]> source.dussan.org Git - gitblit.git/commitdiff
Factor out methods from SshCommandServer to SshDaemon
authorDavid Ostrovsky <david@ostrovsky.org>
Sat, 22 Feb 2014 16:03:37 +0000 (17:03 +0100)
committerJames Moger <james.moger@gitblit.com>
Thu, 10 Apr 2014 22:58:07 +0000 (18:58 -0400)
Change-Id: I02d545a8ab68b06d733ad8e7ed476767a34aa244

src/main/java/com/gitblit/manager/ServicesManager.java
src/main/java/com/gitblit/transport/ssh/SshCommandServer.java [deleted file]
src/main/java/com/gitblit/transport/ssh/SshDaemon.java

index 2cd583adf93619031286831089f421bdcc24c953..219e4ea5f5d4671d1f4e9d5f87812421141f93ff 100644 (file)
@@ -24,8 +24,13 @@ import java.util.concurrent.Executors;
 import java.util.concurrent.ScheduledExecutorService;
 import java.util.concurrent.TimeUnit;
 
+import javax.inject.Named;
+import javax.inject.Singleton;
 import javax.servlet.http.HttpServletRequest;
 
+import org.apache.sshd.server.Command;
+import org.eclipse.jgit.transport.resolver.ReceivePackFactory;
+import org.eclipse.jgit.transport.resolver.UploadPackFactory;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
@@ -38,14 +43,26 @@ import com.gitblit.fanout.FanoutNioService;
 import com.gitblit.fanout.FanoutService;
 import com.gitblit.fanout.FanoutSocketService;
 import com.gitblit.git.GitDaemon;
+import com.gitblit.git.GitblitReceivePackFactory;
+import com.gitblit.git.GitblitUploadPackFactory;
+import com.gitblit.git.RepositoryResolver;
 import com.gitblit.models.FederationModel;
 import com.gitblit.models.RepositoryModel;
 import com.gitblit.models.UserModel;
 import com.gitblit.service.FederationPullService;
+import com.gitblit.transport.ssh.SshCommandFactory;
 import com.gitblit.transport.ssh.SshDaemon;
+import com.gitblit.transport.ssh.SshSession;
+import com.gitblit.transport.ssh.commands.CreateRepository;
+import com.gitblit.transport.ssh.commands.VersionCommand;
+import com.gitblit.utils.IdGenerator;
 import com.gitblit.utils.StringUtils;
 import com.gitblit.utils.TimeUtils;
 
+import dagger.Module;
+import dagger.ObjectGraph;
+import dagger.Provides;
+
 /**
  * Services manager manages long-running services/processes that either have no
  * direct relation to other managers OR require really high-level manager
@@ -147,7 +164,7 @@ public class ServicesManager implements IManager {
                String bindInterface = settings.getString(Keys.git.sshBindInterface, "localhost");
                if (port > 0) {
                        try {
-                               sshDaemon = new SshDaemon(gitblit);
+                               sshDaemon = ObjectGraph.create(new SshModule()).get(SshDaemon.class);
                                sshDaemon.start();
                        } catch (IOException e) {
                                sshDaemon = null;
@@ -245,4 +262,40 @@ public class ServicesManager implements IManager {
                }
 
        }
+
+    @Module(library = true,
+        injects = {
+        IGitblit.class,
+        SshCommandFactory.class,
+        SshDaemon.class,
+        })
+    public class SshModule {
+      @Provides @Named("create-repository") Command provideCreateRepository() {
+        return new CreateRepository();
+      }
+
+      @Provides @Named("version") Command provideVersion() {
+        return new VersionCommand();
+      }
+
+      @Provides @Singleton IdGenerator provideIdGenerator() {
+         return new IdGenerator();
+      }
+
+      @Provides @Singleton RepositoryResolver<SshSession> provideRepositoryResolver() {
+        return new RepositoryResolver<SshSession>(provideGitblit());
+      }
+
+      @Provides @Singleton UploadPackFactory<SshSession> provideUploadPackFactory() {
+        return new GitblitUploadPackFactory<SshSession>(provideGitblit());
+      }
+
+      @Provides @Singleton ReceivePackFactory<SshSession> provideReceivePackFactory() {
+        return new GitblitReceivePackFactory<SshSession>(provideGitblit());
+      }
+
+      @Provides @Singleton IGitblit provideGitblit() {
+          return ServicesManager.this.gitblit;
+      }
+    }
 }
diff --git a/src/main/java/com/gitblit/transport/ssh/SshCommandServer.java b/src/main/java/com/gitblit/transport/ssh/SshCommandServer.java
deleted file mode 100644 (file)
index 7186737..0000000
+++ /dev/null
@@ -1,225 +0,0 @@
-/*
- * Copyright 2014 gitblit.com.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package com.gitblit.transport.ssh;
-
-import java.io.IOException;
-import java.net.InetSocketAddress;
-import java.net.SocketAddress;
-import java.security.InvalidKeyException;
-import java.util.Arrays;
-import java.util.Iterator;
-import java.util.LinkedList;
-import java.util.List;
-
-import javax.inject.Inject;
-
-import org.apache.mina.core.future.IoFuture;
-import org.apache.mina.core.future.IoFutureListener;
-import org.apache.mina.core.session.IoSession;
-import org.apache.mina.transport.socket.SocketSessionConfig;
-import org.apache.sshd.SshServer;
-import org.apache.sshd.common.Channel;
-import org.apache.sshd.common.Cipher;
-import org.apache.sshd.common.Compression;
-import org.apache.sshd.common.KeyExchange;
-import org.apache.sshd.common.KeyPairProvider;
-import org.apache.sshd.common.Mac;
-import org.apache.sshd.common.NamedFactory;
-import org.apache.sshd.common.Session;
-import org.apache.sshd.common.Signature;
-import org.apache.sshd.common.cipher.AES128CBC;
-import org.apache.sshd.common.cipher.AES192CBC;
-import org.apache.sshd.common.cipher.AES256CBC;
-import org.apache.sshd.common.cipher.BlowfishCBC;
-import org.apache.sshd.common.cipher.TripleDESCBC;
-import org.apache.sshd.common.compression.CompressionNone;
-import org.apache.sshd.common.mac.HMACMD5;
-import org.apache.sshd.common.mac.HMACMD596;
-import org.apache.sshd.common.mac.HMACSHA1;
-import org.apache.sshd.common.mac.HMACSHA196;
-import org.apache.sshd.common.random.BouncyCastleRandom;
-import org.apache.sshd.common.random.SingletonRandomFactory;
-import org.apache.sshd.common.signature.SignatureDSA;
-import org.apache.sshd.common.signature.SignatureRSA;
-import org.apache.sshd.common.util.SecurityUtils;
-import org.apache.sshd.server.CommandFactory;
-import org.apache.sshd.server.FileSystemFactory;
-import org.apache.sshd.server.FileSystemView;
-import org.apache.sshd.server.ForwardingFilter;
-import org.apache.sshd.server.PublickeyAuthenticator;
-import org.apache.sshd.server.SshFile;
-import org.apache.sshd.server.UserAuth;
-import org.apache.sshd.server.auth.UserAuthPublicKey;
-import org.apache.sshd.server.channel.ChannelDirectTcpip;
-import org.apache.sshd.server.channel.ChannelSession;
-import org.apache.sshd.server.kex.DHG1;
-import org.apache.sshd.server.kex.DHG14;
-import org.apache.sshd.server.session.ServerSession;
-import org.apache.sshd.server.session.SessionFactory;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
-import com.gitblit.utils.IdGenerator;
-
-/**
- *
- * @author Eric Myhre
- *
- */
-public class SshCommandServer extends SshServer {
-
-       private static final Logger log = LoggerFactory.getLogger(SshCommandServer.class);
-
-       @Inject
-       public SshCommandServer(final IdGenerator idGenerator) {
-               setSessionFactory(new SessionFactory() {
-                       @Override
-                       protected ServerSession createSession(final IoSession io) throws Exception {
-                               log.info("connection accepted on " + io);
-
-                               if (io.getConfig() instanceof SocketSessionConfig) {
-                                       final SocketSessionConfig c = (SocketSessionConfig) io.getConfig();
-                                       c.setKeepAlive(true);
-                               }
-
-                               final ServerSession s = (ServerSession) super.createSession(io);
-                               SocketAddress peer = io.getRemoteAddress();
-                               SshSession session = new SshSession(idGenerator.next(), peer);
-                               s.setAttribute(SshSession.KEY, session);
-
-                               io.getCloseFuture().addListener(new IoFutureListener<IoFuture>() {
-                                       @Override
-                                       public void operationComplete(IoFuture future) {
-                                               log.info("connection closed on " + io);
-                                       }
-                               });
-                               return s;
-                       }
-               });
-       }
-
-       /**
-        * Performs most of default configuration (setup random sources, setup ciphers,
-        * etc; also, support for forwarding and filesystem is explicitly disallowed).
-        *
-        * {@link #setKeyPairProvider(KeyPairProvider)} and
-        * {@link #setPublickeyAuthenticator(PublickeyAuthenticator)} are left for you.
-        * And applying {@link #setCommandFactory(CommandFactory)} is probably wise if you
-        * want something to actually happen when users do successfully authenticate.
-        */
-       @SuppressWarnings("unchecked")
-       public void setup() {
-               if (!SecurityUtils.isBouncyCastleRegistered())
-                       throw new RuntimeException("BC crypto not available");
-
-               setKeyExchangeFactories(Arrays.<NamedFactory<KeyExchange>>asList(
-                               new DHG14.Factory(),
-                               new DHG1.Factory())
-               );
-
-               setRandomFactory(new SingletonRandomFactory(new BouncyCastleRandom.Factory()));
-
-               setupCiphers();
-
-               setCompressionFactories(Arrays.<NamedFactory<Compression>>asList(
-                               new CompressionNone.Factory())
-               );
-
-               setMacFactories(Arrays.<NamedFactory<Mac>>asList(
-                               new HMACMD5.Factory(),
-                               new HMACSHA1.Factory(),
-                               new HMACMD596.Factory(),
-                               new HMACSHA196.Factory())
-               );
-
-               setChannelFactories(Arrays.<NamedFactory<Channel>>asList(
-                               new ChannelSession.Factory(),
-                               new ChannelDirectTcpip.Factory())
-               );
-
-               setSignatureFactories(Arrays.<NamedFactory<Signature>>asList(
-                               new SignatureDSA.Factory(),
-                               new SignatureRSA.Factory())
-               );
-
-               setFileSystemFactory(new FileSystemFactory() {
-                       @Override
-                       public FileSystemView createFileSystemView(Session session) throws IOException {
-                               return new FileSystemView() {
-                                       @Override
-                                       public SshFile getFile(SshFile baseDir, String file) {
-                                               return null;
-                                       }
-
-                                       @Override
-                                       public SshFile getFile(String file) {
-                                               return null;
-                                       }
-                               };
-                       }
-               });
-
-               setForwardingFilter(new ForwardingFilter() {
-                       @Override
-                       public boolean canForwardAgent(ServerSession session) {
-                               return false;
-                       }
-
-                       @Override
-                       public boolean canForwardX11(ServerSession session) {
-                               return false;
-                       }
-
-                       @Override
-                       public boolean canConnect(InetSocketAddress address, ServerSession session) {
-                               return false;
-                       }
-
-                       @Override
-                       public boolean canListen(InetSocketAddress address, ServerSession session) {
-                               return false;
-                       }
-               });
-
-               setUserAuthFactories(Arrays.<NamedFactory<UserAuth>>asList(
-                               new UserAuthPublicKey.Factory())
-               );
-       }
-
-       protected void setupCiphers() {
-               List<NamedFactory<Cipher>> avail = new LinkedList<NamedFactory<Cipher>>();
-               avail.add(new AES128CBC.Factory());
-               avail.add(new TripleDESCBC.Factory());
-               avail.add(new BlowfishCBC.Factory());
-               avail.add(new AES192CBC.Factory());
-               avail.add(new AES256CBC.Factory());
-
-               for (Iterator<NamedFactory<Cipher>> i = avail.iterator(); i.hasNext();) {
-                       final NamedFactory<Cipher> f = i.next();
-                       try {
-                               final Cipher c = f.create();
-                               final byte[] key = new byte[c.getBlockSize()];
-                               final byte[] iv = new byte[c.getIVSize()];
-                               c.init(Cipher.Mode.Encrypt, key, iv);
-                       } catch (InvalidKeyException e) {
-                               i.remove();
-                       } catch (Exception e) {
-                               i.remove();
-                       }
-               }
-               setCipherFactories(avail);
-       }
-}
index 056735a1dea33a1ce7b5cab3ece21ac85aa7d36d..3c3ef3f27412e846a04c467a570f5a0006eb1d0f 100644 (file)
@@ -18,35 +18,71 @@ package com.gitblit.transport.ssh;
 import java.io.File;\r
 import java.io.IOException;\r
 import java.net.InetSocketAddress;\r
+import java.net.SocketAddress;\r
+import java.security.InvalidKeyException;\r
 import java.text.MessageFormat;\r
+import java.util.Arrays;\r
+import java.util.Iterator;\r
+import java.util.LinkedList;\r
+import java.util.List;\r
 import java.util.concurrent.atomic.AtomicBoolean;\r
 \r
-import javax.inject.Named;\r
-import javax.inject.Singleton;\r
-\r
-import org.apache.sshd.server.Command;\r
+import javax.inject.Inject;\r
+\r
+import org.apache.mina.core.future.IoFuture;\r
+import org.apache.mina.core.future.IoFutureListener;\r
+import org.apache.mina.core.session.IoSession;\r
+import org.apache.mina.transport.socket.SocketSessionConfig;\r
+import org.apache.sshd.SshServer;\r
+import org.apache.sshd.common.Channel;\r
+import org.apache.sshd.common.Cipher;\r
+import org.apache.sshd.common.Compression;\r
+import org.apache.sshd.common.KeyExchange;\r
+import org.apache.sshd.common.KeyPairProvider;\r
+import org.apache.sshd.common.Mac;\r
+import org.apache.sshd.common.NamedFactory;\r
+import org.apache.sshd.common.Session;\r
+import org.apache.sshd.common.Signature;\r
+import org.apache.sshd.common.cipher.AES128CBC;\r
+import org.apache.sshd.common.cipher.AES192CBC;\r
+import org.apache.sshd.common.cipher.AES256CBC;\r
+import org.apache.sshd.common.cipher.BlowfishCBC;\r
+import org.apache.sshd.common.cipher.TripleDESCBC;\r
+import org.apache.sshd.common.compression.CompressionNone;\r
+import org.apache.sshd.common.mac.HMACMD5;\r
+import org.apache.sshd.common.mac.HMACMD596;\r
+import org.apache.sshd.common.mac.HMACSHA1;\r
+import org.apache.sshd.common.mac.HMACSHA196;\r
+import org.apache.sshd.common.random.BouncyCastleRandom;\r
+import org.apache.sshd.common.random.SingletonRandomFactory;\r
+import org.apache.sshd.common.signature.SignatureDSA;\r
+import org.apache.sshd.common.signature.SignatureRSA;\r
+import org.apache.sshd.common.util.SecurityUtils;\r
+import org.apache.sshd.server.CommandFactory;\r
+import org.apache.sshd.server.FileSystemFactory;\r
+import org.apache.sshd.server.FileSystemView;\r
+import org.apache.sshd.server.ForwardingFilter;\r
+import org.apache.sshd.server.PublickeyAuthenticator;\r
+import org.apache.sshd.server.SshFile;\r
+import org.apache.sshd.server.UserAuth;\r
+import org.apache.sshd.server.auth.UserAuthPublicKey;\r
+import org.apache.sshd.server.channel.ChannelDirectTcpip;\r
+import org.apache.sshd.server.channel.ChannelSession;\r
+import org.apache.sshd.server.kex.DHG1;\r
+import org.apache.sshd.server.kex.DHG14;\r
 import org.apache.sshd.server.keyprovider.PEMGeneratorHostKeyProvider;\r
+import org.apache.sshd.server.session.ServerSession;\r
+import org.apache.sshd.server.session.SessionFactory;\r
 import org.eclipse.jgit.internal.JGitText;\r
-import org.eclipse.jgit.transport.resolver.ReceivePackFactory;\r
-import org.eclipse.jgit.transport.resolver.UploadPackFactory;\r
 import org.slf4j.Logger;\r
 import org.slf4j.LoggerFactory;\r
 \r
 import com.gitblit.IStoredSettings;\r
 import com.gitblit.Keys;\r
-import com.gitblit.git.GitblitReceivePackFactory;\r
-import com.gitblit.git.GitblitUploadPackFactory;\r
-import com.gitblit.git.RepositoryResolver;\r
 import com.gitblit.manager.IGitblit;\r
-import com.gitblit.transport.ssh.commands.CreateRepository;\r
-import com.gitblit.transport.ssh.commands.VersionCommand;\r
 import com.gitblit.utils.IdGenerator;\r
 import com.gitblit.utils.StringUtils;\r
 \r
-import dagger.Module;\r
-import dagger.ObjectGraph;\r
-import dagger.Provides;\r
-\r
 /**\r
  * Manager for the ssh transport. Roughly analogous to the\r
  * {@link com.gitblit.git.GitDaemon} class.\r
@@ -54,9 +90,9 @@ import dagger.Provides;
  * @author Eric Myhre\r
  *\r
  */\r
-public class SshDaemon {\r
+public class SshDaemon extends SshServer {\r
 \r
-       private final Logger logger = LoggerFactory.getLogger(SshDaemon.class);\r
+       private final Logger log = LoggerFactory.getLogger(SshDaemon.class);\r
 \r
        /**\r
         * 22: IANA assigned port number for ssh. Note that this is a distinct concept\r
@@ -71,17 +107,16 @@ public class SshDaemon {
 \r
        private AtomicBoolean run;\r
 \r
-       private SshCommandServer sshd;\r
-\r
-       private IGitblit gitblit;\r
+       @SuppressWarnings("unused")\r
+    private IGitblit gitblit;\r
 \r
        /**\r
         * Construct the Gitblit SSH daemon.\r
         *\r
         * @param gitblit\r
         */\r
-       public SshDaemon(IGitblit gitblit) {\r
-\r
+       @Inject\r
+       SshDaemon(IGitblit gitblit, IdGenerator idGenerator, SshCommandFactory factory) {\r
            this.gitblit = gitblit;\r
                IStoredSettings settings = gitblit.getSettings();\r
                int port = settings.getInteger(Keys.git.sshPort, 0);\r
@@ -93,17 +128,40 @@ public class SshDaemon {
                        myAddress = new InetSocketAddress(bindInterface, port);\r
                }\r
 \r
-               ObjectGraph graph = ObjectGraph.create(new SshModule());\r
-               sshd = graph.get(SshCommandServer.class);\r
-               sshd.setPort(myAddress.getPort());\r
-               sshd.setHost(myAddress.getHostName());\r
-               sshd.setup();\r
-               sshd.setKeyPairProvider(new PEMGeneratorHostKeyProvider(new File(gitblit.getBaseFolder(), HOST_KEY_STORE).getPath()));\r
-               sshd.setPublickeyAuthenticator(new SshKeyAuthenticator(gitblit));\r
+               setPort(myAddress.getPort());\r
+               setHost(myAddress.getHostName());\r
+               setup();\r
+               setKeyPairProvider(new PEMGeneratorHostKeyProvider(\r
+                   new File(gitblit.getBaseFolder(), HOST_KEY_STORE).getPath()));\r
+               setPublickeyAuthenticator(new SshKeyAuthenticator(gitblit));\r
 \r
                run = new AtomicBoolean(false);\r
-        SshCommandFactory f = graph.get(SshCommandFactory.class);\r
-               sshd.setCommandFactory(f);\r
+               setCommandFactory(factory);\r
+               setSessionFactory(newSessionFactory(idGenerator));\r
+       }\r
+\r
+       SessionFactory newSessionFactory(final IdGenerator idGenerator) {\r
+         return new SessionFactory() {\r
+        @Override\r
+        protected ServerSession createSession(final IoSession io) throws Exception {\r
+            log.info("connection accepted on " + io);\r
+            if (io.getConfig() instanceof SocketSessionConfig) {\r
+                final SocketSessionConfig c = (SocketSessionConfig) io.getConfig();\r
+                c.setKeepAlive(true);\r
+            }\r
+            ServerSession s = (ServerSession) super.createSession(io);\r
+            SocketAddress peer = io.getRemoteAddress();\r
+            SshSession session = new SshSession(idGenerator.next(), peer);\r
+            s.setAttribute(SshSession.KEY, session);\r
+            io.getCloseFuture().addListener(new IoFutureListener<IoFuture>() {\r
+                @Override\r
+                public void operationComplete(IoFuture future) {\r
+                    log.info("connection closed on " + io);\r
+                }\r
+            });\r
+            return s;\r
+          }\r
+        };\r
        }\r
 \r
        public int getPort() {\r
@@ -133,10 +191,10 @@ public class SshDaemon {
                        throw new IllegalStateException(JGitText.get().daemonAlreadyRunning);\r
                }\r
 \r
-               sshd.start();\r
+               super.start();\r
                run.set(true);\r
 \r
-               logger.info(MessageFormat.format("SSH Daemon is listening on {0}:{1,number,0}",\r
+               log.info(MessageFormat.format("SSH Daemon is listening on {0}:{1,number,0}",\r
                                myAddress.getAddress().getHostAddress(), myAddress.getPort()));\r
        }\r
 \r
@@ -148,62 +206,126 @@ public class SshDaemon {
        /** Stop this daemon. */\r
        public synchronized void stop() {\r
                if (run.get()) {\r
-                       logger.info("SSH Daemon stopping...");\r
+                       log.info("SSH Daemon stopping...");\r
                        run.set(false);\r
 \r
                        try {\r
-                               sshd.stop();\r
+                               super.stop();\r
                        } catch (InterruptedException e) {\r
-                               logger.error("SSH Daemon stop interrupted", e);\r
+                               log.error("SSH Daemon stop interrupted", e);\r
                        }\r
                }\r
        }\r
 \r
-       @Module(library = true,\r
-           injects = {\r
-        IGitblit.class,\r
-        SshCommandFactory.class,\r
-        SshCommandServer.class,\r
-           })\r
-       public class SshModule {\r
-         @Provides @Named("create-repository") Command provideCreateRepository() {\r
-           return new CreateRepository();\r
-         }\r
-\r
-         @Provides @Named("version") Command provideVersion() {\r
-        return new VersionCommand();\r
-      }\r
-\r
-//        @Provides(type=Type.SET) @Named("git") Command provideVersionCommand2() {\r
-//             return new CreateRepository();\r
-//        }\r
-\r
-//       @Provides @Named("git") DispatchCommand providesGitCommand() {\r
-//         return new DispatchCommand("git");\r
-//       }\r
-\r
-//       @Provides (type=Type.SET) Provider<Command> provideNonCommand() {\r
-//           return new SshCommandFactory.NonCommand();\r
-//       }\r
-\r
-         @Provides @Singleton IdGenerator provideIdGenerator() {\r
-            return new IdGenerator();\r
-         }\r
-\r
-         @Provides @Singleton RepositoryResolver<SshSession> provideRepositoryResolver() {\r
-           return new RepositoryResolver<SshSession>(provideGitblit());\r
-         }\r
-\r
-      @Provides @Singleton UploadPackFactory<SshSession> provideUploadPackFactory() {\r
-        return new GitblitUploadPackFactory<SshSession>(provideGitblit());\r
-      }\r
-\r
-      @Provides @Singleton ReceivePackFactory<SshSession> provideReceivePackFactory() {\r
-        return new GitblitReceivePackFactory<SshSession>(provideGitblit());\r
-      }\r
-\r
-         @Provides @Singleton IGitblit provideGitblit() {\r
-             return SshDaemon.this.gitblit;\r
-         }\r
-       }\r
+          /**\r
+     * Performs most of default configuration (setup random sources, setup ciphers,\r
+     * etc; also, support for forwarding and filesystem is explicitly disallowed).\r
+     *\r
+     * {@link #setKeyPairProvider(KeyPairProvider)} and\r
+     * {@link #setPublickeyAuthenticator(PublickeyAuthenticator)} are left for you.\r
+     * And applying {@link #setCommandFactory(CommandFactory)} is probably wise if you\r
+     * want something to actually happen when users do successfully authenticate.\r
+     */\r
+    @SuppressWarnings("unchecked")\r
+    public void setup() {\r
+        if (!SecurityUtils.isBouncyCastleRegistered())\r
+            throw new RuntimeException("BC crypto not available");\r
+\r
+        setKeyExchangeFactories(Arrays.<NamedFactory<KeyExchange>>asList(\r
+                new DHG14.Factory(),\r
+                new DHG1.Factory())\r
+        );\r
+\r
+        setRandomFactory(new SingletonRandomFactory(new BouncyCastleRandom.Factory()));\r
+\r
+        setupCiphers();\r
+\r
+        setCompressionFactories(Arrays.<NamedFactory<Compression>>asList(\r
+                new CompressionNone.Factory())\r
+        );\r
+\r
+        setMacFactories(Arrays.<NamedFactory<Mac>>asList(\r
+                new HMACMD5.Factory(),\r
+                new HMACSHA1.Factory(),\r
+                new HMACMD596.Factory(),\r
+                new HMACSHA196.Factory())\r
+        );\r
+\r
+        setChannelFactories(Arrays.<NamedFactory<Channel>>asList(\r
+                new ChannelSession.Factory(),\r
+                new ChannelDirectTcpip.Factory())\r
+        );\r
+\r
+        setSignatureFactories(Arrays.<NamedFactory<Signature>>asList(\r
+                new SignatureDSA.Factory(),\r
+                new SignatureRSA.Factory())\r
+        );\r
+\r
+        setFileSystemFactory(new FileSystemFactory() {\r
+            @Override\r
+            public FileSystemView createFileSystemView(Session session) throws IOException {\r
+                return new FileSystemView() {\r
+                    @Override\r
+                    public SshFile getFile(SshFile baseDir, String file) {\r
+                        return null;\r
+                    }\r
+\r
+                    @Override\r
+                    public SshFile getFile(String file) {\r
+                        return null;\r
+                    }\r
+                };\r
+            }\r
+        });\r
+\r
+        setForwardingFilter(new ForwardingFilter() {\r
+            @Override\r
+            public boolean canForwardAgent(ServerSession session) {\r
+                return false;\r
+            }\r
+\r
+            @Override\r
+            public boolean canForwardX11(ServerSession session) {\r
+                return false;\r
+            }\r
+\r
+            @Override\r
+            public boolean canConnect(InetSocketAddress address, ServerSession session) {\r
+                return false;\r
+            }\r
+\r
+            @Override\r
+            public boolean canListen(InetSocketAddress address, ServerSession session) {\r
+                return false;\r
+            }\r
+        });\r
+\r
+        setUserAuthFactories(Arrays.<NamedFactory<UserAuth>>asList(\r
+                new UserAuthPublicKey.Factory())\r
+        );\r
+    }\r
+\r
+    protected void setupCiphers() {\r
+        List<NamedFactory<Cipher>> avail = new LinkedList<NamedFactory<Cipher>>();\r
+        avail.add(new AES128CBC.Factory());\r
+        avail.add(new TripleDESCBC.Factory());\r
+        avail.add(new BlowfishCBC.Factory());\r
+        avail.add(new AES192CBC.Factory());\r
+        avail.add(new AES256CBC.Factory());\r
+\r
+        for (Iterator<NamedFactory<Cipher>> i = avail.iterator(); i.hasNext();) {\r
+            final NamedFactory<Cipher> f = i.next();\r
+            try {\r
+                final Cipher c = f.create();\r
+                final byte[] key = new byte[c.getBlockSize()];\r
+                final byte[] iv = new byte[c.getIVSize()];\r
+                c.init(Cipher.Mode.Encrypt, key, iv);\r
+            } catch (InvalidKeyException e) {\r
+                i.remove();\r
+            } catch (Exception e) {\r
+                i.remove();\r
+            }\r
+        }\r
+        setCipherFactories(avail);\r
+    }\r
 }\r