Package com.yahoo.security

Class AutoReloadingX509KeyManager

java.lang.Object

javax.net.ssl.X509ExtendedKeyManager

com.yahoo.security.AutoReloadingX509KeyManager

All Implemented Interfaces:

AutoCloseable, KeyManager, X509KeyManager

public class AutoReloadingX509KeyManager
extends X509ExtendedKeyManager
implements AutoCloseable

A X509ExtendedKeyManager that reloads the certificate and private key from file regularly.

Author:

bjorncs

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CERTIFICATE_ALIAS

Method Summary

Modifier and Type	Method	Description
String	chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket)
String	chooseEngineClientAlias(String[] keyType, Principal[] issuers, SSLEngine engine)
String	chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine)
String	chooseServerAlias(String keyType, Principal[] issuers, Socket socket)
void	close()
static AutoReloadingX509KeyManager	fromPemFiles(Path privateKeyFile, Path certificatesFile)
X509Certificate[]	getCertificateChain(String alias)
String[]	getClientAliases(String keyType, Principal[] issuers)
X509CertificateWithKey	getCurrentCertificateWithKey()
PrivateKey	getPrivateKey(String alias)
String[]	getServerAliases(String keyType, Principal[] issuers)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CERTIFICATE_ALIAS

public static final String CERTIFICATE_ALIAS

See Also:

• Constant Field Values

Method Details

fromPemFiles

public static AutoReloadingX509KeyManager fromPemFiles(Path privateKeyFile,
 Path certificatesFile)

getCurrentCertificateWithKey

public X509CertificateWithKey getCurrentCertificateWithKey()

close

public void close()

Specified by:

close in interface AutoCloseable

getServerAliases

public String[] getServerAliases(String keyType,
 Principal[] issuers)

Specified by:

getServerAliases in interface X509KeyManager

getClientAliases

public String[] getClientAliases(String keyType,
 Principal[] issuers)

Specified by:

getClientAliases in interface X509KeyManager

chooseServerAlias

public String chooseServerAlias(String keyType,
 Principal[] issuers,
 Socket socket)

Specified by:

chooseServerAlias in interface X509KeyManager

chooseClientAlias

public String chooseClientAlias(String[] keyType,
 Principal[] issuers,
 Socket socket)

Specified by:

chooseClientAlias in interface X509KeyManager

chooseEngineServerAlias

public String chooseEngineServerAlias(String keyType,
 Principal[] issuers,
 SSLEngine engine)

Overrides:

chooseEngineServerAlias in class X509ExtendedKeyManager

chooseEngineClientAlias

public String chooseEngineClientAlias(String[] keyType,
 Principal[] issuers,
 SSLEngine engine)

Overrides:

chooseEngineClientAlias in class X509ExtendedKeyManager

getCertificateChain

public X509Certificate[] getCertificateChain(String alias)

Specified by:

getCertificateChain in interface X509KeyManager

getPrivateKey

public PrivateKey getPrivateKey(String alias)

Specified by:

getPrivateKey in interface X509KeyManager