Package org.graylog2.security

Class DefaultX509TrustManager

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

org.graylog2.security.DefaultX509TrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class DefaultX509TrustManager
extends X509ExtendedTrustManager

Constructor Summary

Constructors

Constructor	Description
DefaultX509TrustManager(String host)
DefaultX509TrustManager(String host, KeyStore keyStore)
DefaultX509TrustManager(List<String> hosts)	Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.
DefaultX509TrustManager(List<String> hosts, KeyStore keyStore)	Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.

Method Summary

Modifier and Type	Method	Description
void	checkClientTrusted(X509Certificate[] x509Certificates, String s)
void	checkClientTrusted(X509Certificate[] x509Certificates, String s, Socket socket)
void	checkClientTrusted(X509Certificate[] x509Certificates, String s, SSLEngine sslEngine)
void	checkServerTrusted(X509Certificate[] x509Certificates, String s)
void	checkServerTrusted(X509Certificate[] x509Certificates, String s, Socket socket)
void	checkServerTrusted(X509Certificate[] x509Certificates, String s, SSLEngine sslEngine)
X509Certificate[]	getAcceptedIssuers()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DefaultX509TrustManager

public DefaultX509TrustManager(String host)
                        throws NoSuchAlgorithmException,
KeyStoreException

Throws:

NoSuchAlgorithmException

KeyStoreException

DefaultX509TrustManager

public DefaultX509TrustManager(List<String> hosts)
                        throws NoSuchAlgorithmException,
KeyStoreException

Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.

Note: ANY matching host from the list is accepted.
E.g.: Given a host list [A,B], the server B is allowed to offer a certificate issued to A

Parameters:

hosts - The hosts to check the certificate subject against

Throws:

NoSuchAlgorithmException

KeyStoreException

DefaultX509TrustManager

public DefaultX509TrustManager(String host,
 KeyStore keyStore)
                        throws NoSuchAlgorithmException,
KeyStoreException

Throws:

NoSuchAlgorithmException

KeyStoreException

DefaultX509TrustManager

public DefaultX509TrustManager(List<String> hosts,
 KeyStore keyStore)
                        throws NoSuchAlgorithmException,
KeyStoreException

Create a X509TrustManager that verifies the certificate chain and checks whether the cert matches one of the given hosts in the list.

Note: ANY matching host from the list is accepted.
E.g.: Given a host list [A,B], the server B is allowed to offer a certificate issued to A

Parameters:

hosts - The hosts to check the certificate subject against

keyStore - The trusted KeyStore

Throws:

NoSuchAlgorithmException

KeyStoreException

Method Details

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

checkServerTrusted

public void checkServerTrusted(X509Certificate[] x509Certificates,
 String s)
                        throws CertificateException

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] x509Certificates,
 String s,
 Socket socket)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] x509Certificates,
 String s,
 SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] x509Certificates,
 String s,
 SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] x509Certificates,
 String s,
 Socket socket)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] x509Certificates,
 String s)
                        throws CertificateException

Throws:

CertificateException