|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectorg.glite.security.trustmanager.OpensslTrustmanager
public class OpensslTrustmanager
Constructor Summary | |
---|---|
OpensslTrustmanager(java.lang.String dir,
boolean crlRequired)
Deprecated. use constructor OpensslTrustmanager(String, boolean, CaseInsensitiveProperties) instead |
|
OpensslTrustmanager(java.lang.String dir,
boolean crlRequired,
org.glite.security.util.CaseInsensitiveProperties props)
|
Method Summary | |
---|---|
void |
checkClientTrusted(java.security.cert.X509Certificate[] arg0,
java.lang.String arg1)
|
void |
checkServerTrusted(java.security.cert.X509Certificate[] arg0,
java.lang.String arg1)
|
void |
checkUpdate()
Checks whether the trustanchors need updates and if they do updates them. |
java.security.cert.X509Certificate[] |
getAcceptedIssuers()
|
static java.lang.String |
getOpenSSLCAHash(java.security.cert.X509Certificate cert)
Generates the hex hash of the DN used by openssl to name the CA certificate files. |
static java.lang.String |
getOpenSSLCAHash(org.bouncycastle.asn1.x509.X509Name subject)
Generates the hex hash of the DN used by openssl to name the CA certificate files. |
Methods inherited from class java.lang.Object |
---|
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Constructor Detail |
---|
public OpensslTrustmanager(java.lang.String dir, boolean crlRequired) throws java.io.IOException, java.security.cert.CertificateException, java.text.ParseException, java.security.NoSuchProviderException
dir
- The trust anchor directory (often /etc/grid-security/certificates)crlRequired
- Whether the CRLs are required. If they are and the CRL is absent or expired all certs from that
CA are rejected.
java.io.IOException
- in case there is a read error during reading of CA certs, CRLs or namespace files.
java.security.cert.CertificateException
- in case there is problems handling the CA certs.
java.text.ParseException
- in case there is problems parsing the namespace files.
java.security.NoSuchProviderException
- in case Bouncycastle provider is not found and initialization fails.public OpensslTrustmanager(java.lang.String dir, boolean crlRequired, org.glite.security.util.CaseInsensitiveProperties props) throws java.io.IOException, java.security.cert.CertificateException, java.text.ParseException, java.security.NoSuchProviderException
dir
- The trust anchor directory (often /etc/grid-security/certificates)crlRequired
- Whether the CRLs are required. If they are and the CRL is absent or expired all certs from that
CA are rejected.props
- the properties to pass along for child classes to use.
java.io.IOException
- in case there is a read error during reading of CA certs, CRLs or namespace files.
java.security.cert.CertificateException
- in case there is problems handling the CA certs.
java.text.ParseException
- in case there is problems parsing the namespace files.
java.security.NoSuchProviderException
- in case Bouncycastle provider is not found and initialization fails.Method Detail |
---|
public void checkClientTrusted(java.security.cert.X509Certificate[] arg0, java.lang.String arg1) throws java.security.cert.CertificateException
checkClientTrusted
in interface javax.net.ssl.X509TrustManager
java.security.cert.CertificateException
public void checkServerTrusted(java.security.cert.X509Certificate[] arg0, java.lang.String arg1) throws java.security.cert.CertificateException
checkServerTrusted
in interface javax.net.ssl.X509TrustManager
java.security.cert.CertificateException
public java.security.cert.X509Certificate[] getAcceptedIssuers()
getAcceptedIssuers
in interface javax.net.ssl.X509TrustManager
public static java.lang.String getOpenSSLCAHash(org.bouncycastle.asn1.x509.X509Name subject)
subject
- the DN to hash.
public void checkUpdate() throws java.io.IOException, java.security.cert.CertificateException, java.text.ParseException
java.io.IOException
- thrown in case a file reading fails.
java.security.cert.CertificateException
- thrown if there are problems with the certificates.
java.text.ParseException
- thrown in case there are problems parsing certificates, CRLs or namespaces.public static java.lang.String getOpenSSLCAHash(java.security.cert.X509Certificate cert)
cert
- the certificate from which the subject DN is taken and hashed.
|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |