Package org.apache.qpid.server.security

Class AbstractTrustStore<X extends AbstractTrustStore<X>>

java.lang.Object

org.apache.qpid.server.model.AbstractConfiguredObject<X>

org.apache.qpid.server.security.AbstractTrustStore<X>

All Implemented Interfaces:

ConfiguredObject<X>, ContextProvider, PermissionedObject, TaskExecutorProvider, TrustStore<X>

Direct Known Subclasses:

FileTrustStoreImpl, ManagedPeerCertificateTrustStoreImpl, NonJavaTrustStoreImpl, SiteSpecificTrustStoreImpl

public abstract class AbstractTrustStore<X extends AbstractTrustStore<X>>
extends AbstractConfiguredObject<X>
implements TrustStore<X>

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.qpid.server.model.AbstractConfiguredObject

AbstractConfiguredObject.CallableWithArgument<V,A>, AbstractConfiguredObject.ChainedListenableFuture<V>, AbstractConfiguredObject.ChainedSettableFuture<V>, AbstractConfiguredObject.DuplicateIdException, AbstractConfiguredObject.DuplicateNameException

Field Summary

Fields

Modifier and Type	Field	Description
protected static long	ONE_DAY

Fields inherited from class org.apache.qpid.server.model.AbstractConfiguredObject

SECURED_STRING_VALUE

Fields inherited from interface org.apache.qpid.server.model.ConfiguredObject

AWAIT_ATTAINMENT_TIMEOUT, CONTEXT, CREATED_BY, CREATED_TIME, DEFAULT_AWAIT_ATTAINMENT_TIMEOUT, DESCRIPTION, DESIRED_STATE, DURABLE, ID, LAST_UPDATED_BY, LAST_UPDATED_TIME, LIFETIME_POLICY, NAME, OVER_SIZED_ATTRIBUTE_ALTERNATIVE_TEXT, STATE, TYPE

Fields inherited from interface org.apache.qpid.server.model.TrustStore

CERTIFICATE_EXPIRY_CHECK_FREQUENCY, CERTIFICATE_EXPIRY_WARN_PERIOD, CERTIFICATE_REVOCATION_CHECK_ENABLED, CERTIFICATE_REVOCATION_CHECK_OF_ONLY_END_ENTITY_CERTIFICATES, CERTIFICATE_REVOCATION_CHECK_WITH_IGNORING_SOFT_FAILURES, CERTIFICATE_REVOCATION_CHECK_WITH_NO_FALLBACK, CERTIFICATE_REVOCATION_CHECK_WITH_PREFERRING_CERTIFICATE_REVOCATION_LIST, CERTIFICATE_REVOCATION_LIST_URL, DEFAULT_CERTIFICATE_EXPIRY_CHECK_FREQUENCY, DEFAULT_CERTIFICATE_EXPIRY_WARN_PERIOD, DEFAULT_TRUST_ANCHOR_VALIDITY_ENFORCED, TRUST_ANCHOR_VALIDITY_ENFORCED

Method Summary

Modifier and Type	Method	Description
protected void	changeAttributes(Map<String,Object> attributes)
Broker<?>	getBroker()
List<CertificateDetails>	getCertificateDetails()
int	getCertificateExpiryCheckFrequency()
int	getCertificateExpiryWarnPeriod()
String	getCertificateRevocationListPath()
String	getCertificateRevocationListUrl()
List<VirtualHostNode<?>>	getExcludedVirtualHostNodeMessageSources()
List<VirtualHostNode<?>>	getIncludedVirtualHostNodeMessageSources()
TrustManager[]	getTrustManagers()
protected TrustManager[]	getTrustManagers(KeyStore ts)
protected abstract TrustManager[]	getTrustManagersInternal()
protected static URL	getUrlFromString(String urlString)
protected abstract void	initialize()
boolean	isCertificateRevocationCheckEnabled()
boolean	isCertificateRevocationCheckOfOnlyEndEntityCertificates()
boolean	isCertificateRevocationCheckWithIgnoringSoftFailures()
boolean	isCertificateRevocationCheckWithNoFallback()
boolean	isCertificateRevocationCheckWithPreferringCertificateRevocationList()
boolean	isExposedAsMessageSource()
boolean	isTrustAnchorValidityEnforced()
protected void	logCreated(Map<String,Object> attributes, Outcome outcome)
protected void	logDeleted(Outcome outcome)
protected void	logOperation(String operation)
protected void	logRecovered(Outcome outcome)
protected void	logUpdated(Map<String,Object> attributes, Outcome outcome)
protected com.google.common.util.concurrent.ListenableFuture<Void>	onClose()
protected com.google.common.util.concurrent.ListenableFuture<Void>	onDelete()
void	onValidate()	Validation performed for configured object creation and opening.
protected void	validateChange(ConfiguredObject<?> proxyForValidation, Set<String> changedAttributes)

Methods inherited from class org.apache.qpid.server.model.AbstractConfiguredObject

addChangeListener, addChildAsync, addFutureCallback, applyToChildren, asObjectRecord, attainState, attributesAsString, attributeSet, authorise, authorise, authorise, authoriseCreateChild, awaitChildClassToAttainState, awaitChildClassToAttainState, beforeClose, beforeDelete, childAdded, childRemoved, close, closeAsync, closeChildren, create, createAsync, createChild, createChildAsync, decryptSecrets, delete, deleteAsync, deleteChildren, deleteNoChecks, doAfter, doAfter, doAfter, doAfter, doAfter, doAfter, doAfterAlways, doAfterAlways, doCreation, doOnConfigThread, doOpening, doResolution, doSync, doSync, doValidation, findConfiguredObject, forceUpdateAllSecureAttributes, getAccessControl, getActualAttributes, getAncestor, getAttainedChildById, getAttainedChildByName, getAttribute, getAttributeNames, getCategoryClass, getChildById, getChildByName, getChildExecutor, getChildren, getContext, getContextKeys, getContextValue, getContextValue, getCreatedBy, getCreatedTime, getDescription, getDesiredState, getId, getLastOpenedTime, getLastUpdatedBy, getLastUpdatedTime, getLifetimePolicy, getModel, getName, getObjectFactory, getParent, getState, getStatistics, getStatistics, getSubjectWithAddedSystemRights, getSystemPrincipal, getSystemTaskControllerContext, getSystemTaskSubject, getSystemTaskSubject, getTaskExecutor, getType, getTypeClass, getUserPreferences, handleExceptionOnOpen, hasEncrypter, isDurable, isSystemProcess, isSystemSubject, managesChildStorage, newToken, notifyStateChanged, onCreate, onExceptionInOpen, onOpen, onResolve, open, openAsync, postResolve, postResolveChildren, postSetAttributes, registerWithParents, removeChangeListener, removeContextVariable, rethrowRuntimeExceptionsOnOpen, runTask, setAttributes, setAttributesAsync, setContextVariable, setEncrypter, setState, setUserPreferences, start, startAsync, stop, toString, updateModel, validateChildDelete, validateOnCreate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.apache.qpid.server.model.ConfiguredObject

addChangeListener, asObjectRecord, authorise, authorise, authorise, close, closeAsync, createChild, createChildAsync, decryptSecrets, delete, deleteAsync, findConfiguredObject, getActualAttributes, getAttainedChildById, getAttainedChildByName, getAttribute, getAttributeNames, getCategoryClass, getChildById, getChildByName, getChildExecutor, getChildren, getContext, getCreatedBy, getCreatedTime, getDescription, getDesiredState, getId, getLastOpenedTime, getLastUpdatedBy, getLastUpdatedTime, getLifetimePolicy, getModel, getObjectFactory, getParent, getState, getStatistics, getStatistics, getType, getTypeClass, getUserPreferences, hasEncrypter, isDurable, managesChildStorage, newToken, open, openAsync, removeChangeListener, removeContextVariable, setAttributes, setAttributesAsync, setContextVariable, setUserPreferences

Methods inherited from interface org.apache.qpid.server.model.ContextProvider

getContextKeys, getContextValue, getContextValue

Methods inherited from interface org.apache.qpid.server.model.TaskExecutorProvider

getTaskExecutor

Methods inherited from interface org.apache.qpid.server.model.TrustStore

getCertificates, getName

Field Detail

ONE_DAY

protected static final long ONE_DAY

See Also:

Constant Field Values

Method Detail

getBroker

public final Broker<?> getBroker()

initialize

protected abstract void initialize()

changeAttributes

protected void changeAttributes(Map<String,Object> attributes)

Overrides:

changeAttributes in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

onValidate

public void onValidate()

Description copied from class: AbstractConfiguredObject

Validation performed for configured object creation and opening.

Overrides:

onValidate in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

validateChange

protected void validateChange(ConfiguredObject<?> proxyForValidation,
                              Set<String> changedAttributes)

Overrides:

validateChange in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

onClose

protected com.google.common.util.concurrent.ListenableFuture<Void> onClose()

Overrides:

onClose in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

logCreated

protected void logCreated(Map<String,Object> attributes,
                          Outcome outcome)

Overrides:

logCreated in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

logRecovered

protected void logRecovered(Outcome outcome)

Overrides:

logRecovered in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

logDeleted

protected void logDeleted(Outcome outcome)

Overrides:

logDeleted in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

logUpdated

protected void logUpdated(Map<String,Object> attributes,
                          Outcome outcome)

Overrides:

logUpdated in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

logOperation

protected void logOperation(String operation)

Overrides:

logOperation in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

onDelete

protected com.google.common.util.concurrent.ListenableFuture<Void> onDelete()

Overrides:

onDelete in class AbstractConfiguredObject<X extends AbstractTrustStore<X>>

getTrustManagers

public final TrustManager[] getTrustManagers()
                                      throws GeneralSecurityException

Specified by:

getTrustManagers in interface TrustStore<X extends AbstractTrustStore<X>>

Throws:

GeneralSecurityException

getTrustManagersInternal

protected abstract TrustManager[] getTrustManagersInternal()
                                                    throws GeneralSecurityException

Throws:

GeneralSecurityException

getTrustManagers

protected TrustManager[] getTrustManagers(KeyStore ts)

getUrlFromString

protected static URL getUrlFromString(String urlString)
                               throws MalformedURLException

Throws:

MalformedURLException

getCertificateExpiryWarnPeriod

public final int getCertificateExpiryWarnPeriod()

Specified by:

getCertificateExpiryWarnPeriod in interface TrustStore<X extends AbstractTrustStore<X>>

getCertificateExpiryCheckFrequency

public int getCertificateExpiryCheckFrequency()

Specified by:

getCertificateExpiryCheckFrequency in interface TrustStore<X extends AbstractTrustStore<X>>

isTrustAnchorValidityEnforced

public boolean isTrustAnchorValidityEnforced()

Specified by:

isTrustAnchorValidityEnforced in interface TrustStore<X extends AbstractTrustStore<X>>

isCertificateRevocationCheckEnabled

public boolean isCertificateRevocationCheckEnabled()

Specified by:

isCertificateRevocationCheckEnabled in interface TrustStore<X extends AbstractTrustStore<X>>

isCertificateRevocationCheckOfOnlyEndEntityCertificates

public boolean isCertificateRevocationCheckOfOnlyEndEntityCertificates()

Specified by:

isCertificateRevocationCheckOfOnlyEndEntityCertificates in interface TrustStore<X extends AbstractTrustStore<X>>

isCertificateRevocationCheckWithPreferringCertificateRevocationList

public boolean isCertificateRevocationCheckWithPreferringCertificateRevocationList()

Specified by:

isCertificateRevocationCheckWithPreferringCertificateRevocationList in interface TrustStore<X extends AbstractTrustStore<X>>

isCertificateRevocationCheckWithNoFallback

public boolean isCertificateRevocationCheckWithNoFallback()

Specified by:

isCertificateRevocationCheckWithNoFallback in interface TrustStore<X extends AbstractTrustStore<X>>

isCertificateRevocationCheckWithIgnoringSoftFailures

public boolean isCertificateRevocationCheckWithIgnoringSoftFailures()

Specified by:

isCertificateRevocationCheckWithIgnoringSoftFailures in interface TrustStore<X extends AbstractTrustStore<X>>

getCertificateRevocationListUrl

public String getCertificateRevocationListUrl()

Specified by:

getCertificateRevocationListUrl in interface TrustStore<X extends AbstractTrustStore<X>>

getCertificateRevocationListPath

public String getCertificateRevocationListPath()

Specified by:

getCertificateRevocationListPath in interface TrustStore<X extends AbstractTrustStore<X>>

isExposedAsMessageSource

public boolean isExposedAsMessageSource()

Specified by:

isExposedAsMessageSource in interface TrustStore<X extends AbstractTrustStore<X>>

getIncludedVirtualHostNodeMessageSources

public List<VirtualHostNode<?>> getIncludedVirtualHostNodeMessageSources()

Specified by:

getIncludedVirtualHostNodeMessageSources in interface TrustStore<X extends AbstractTrustStore<X>>

getExcludedVirtualHostNodeMessageSources

public List<VirtualHostNode<?>> getExcludedVirtualHostNodeMessageSources()

Specified by:

getExcludedVirtualHostNodeMessageSources in interface TrustStore<X extends AbstractTrustStore<X>>

getCertificateDetails

public List<CertificateDetails> getCertificateDetails()

Specified by:

getCertificateDetails in interface TrustStore<X extends AbstractTrustStore<X>>