pkcs7-signature"


--Apple-Mail-1--50485309
Content-Type: text/plain;
	charset=ISO-8859-1;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: quoted-printable

So i'm working through this and have it about 50% done and i'm running =20=

into trouble, i'm not much of a Java person so maybe someone on this =20
list might be able to shed some light on the subject. I've got the =20
bindings to compile, jar to build, libpreludejava.so to link and load =20=

and when I get call:


c=3D new ClientEasy("prelude-java-agent");
c.Start();

I get:

$ java test
java.io.IOException: Error importing X509 private key: ASN1 parser: =20
Error in DER parsing.
java.io.IOException: Error importing X509 private key: ASN1 parser: =20
Error in DER parsing.
    at java.lang.reflect.Constructor.newInstance(libgcj.so.90)
    at com.prelude.easy.Client.Start(Client.java:45)
    at test.main(test.java:13)


I can verify that the profile "prelude-java-agent" works using the =20
gnutls-cli tool, and can also very that the custom python script's =20
i've built around this work too. Tracing through the various =20
libraries, the only thing I can think of is that the JNI (jvm) is =20
getting tripped up somewhere trying to actually read the key...

I'm attaching a patch of what i've come up with so far, thinking while =20=

i bang my head against the wall trying to debug this, maybe someone =20
with some more java I/O exp. could take a look at it and see why the =20
asn1/gnutls init is failing. I've traced it down to the auth_init =20
function in the code (tls-auth.c +350 or so)


I've created an "issue" with the code attached to it so we can keep =20
easy track of this:

https://dev.prelude-ids.com/issues/show/362

On Aug 13, 2009, at 4:31 AM, Yoann Vandoorselaere wrote:

> Hi,
>
> Le mercredi 12 ao=FBt 2009 =E0 12:03 -0400, Wes Young a =E9crit :
>> Curious,
>>
>> has anyone done any work on swig'ing some java bindings? I've got the
>> need to hook into libprelude via a java app. Wondered if anyone had
>> started in on it before I start hacking something up.
>
> If you're planing to work on this, I would advise generating only high
> level bindings (on top of the C++ bindings), and not to bother with =20=

> low
> level bindings (which will become deprecated one day or another).
>
> In order to generate high level bindings, you can easily inspire from
> libpreludecpp-*.i
>
> Good luck with this work, I'm looking forward seeing your patch here !
>
> --=20
> Yoann Vandoorselaere | Directeur Technique/CTO | PreludeIDS =20
> Technologies
> Tel: +33 (0)8 70 70 21 58                       Fax: +33(0)4 78 42 =20
> 21 58
> http://www.prelude-ids.com
>
>

--
Wes
http://claimid.com/wesyoung


--Apple-Mail-1--50485309
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=

--Apple-Mail-1--50485309--

--===============3862962564407819470==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel
--===============3862962564407819470==--