Package com.github.toolarium.security.keystore.impl

Class ToolariumTrustManager

java.lang.Object

com.github.toolarium.security.keystore.impl.ToolariumTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class ToolariumTrustManager
extends Object
implements X509TrustManager

Toolariun TrustManager which logs the verification.

Constructor Summary

Constructors

Constructor	Description
ToolariumTrustManager()	Constructor for ToolariumTrustManager

Method Summary

Modifier and Type	Method	Description
void	addTrustedCertificate(X509Certificate cert)	Adds a trusted certificate
protected void	checkCACertificate(X509Certificate cacert)	Checks the CA certificate
protected void	checkCertificate(X509Certificate cert)	Checks the certificate
protected void	checkCertificateChain(X509Certificate[] chain)	Checks the certificate chain
void	checkClientTrusted(X509Certificate[] chain, String protocol)
void	checkServerTrusted(X509Certificate[] chain, String protocol)
X509Certificate[]	getAcceptedIssuers()
int	getCheckResult()	Gets the check result
protected String	getHostname()	Gets the host name
void	setVerifyCertificate(boolean verifyCertificate)	Set the verify certificate
protected boolean	trustServerCertificate(X509Certificate certificate)	Check if the given certificate should be trust and added to the certificate server list
void	verifyCertificateChain(X509Certificate[] chain, String protocol)	Verifies a certificate chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ToolariumTrustManager

public ToolariumTrustManager()

Constructor for ToolariumTrustManager

Method Details

addTrustedCertificate

public void addTrustedCertificate(X509Certificate cert)

Adds a trusted certificate

Parameters:

cert - the certificate to trust

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String protocol)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

See Also:

• X509TrustManager.checkClientTrusted(java.security.cert.X509Certificate[], java.lang.String)

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String protocol)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

See Also:

• X509TrustManager.checkServerTrusted(java.security.cert.X509Certificate[], java.lang.String)

setVerifyCertificate

public void setVerifyCertificate(boolean verifyCertificate)

Set the verify certificate

Parameters:

verifyCertificate - true to verify certificates

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager

See Also:

• X509TrustManager.getAcceptedIssuers()

getCheckResult

public int getCheckResult()

Gets the check result

Returns:

the check result

verifyCertificateChain

public void verifyCertificateChain(X509Certificate[] chain,
 String protocol)
                            throws CertificateException

Verifies a certificate chain.

Parameters:

chain - a certificate chain

protocol - the protocol

Throws:

CertificateException - in case of error

checkCertificate

protected void checkCertificate(X509Certificate cert)
                         throws CertificateException

Checks the certificate

Parameters:

cert - the certificate to test

Throws:

CertificateException - In case of a certificate error

checkCACertificate

protected void checkCACertificate(X509Certificate cacert)
                           throws CertificateException

Checks the CA certificate

Parameters:

cacert - the certificate to test

Throws:

CertificateException - In case of a certificate error

checkCertificateChain

protected void checkCertificateChain(X509Certificate[] chain)
                              throws CertificateException

Checks the certificate chain

Parameters:

chain - the chain

Throws:

CertificateException - In case of a certificate error

trustServerCertificate

protected boolean trustServerCertificate(X509Certificate certificate)

Check if the given certificate should be trust and added to the certificate server list

Parameters:

certificate - the server certificate

Returns:

true if we trust the server certificate

getHostname

protected String getHostname()

Gets the host name

Returns:

the name