org.corfudb.security.tls

Class ReloadableTrustManager

java.lang.Object

org.corfudb.security.tls.ReloadableTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class ReloadableTrustManager
extends Object
implements X509TrustManager

This trust manager reloads the trust store whenever a checkClientTrusted or checkServerTrusted is called. Created by zjohnny on 9/18/17.

Constructor Summary

Constructors

Constructor and Description
ReloadableTrustManager(String trustStorePath, String trustPasswordPath) Constructor.

Method Summary

Modifier and Type	Method and Description
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType)
X509Certificate[]	getAcceptedIssuers()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ReloadableTrustManager

public ReloadableTrustManager(String trustStorePath,
                              String trustPasswordPath)
                       throws SSLException

Constructor.

Parameters:

trustStorePath - Location of trust store.

trustPasswordPath - Location of trust store password.

Throws:

SSLException - Thrown when there's an issue with loading the trust store.

Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager