sec-dir

Author: Caideyipi

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/pipe/sink/protocol/opcua/OpcUaSink.java

@@ -56,6 +56,7 @@
 import java.util.Arrays;
 import java.util.Map;
 import java.util.Objects;
+import java.util.UUID;
 import java.util.concurrent.ConcurrentHashMap;
 import java.util.concurrent.atomic.AtomicInteger;
 
@@ -339,8 +340,17 @@ private void customizeClient(final String nodeUrl, final PipeParameters paramete
         Objects.nonNull(userName)
             ? new UsernameProvider(userName, password)
             : new AnonymousProvider();
+
+    final String securityDir =
+        IoTDBConfig.addDataHomeDir(
+            parameters.getStringOrDefault(
+                Arrays.asList(CONNECTOR_OPC_UA_SECURITY_DIR_KEY, SINK_OPC_UA_SECURITY_DIR_KEY),
+                CONNECTOR_OPC_UA_SECURITY_DIR_DEFAULT_VALUE
+                    + File.separatorChar
+                    + UUID.fromString(nodeUrl)));
+
     client = new IoTDBOpcUaClient(nodeUrl, policy, provider);
-    new ClientRunner(client, password).run();
+    new ClientRunner(client, securityDir, password).run();
   }
 
   @Override

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/pipe/sink/protocol/opcua/client/ClientRunner.java

@@ -51,28 +51,31 @@ public class ClientRunner {
   private final CompletableFuture<OpcUaClient> future = new CompletableFuture<>();
 
   private final IoTDBOpcUaClient configurableUaClient;
+  private final Path securityDir;
   private final String password;
 
-  public ClientRunner(final IoTDBOpcUaClient configurableUaClient, final String password) {
+  public ClientRunner(
+      final IoTDBOpcUaClient configurableUaClient,
+      final String securityDir,
+      final String password) {
     this.configurableUaClient = configurableUaClient;
+    this.securityDir = Paths.get(securityDir);
     this.password = password;
   }
 
   private OpcUaClient createClient() throws Exception {
-    final Path securityTempDir =
-        Paths.get(System.getProperty("java.io.tmpdir"), "client", "security");
-    Files.createDirectories(securityTempDir);
-    if (!Files.exists(securityTempDir)) {
-      throw new Exception("unable to create security dir: " + securityTempDir);
+    Files.createDirectories(securityDir);
+    if (!Files.exists(securityDir)) {
+      throw new Exception("unable to create security dir: " + securityDir);
     }
 
-    final File pkiDir = securityTempDir.resolve("pki").toFile();
+    final File pkiDir = securityDir.resolve("pki").toFile();
 
-    logger.info("security dir: {}", securityTempDir.toAbsolutePath());
+    logger.info("security dir: {}", securityDir.toAbsolutePath());
     logger.info("security pki dir: {}", pkiDir.getAbsolutePath());
 
     final IoTDBKeyStoreLoaderClient loader =
-        new IoTDBKeyStoreLoaderClient().load(securityTempDir, password.toCharArray());
+        new IoTDBKeyStoreLoaderClient().load(securityDir, password.toCharArray());
 
     final DefaultTrustListManager trustListManager = new DefaultTrustListManager(pkiDir);