ch.icosys.popjava.core.combox.socket.ssl

Class POPTrustManager

java.lang.Object

ch.icosys.popjava.core.combox.socket.ssl.POPTrustManager

All Implemented Interfaces:

javax.net.ssl.TrustManager, javax.net.ssl.X509TrustManager

public class POPTrustManager
extends java.lang.Object
implements javax.net.ssl.X509TrustManager

Two origin KeyStore TrustManager, single instance with Directory Watch and auto-reload. See https://jcalcote.wordpress.com/2010/06/22/managing-a-dynamic-java-trust-store/

Constructor Summary

Constructors

Constructor and Description
POPTrustManager()

Method Summary

Modifier and Type	Method and Description
void	checkClientTrusted(java.security.cert.X509Certificate[] chain, java.lang.String authType)
void	checkServerTrusted(java.security.cert.X509Certificate[] chain, java.lang.String authType)
java.security.cert.X509Certificate[]	getAcceptedIssuers()
java.security.cert.Certificate	getCertificate(java.lang.String fingerprint) Any certificate from the local Trust manager
java.security.cert.Certificate	getCertificateFromAlias(java.lang.String uuid) The certificate of a specified alias
java.lang.String	getNetworkFromFingerprint(java.lang.String fingerprint) Get the network assigned to a specific certificate
boolean	isCertificateKnown(java.security.cert.Certificate cert) Do we know the certificate
boolean	isConfidenceLink(java.lang.String fingerprint) Tell if a certificate is confidence link certificate or a temporary link
void	reloadTrustManager()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

POPTrustManager

public POPTrustManager()
                throws java.io.IOException,
                       java.security.KeyStoreException,
                       java.security.cert.CertificateException,
                       java.security.NoSuchAlgorithmException

Throws:

java.io.IOException

java.security.KeyStoreException

java.security.cert.CertificateException

java.security.NoSuchAlgorithmException

Method Detail

checkClientTrusted

public void checkClientTrusted(java.security.cert.X509Certificate[] chain,
                               java.lang.String authType)
                        throws java.security.cert.CertificateException

Specified by:

checkClientTrusted in interface javax.net.ssl.X509TrustManager

Throws:

java.security.cert.CertificateException

checkServerTrusted

public void checkServerTrusted(java.security.cert.X509Certificate[] chain,
                               java.lang.String authType)
                        throws java.security.cert.CertificateException

Specified by:

checkServerTrusted in interface javax.net.ssl.X509TrustManager

Throws:

java.security.cert.CertificateException

getAcceptedIssuers

public java.security.cert.X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface javax.net.ssl.X509TrustManager

isConfidenceLink

public boolean isConfidenceLink(java.lang.String fingerprint)

Tell if a certificate is confidence link certificate or a temporary link

Parameters:

fingerprint - The identifier of the certificate

Returns:

true if it's a confidence link, false otherwise

getNetworkFromFingerprint

public java.lang.String getNetworkFromFingerprint(java.lang.String fingerprint)

Get the network assigned to a specific certificate

Parameters:

fingerprint - the fingerprint we want the certificate to

Returns:

the certificate or null if unknown

reloadTrustManager

public final void reloadTrustManager()
                              throws java.io.IOException,
                                     java.security.KeyStoreException,
                                     java.security.cert.CertificateException,
                                     java.security.NoSuchAlgorithmException

Throws:

java.io.IOException

java.security.KeyStoreException

java.security.cert.CertificateException

java.security.NoSuchAlgorithmException

isCertificateKnown

public boolean isCertificateKnown(java.security.cert.Certificate cert)

Do we know the certificate

Parameters:

cert - the certificate to check

Returns:

true is known, false otherwise

getCertificate

public java.security.cert.Certificate getCertificate(java.lang.String fingerprint)

Any certificate from the local Trust manager

Parameters:

fingerprint - the fingerprint of the certificate

Returns:

the certificate or null if unknown

getCertificateFromAlias

public java.security.cert.Certificate getCertificateFromAlias(java.lang.String uuid)

The certificate of a specified alias

Parameters:

uuid - the alias of the certificate, usually the network UUID

Returns:

the certificate or null if not found