org.graylog2.security

Class DefaultX509TrustManager

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

org.graylog2.security.DefaultX509TrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class DefaultX509TrustManager
extends X509ExtendedTrustManager

Constructor Summary

Constructors

Constructor and Description
DefaultX509TrustManager(List<String> hosts) Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.
DefaultX509TrustManager(List<String> hosts, KeyStore keyStore) Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.
DefaultX509TrustManager(String host)
DefaultX509TrustManager(String host, KeyStore keyStore)

Method Summary

Modifier and Type	Method and Description
void	checkClientTrusted(X509Certificate[] x509Certificates, String s)
void	checkClientTrusted(X509Certificate[] x509Certificates, String s, Socket socket)
void	checkClientTrusted(X509Certificate[] x509Certificates, String s, SSLEngine sslEngine)
void	checkServerTrusted(X509Certificate[] x509Certificates, String s)
void	checkServerTrusted(X509Certificate[] x509Certificates, String s, Socket socket)
void	checkServerTrusted(X509Certificate[] x509Certificates, String s, SSLEngine sslEngine)
X509Certificate[]	getAcceptedIssuers()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultX509TrustManager

public DefaultX509TrustManager(String host)
                        throws NoSuchAlgorithmException,
                               KeyStoreException

Throws:

NoSuchAlgorithmException

KeyStoreException

DefaultX509TrustManager

public DefaultX509TrustManager(List<String> hosts)
                        throws NoSuchAlgorithmException,
                               KeyStoreException

Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.

Note: ANY matching host from the list is accepted.
E.g.: Given a host list [A,B], the server B is allowed to offer a certificate issued to A

Parameters:

hosts - The hosts to check the certificate subject against

Throws:

NoSuchAlgorithmException

KeyStoreException

DefaultX509TrustManager

public DefaultX509TrustManager(String host,
                               KeyStore keyStore)
                        throws NoSuchAlgorithmException,
                               KeyStoreException

Throws:

NoSuchAlgorithmException

KeyStoreException

DefaultX509TrustManager

public DefaultX509TrustManager(List<String> hosts,
                               KeyStore keyStore)
                        throws NoSuchAlgorithmException,
                               KeyStoreException

Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.

Note: ANY matching host from the list is accepted.
E.g.: Given a host list [A,B], the server B is allowed to offer a certificate issued to A

Parameters:

hosts - The hosts to check the certificate subject against

keyStore - The trusted KeyStore

Throws:

NoSuchAlgorithmException

KeyStoreException

Method Detail

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

checkServerTrusted

public void checkServerTrusted(X509Certificate[] x509Certificates,
                               String s)
                        throws CertificateException

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] x509Certificates,
                               String s,
                               Socket socket)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] x509Certificates,
                               String s,
                               SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] x509Certificates,
                               String s,
                               SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] x509Certificates,
                               String s,
                               Socket socket)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] x509Certificates,
                               String s)
                        throws CertificateException

Throws:

CertificateException