Package com.yahoo.security

Class MutableX509KeyManager

java.lang.Object

javax.net.ssl.X509ExtendedKeyManager

com.yahoo.security.MutableX509KeyManager

All Implemented Interfaces:

KeyManager, X509KeyManager

public class MutableX509KeyManager
extends X509ExtendedKeyManager

A X509ExtendedKeyManager which can be updated with new certificate chain and private key while in use. The implementations assumes that aliases are retrieved from the same thread as the certificate chain and private key. This is case for OpenJDK 11.

Author:

bjorncs

Constructor Summary

Constructors

Constructor	Description
MutableX509KeyManager()
MutableX509KeyManager(KeyStore keystore, char[] password)

Method Summary

Modifier and Type	Method	Description
String	chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket)
String	chooseEngineClientAlias(String[] keyType, Principal[] issuers, SSLEngine engine)
String	chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine)
String	chooseServerAlias(String keyType, Principal[] issuers, Socket socket)
X509ExtendedKeyManager	currentManager()
X509Certificate[]	getCertificateChain(String alias)
String[]	getClientAliases(String keyType, Principal[] issuers)
PrivateKey	getPrivateKey(String alias)
String[]	getServerAliases(String keyType, Principal[] issuers)
void	updateKeystore(KeyStore keystore, char[] password)
void	useDefaultKeystore()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

MutableX509KeyManager

public MutableX509KeyManager(KeyStore keystore,
 char[] password)

MutableX509KeyManager

public MutableX509KeyManager()

Method Details

updateKeystore

public void updateKeystore(KeyStore keystore,
 char[] password)

useDefaultKeystore

public void useDefaultKeystore()

currentManager

public X509ExtendedKeyManager currentManager()

getServerAliases

public String[] getServerAliases(String keyType,
 Principal[] issuers)

getClientAliases

public String[] getClientAliases(String keyType,
 Principal[] issuers)

chooseServerAlias

public String chooseServerAlias(String keyType,
 Principal[] issuers,
 Socket socket)

chooseClientAlias

public String chooseClientAlias(String[] keyType,
 Principal[] issuers,
 Socket socket)

chooseEngineServerAlias

public String chooseEngineServerAlias(String keyType,
 Principal[] issuers,
 SSLEngine engine)

Overrides:

chooseEngineServerAlias in class X509ExtendedKeyManager

chooseEngineClientAlias

public String chooseEngineClientAlias(String[] keyType,
 Principal[] issuers,
 SSLEngine engine)

Overrides:

chooseEngineClientAlias in class X509ExtendedKeyManager

getCertificateChain

public X509Certificate[] getCertificateChain(String alias)

getPrivateKey

public PrivateKey getPrivateKey(String alias)