Package com.yahoo.security

Class MutableX509TrustManager

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

com.yahoo.security.MutableX509TrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class MutableX509TrustManager
extends X509ExtendedTrustManager

A X509ExtendedTrustManager which can be updated with new CA certificates while in use.

Author:

bjorncs

Constructor Summary

Constructors

Constructor	Description
MutableX509TrustManager()
MutableX509TrustManager(KeyStore truststore)

Method Summary

Modifier and Type	Method	Description
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkClientTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
void	checkServerTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
X509Certificate[]	getAcceptedIssuers()
void	updateTruststore(KeyStore truststore)
void	useDefaultTruststore()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

MutableX509TrustManager

public MutableX509TrustManager(KeyStore truststore)

MutableX509TrustManager

public MutableX509TrustManager()

Method Details

updateTruststore

public void updateTruststore(KeyStore truststore)

useDefaultTruststore

public void useDefaultTruststore()

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()