nl.altindag.ssl.trustmanager

Class CompositeX509ExtendedTrustManager

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

nl.altindag.ssl.trustmanager.CompositeX509ExtendedTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public final class CompositeX509ExtendedTrustManager
extends X509ExtendedTrustManager

CompositeX509ExtendedTrustManager is a wrapper for a collection of TrustManagers. It has the ability to validate a certificate chain against multiple TrustManagers. If any one of the composed managers trusts a certificate chain, then it is trusted by the composite manager. The TrustManager can be build from one or more of any combination provided within the TrustManagerUtils.TrustManagerBuilder.

This includes:

     - Any amount of custom TrustManagers
     - Any amount of custom TrustStores
 

NOTE: Please don't use this class directly as it is part of the internal API. Class name and methods can be changed any time. Instead use the TrustManagerUtils which provides the same functionality while it has a stable API because it is part of the public API.

Author:

Cody Ray, Hakan Altindag

See Also:

http://stackoverflow.com/questions/1793979/registering-multiple-keystores-in-jvm , http://codyaray.com/2013/04/java-ssl-with-multiple-keystores

Field Summary

Fields

Modifier and Type	Field and Description
static String	CERTIFICATE_EXCEPTION_MESSAGE

Constructor Summary

Constructors

Constructor and Description
CompositeX509ExtendedTrustManager(List<? extends X509ExtendedTrustManager> trustManagers)

Method Summary

Modifier and Type	Method and Description
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkClientTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
void	checkServerTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
default void	checkTrusted(nl.altindag.ssl.trustmanager.TrustManagerConsumer callBackConsumer)
X509Certificate[]	getAcceptedIssuers()
List<X509ExtendedTrustManager>	getTrustManagers()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CERTIFICATE_EXCEPTION_MESSAGE

public static final String CERTIFICATE_EXCEPTION_MESSAGE

See Also:

Constant Field Values

Constructor Detail

CompositeX509ExtendedTrustManager

public CompositeX509ExtendedTrustManager(List<? extends X509ExtendedTrustManager> trustManagers)

Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType,
                               Socket socket)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType,
                               SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType,
                               Socket socket)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType,
                               SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager

getTrustManagers

public List<X509ExtendedTrustManager> getTrustManagers()

checkTrusted

public void checkTrusted(nl.altindag.ssl.trustmanager.TrustManagerConsumer callBackConsumer)
                  throws CertificateException

Throws:

CertificateException