org.nhindirect.config.processor.impl

Class DefaultBundleRefreshProcessorImpl

java.lang.Object

org.nhindirect.config.processor.impl.DefaultBundleRefreshProcessorImpl

All Implemented Interfaces:

BundleRefreshProcessor

public class DefaultBundleRefreshProcessorImpl
extends Object
implements BundleRefreshProcessor

Default implementation of the BundleRefreshProcessor interface.

The implementation allows for bundles to be downloaded from SSL protected sites that may not chain back to a trust CA. This is useful in developement environments and is not recommended in a production environment. By default, this feature is disable, but can be enabled using the BUNDLE_REFRESH_PROCESSOR_ALLOW_DOWNLOAD_FROM_UNTRUSTED options parameter.

Since:

1.3

Author:

Greg Meyer

Field Summary

Fields

Modifier and Type	Field and Description
static String	BUNDLE_REFRESH_PROCESSOR_ALLOW_DOWNLOAD_FROM_UNTRUSTED Boolean value that specifies if bundles can be downloaded from non verified or untrusted SSL URLs.

Constructor Summary

Constructors

Constructor and Description
DefaultBundleRefreshProcessorImpl() Default constructor.

Method Summary

Modifier and Type	Method and Description
static void	initJVMParams() Initializes system preferences using the Direct OptionsManager pattern.
reactor.core.publisher.Mono<?>	refreshBundle(org.nhindirect.config.store.TrustBundle bundle) Refreshes the set of anchors within a bundle.
void	setRepositories(org.nhindirect.config.repository.TrustBundleRepository bundleRepo, org.nhindirect.config.repository.TrustBundleAnchorRepository bundleAnchorRepo) Sets the trust bundle repositories for updating the bundle storage medium.
void	setRepository(org.nhindirect.config.repository.TrustBundleRepository bundleRepo) Deprecated.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

BUNDLE_REFRESH_PROCESSOR_ALLOW_DOWNLOAD_FROM_UNTRUSTED

public static final String BUNDLE_REFRESH_PROCESSOR_ALLOW_DOWNLOAD_FROM_UNTRUSTED

Boolean value that specifies if bundles can be downloaded from non verified or untrusted SSL URLs. The default value is false.

JVM Parameter/Options Name: org.nhindirect.config.processor.impl.bundlerefresh.AllowNonVerifiedSSL

See Also:

Constant Field Values

Constructor Detail

DefaultBundleRefreshProcessorImpl

public DefaultBundleRefreshProcessorImpl()

Default constructor.

Method Detail

initJVMParams

public static void initJVMParams()

Initializes system preferences using the Direct OptionsManager pattern.

setRepository

public void setRepository(org.nhindirect.config.repository.TrustBundleRepository bundleRepo)

Deprecated.

Sets the trust bundle repository for updating the bundle storage medium.

Parameters:

bundleRepo - The trust bundle repository

setRepositories

public void setRepositories(org.nhindirect.config.repository.TrustBundleRepository bundleRepo,
                            org.nhindirect.config.repository.TrustBundleAnchorRepository bundleAnchorRepo)

Sets the trust bundle repositories for updating the bundle storage medium.

Parameters:

bundleRepo - The trust bundle repository

bundleAnchorRepo - The trust bundle anchor repository

refreshBundle

public reactor.core.publisher.Mono<?> refreshBundle(org.nhindirect.config.store.TrustBundle bundle)

Refreshes the set of anchors within a bundle. The bundle is downloaded from the bundle's URL, validated for authenticity if the bundle is signed and a signing certificate has been configured, and the anchors are updated in the store. If the bundle has not changed (which can be checked using the bundle checksum), then the anchors in the bundle may not be updated.

Specified by:

refreshBundle in interface BundleRefreshProcessor

Parameters:

bundle - The bundle that will be updated.