|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectorg.glite.slcs.httpclient.ssl.ExtendedX509TrustManager
public class ExtendedX509TrustManager
ExtendedTrustX509TrustManager can be used to extend the default JSSE
X509TrustManager
with additional trusted CAs stored in a trust store.
Constructor Summary | |
---|---|
ExtendedX509TrustManager(java.security.KeyStore trustStore,
javax.net.ssl.X509TrustManager defaultTrustManager)
Constructor for ExtendedX509TrustManager. |
Method Summary | |
---|---|
void |
checkClientTrusted(java.security.cert.X509Certificate[] chain,
java.lang.String authType)
|
void |
checkServerTrusted(java.security.cert.X509Certificate[] chain,
java.lang.String authType)
|
protected static java.util.List |
createTrustedIssuers(java.security.KeyStore truststore)
|
java.security.cert.X509Certificate[] |
getAcceptedIssuers()
Merges the system wide accepted issuers and the own ones and returns them. |
protected boolean |
isCertificateIssuerTrusted(java.security.cert.X509Certificate cert)
Returns true iff the certificate issuer is in our trust
store and it have signed the cert. |
protected boolean |
isCertificateTrusted(java.security.cert.X509Certificate cert)
Checks if the certificate is store in our trust store. |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Constructor Detail |
---|
public ExtendedX509TrustManager(java.security.KeyStore trustStore, javax.net.ssl.X509TrustManager defaultTrustManager) throws java.security.KeyStoreException
truststore
- The trust KeyStore containing the additional trusted CA.defaultTrustManager
- The default JSSE X509TrustManager
java.security.KeyStoreException
Method Detail |
---|
protected static java.util.List createTrustedIssuers(java.security.KeyStore truststore) throws java.security.KeyStoreException
java.security.KeyStoreException
public void checkClientTrusted(java.security.cert.X509Certificate[] chain, java.lang.String authType) throws java.security.cert.CertificateException
checkClientTrusted
in interface javax.net.ssl.X509TrustManager
java.security.cert.CertificateException
X509TrustManager.checkClientTrusted(X509Certificate[],String
authType)
public void checkServerTrusted(java.security.cert.X509Certificate[] chain, java.lang.String authType) throws java.security.cert.CertificateException
checkServerTrusted
in interface javax.net.ssl.X509TrustManager
java.security.cert.CertificateException
X509TrustManager.checkServerTrusted(X509Certificate[],String
authType)
protected boolean isCertificateTrusted(java.security.cert.X509Certificate cert)
cert
- The X509 certificate to check.
true
if the certificate is in trustedIssuers
hashtable as value.protected boolean isCertificateIssuerTrusted(java.security.cert.X509Certificate cert)
true
iff the certificate issuer is in our trust
store and it have signed the cert.
cert
- The X509 certificate to check.
true
if the certificate issuer is in
trustedIssuers list and have signed the cert.public java.security.cert.X509Certificate[] getAcceptedIssuers()
getAcceptedIssuers
in interface javax.net.ssl.X509TrustManager
X509TrustManager.getAcceptedIssuers()
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |