com.sap.cloud.security.mtls

Class SSLContextFactory

java.lang.Object

com.sap.cloud.security.mtls.SSLContextFactory

public class SSLContextFactory
extends Object

Creates a SSLContext (without Bouncy Castle crypto lib).

Method Summary

Modifier and Type	Method and Description
SSLContext	create(ClientIdentity clientIdentity) Creates a SSLContext which can be used to parameterize your Rest client, in order to support mutual TLS.
SSLContext	create(String x509Certificates, String rsaPrivateKey) Creates a SSLContext which can be used to parameterize your Rest client, in order to support mutual TLS.
KeyStore	createKeyStore(ClientIdentity clientIdentity) Initializes a KeyStore which can be used to parameterize your Rest client, in order to support mutual TLS.
static SSLContextFactory	getInstance()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getInstance

public static SSLContextFactory getInstance()

create

public SSLContext create(String x509Certificates,
                         String rsaPrivateKey)
                  throws GeneralSecurityException,
                         IOException

Creates a SSLContext which can be used to parameterize your Rest client, in order to support mutual TLS.

Parameters:

x509Certificates - you can get from your Service Configuration OAuth2ServiceConfiguration.getClientIdentity()

rsaPrivateKey - you can get from your Service ConfigurationOAuth2ServiceConfiguration.getClientIdentity()

Returns:

a new SSLContext instance

Throws:

GeneralSecurityException - in case of key parsing errors

IOException - in case of KeyStore initialization errors

create

public SSLContext create(ClientIdentity clientIdentity)
                  throws GeneralSecurityException,
                         IOException

Creates a SSLContext which can be used to parameterize your Rest client, in order to support mutual TLS.

Parameters:

clientIdentity - you can get from your Service Configuration OAuth2ServiceConfiguration.getClientIdentity()

Returns:

a new SSLContext instance

Throws:

GeneralSecurityException - in case of key parsing errors

IOException - in case of KeyStore initialization errors

createKeyStore

public KeyStore createKeyStore(ClientIdentity clientIdentity)
                        throws GeneralSecurityException,
                               IOException

Initializes a KeyStore which can be used to parameterize your Rest client, in order to support mutual TLS.

Parameters:

clientIdentity - you can get from your Service Configuration OAuth2ServiceConfiguration.getClientIdentity()

Returns:

a new KeyStore instance

Throws:

GeneralSecurityException - in case of key parsing errors

IOException - in case of KeyStore initialization errors