采用truelicense进行Java规划license控制
扩展可以验证后,license 开始结束日期,验证绑定一个给定的mac住址。
Truelicense 它是一个开源java license 检验项目。
使用truelicense实现用于JAVAprojectlicense机制(包含license生成和验证)请參考http://www.it165.net/pro/html/201404/11540.html
当中包含license授权机制的原理和制作license的详细步骤
本文主要是在此文基础上添加了mac 地址验证:
在createparam.properties
中添加 ip地址和 mac 地址的配置
##########common parameters########### #alias PRIVATEALIAS=privateKeys #key(important!) KEYPWD=iptv1234 #STOREPWD STOREPWD=iptv1234 #SUBJECT SUBJECT=bigdata #licPath licPath=C:/9exce/license/license.lic #priPath priPath=C:/9exce/license/PrivateKeys.keystore ##########license content########### #issuedTime issuedTime=2015-03-09 #notBeforeTime notBefore=2015-03-09 #notAfterTime notAfter=2016-03-20 #ip address ipAddress=150.236.220.200 #mac address macAddress=80-00-0B-56-3B-32 #consumerType consumerType=user #ConsumerAmount consumerAmount=1 #info info=this is a license
由于添加了mac地址,须要改变LicenseManager中的validate函数添加create_validate 用于create时的verify, 由于创建证书的时候 不能验证mac地址。
protected synchronized void create_validate(LicenseContent paramLicenseContent) throws LicenseContentException { LicenseParam localLicenseParam = getLicenseParam(); if (!localLicenseParam.getSubject().equals( paramLicenseContent.getSubject())) { throw new LicenseContentException(EXC_INVALID_SUBJECT); } if (paramLicenseContent.getHolder() == null) { throw new LicenseContentException(EXC_HOLDER_IS_NULL); } if (paramLicenseContent.getIssuer() == null) { throw new LicenseContentException(EXC_ISSUER_IS_NULL); } if (paramLicenseContent.getIssued() == null) { throw new LicenseContentException(EXC_ISSUED_IS_NULL); } Date localDate1 = new Date(); Date localDate2 = paramLicenseContent.getNotBefore(); if ((localDate2 != null) && (localDate1.before(localDate2))) { throw new LicenseContentException(EXC_LICENSE_IS_NOT_YET_VALID); } Date localDate3 = paramLicenseContent.getNotAfter(); if ((localDate3 != null) && (localDate1.after(localDate3))) { throw new LicenseContentException(EXC_LICENSE_HAS_EXPIRED); } String str = paramLicenseContent.getConsumerType(); if (str == null) { throw new LicenseContentException(EXC_CONSUMER_TYPE_IS_NULL); } Preferences localPreferences = localLicenseParam.getPreferences(); if ((localPreferences != null) && (localPreferences.isUserNode())) { if (!USER.equalsIgnoreCase(str)) { throw new LicenseContentException(EXC_CONSUMER_TYPE_IS_NOT_USER); } if (paramLicenseContent.getConsumerAmount() != 1) { throw new LicenseContentException( EXC_CONSUMER_AMOUNT_IS_NOT_ONE); } } else if (paramLicenseContent.getConsumerAmount() <= 0) { throw new LicenseContentException( EXC_CONSUMER_AMOUNT_IS_NOT_POSITIVE); } }
更新validate添加验证客户server的mac地址。
protected synchronized void validate(LicenseContent paramLicenseContent) throws LicenseContentException { LicenseParam localLicenseParam = getLicenseParam(); if (!localLicenseParam.getSubject().equals( paramLicenseContent.getSubject())) { throw new LicenseContentException(EXC_INVALID_SUBJECT); } if (paramLicenseContent.getHolder() == null) { throw new LicenseContentException(EXC_HOLDER_IS_NULL); } if (paramLicenseContent.getIssuer() == null) { throw new LicenseContentException(EXC_ISSUER_IS_NULL); } if (paramLicenseContent.getIssued() == null) { throw new LicenseContentException(EXC_ISSUED_IS_NULL); } Date localDate1 = new Date(); Date localDate2 = paramLicenseContent.getNotBefore(); if ((localDate2 != null) && (localDate1.before(localDate2))) { throw new LicenseContentException(EXC_LICENSE_IS_NOT_YET_VALID); } Date localDate3 = paramLicenseContent.getNotAfter(); if ((localDate3 != null) && (localDate1.after(localDate3))) { throw new LicenseContentException(EXC_LICENSE_HAS_EXPIRED); } LicenseCheckModel licenseCheckModel = (LicenseCheckModel)paramLicenseContent.getExtra(); String macAddress = licenseCheckModel.getIpMacAddress(); try { if (!ListNets.validateMacAddress(macAddress)) { throw new LicenseContentException(EXC_LICENSE_HAS_EXPIRED); } } catch (SocketException e) { // TODO Auto-generated catch block throw new LicenseContentException(EXC_LICENSE_HAS_EXPIRED); } String str = paramLicenseContent.getConsumerType(); if (str == null) { throw new LicenseContentException(EXC_CONSUMER_TYPE_IS_NULL); } Preferences localPreferences = localLicenseParam.getPreferences(); if ((localPreferences != null) && (localPreferences.isUserNode())) { if (!USER.equalsIgnoreCase(str)) { throw new LicenseContentException(EXC_CONSUMER_TYPE_IS_NOT_USER); } if (paramLicenseContent.getConsumerAmount() != 1) { throw new LicenseContentException( EXC_CONSUMER_AMOUNT_IS_NOT_ONE); } } else if (paramLicenseContent.getConsumerAmount() <= 0) { throw new LicenseContentException( EXC_CONSUMER_AMOUNT_IS_NOT_POSITIVE); } }
创建类ListNets 用于读取客户server的IP地址和mac地址进行验证。笔者使用了验证mac地址的函数。毕竟客户有可能更改机器的ip地址的
package zlicense.util; import java.net.*; import java.util.*; import static java.lang.System.out; public class ListNets { public static void main(String args[]) throws SocketException { String ip = "150.236.220.200"; String mac = "80-00-0B-56-3B-32"; boolean flag = validatoIpAndMacAddress(ip, mac); boolean macflag = validateMacAddress( mac); out.printf("validatoMacAddress flag=%s\n", macflag); out.printf("validatoIpAndMacAddress flag=%s\n", flag); } static void displayInterfaceInformation(NetworkInterface netint) throws SocketException { out.printf("Display name: %s\n", netint.getDisplayName()); out.printf("Name: %s\n", netint.getName()); byte[] mac = netint.getHardwareAddress(); if (mac != null) { StringBuilder sb = new StringBuilder(); for (int i = 0; i < mac.length; i++) { sb.append(String.format("%02X%s", mac[i], (i < mac.length - 1) ? "-" : "")); } System.out.println("mac=" + sb.toString()); } Enumeration<InetAddress> inetAddresses = netint.getInetAddresses(); for (InetAddress inetAddress : Collections.list(inetAddresses)) { out.printf("InetAddress: %s\n", inetAddress); System.out .println("InetAddress ip=" + inetAddress.getHostAddress()); } out.printf("\n"); } public static boolean validateMacAddress(String macAddress) throws SocketException { boolean returnFlag = false; Enumeration<NetworkInterface> nets = NetworkInterface .getNetworkInterfaces(); for (NetworkInterface netint : Collections.list(nets)) { byte[] mac = netint.getHardwareAddress(); StringBuilder sb = new StringBuilder(); if (mac != null) { for (int i = 0; i < mac.length; i++) { sb.append(String.format("%02X%s", mac[i], (i < mac.length - 1) ? "-" : "")); } System.out.println("mac=" + sb.toString()); } if (sb.toString().equals(macAddress)) { returnFlag = true; } } return returnFlag; } public static boolean validatoIpAndMacAddress(String ipAddress, String macAddress) throws SocketException { boolean returnFlag = false; Enumeration<NetworkInterface> nets = NetworkInterface .getNetworkInterfaces(); for (NetworkInterface netint : Collections.list(nets)) { byte[] mac = netint.getHardwareAddress(); StringBuilder sb = new StringBuilder(); if (mac != null) { for (int i = 0; i < mac.length; i++) { sb.append(String.format("%02X%s", mac[i], (i < mac.length - 1) ? "-" : "")); } System.out.println("mac=" + sb.toString()); } if (sb.toString().equals(macAddress)) { Enumeration<InetAddress> inetAddresses = netint .getInetAddresses(); String ip = ""; for (InetAddress inetAddress : Collections.list(inetAddresses)) { ip = inetAddress.getHostAddress(); System.out.println("InetAddress ip=" + inetAddress.getHostAddress()); if (ipAddress.toString().equals(ip)) { returnFlag = true; } } } } return returnFlag; } }
创建LicenseCheckModel 是一个model类就是存储 ip和mac地址
package zlicense.util; public class LicenseCheckModel { private String ipAddress; private String ipMacAddress; private String CPUSerial; private String motherboardSN; private String hardDiskSN; public String getIpAddress() { return ipAddress; } public void setIpAddress(String ipAddress) { this.ipAddress = ipAddress; } public String getIpMacAddress() { return ipMacAddress; } public void setIpMacAddress(String ipMacAddress) { this.ipMacAddress = ipMacAddress; } public String getCPUSerial() { return CPUSerial; } public void setCPUSerial(String cPUSerial) { CPUSerial = cPUSerial; } public String getMotherboardSN() { return motherboardSN; } public void setMotherboardSN(String motherboardSN) { this.motherboardSN = motherboardSN; } public String getHardDiskSN() { return hardDiskSN; } public void setHardDiskSN(String hardDiskSN) { this.hardDiskSN = hardDiskSN; } }
更新CreateLicense 添加mac和ip 的配置读取并写入license证书。採用了content.setExtra(licenseCheckModel);
将须要验证的信息 写入licenseCheckModel 然后set到content中。
改变了 truelicense 中全部的文件读取方式。採用绝对路径读取。
Properties prop= new Properties(); //InputStream in= getClass().getResourceAsStream(propertiesPath); try { InputStreamin = new FileInputStream(propertiesPath); prop.load(in); } catch(IOException e) { // TODOAuto-generated catch block e.printStackTrace(); }
全部的配置文件和我生成的 key stroe 在java-license-jar/src/main/resources目录下
项目code地址:
https://github.com/jingshauizh/JavaSpringSurmmary/tree/master/java-license-jar
版权声明:本文博主原创文章,博客,未经同意不得转载。