|
||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | |||||||||
java.lang.Objectorg.glite.security.trustmanager.OpensslTrustmanager
public class OpensslTrustmanager
| Constructor Summary | |
|---|---|
OpensslTrustmanager(java.lang.String dir,
boolean crlRequired)
Deprecated. use constructor OpensslTrustmanager(String, boolean, CaseInsensitiveProperties) instead |
|
OpensslTrustmanager(java.lang.String dir,
boolean crlRequired,
CaseInsensitiveProperties props)
|
|
| Method Summary | |
|---|---|
void |
checkClientTrusted(java.security.cert.X509Certificate[] arg0,
java.lang.String arg1)
|
void |
checkServerTrusted(java.security.cert.X509Certificate[] arg0,
java.lang.String arg1)
|
void |
checkUpdate()
Checks whether the trustanchors need updates and if they do updates them. |
java.security.cert.X509Certificate[] |
getAcceptedIssuers()
|
static java.lang.String |
getOpenSSLCAHash(java.security.cert.X509Certificate cert)
Generates the hex hash of the DN used by openssl to name the CA certificate files. |
static java.lang.String |
getOpenSSLCAHash(org.bouncycastle.asn1.x509.X509Name subject)
Generates the hex hash of the DN used by openssl to name the CA certificate files. |
| Methods inherited from class java.lang.Object |
|---|
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
| Constructor Detail |
|---|
public OpensslTrustmanager(java.lang.String dir,
boolean crlRequired)
throws java.io.IOException,
java.security.cert.CertificateException,
java.text.ParseException,
java.security.NoSuchProviderException
dir - The trust anchor directory (often /etc/grid-security/certificates)crlRequired - Whether the CRLs are required. If they are and the CRL is absent or expired all certs from that
CA are rejected.
java.io.IOException - in case there is a read error during reading of CA certs, CRLs or namespace files.
java.security.cert.CertificateException - in case there is problems handling the CA certs.
java.text.ParseException - in case there is problems parsing the namespace files.
java.security.NoSuchProviderException - in case Bouncycastle provider is not found and initialization fails.
public OpensslTrustmanager(java.lang.String dir,
boolean crlRequired,
CaseInsensitiveProperties props)
throws java.io.IOException,
java.security.cert.CertificateException,
java.text.ParseException,
java.security.NoSuchProviderException
dir - The trust anchor directory (often /etc/grid-security/certificates)crlRequired - Whether the CRLs are required. If they are and the CRL is absent or expired all certs from that
CA are rejected.props - the properties to pass along for child classes to use.
java.io.IOException - in case there is a read error during reading of CA certs, CRLs or namespace files.
java.security.cert.CertificateException - in case there is problems handling the CA certs.
java.text.ParseException - in case there is problems parsing the namespace files.
java.security.NoSuchProviderException - in case Bouncycastle provider is not found and initialization fails.| Method Detail |
|---|
public void checkClientTrusted(java.security.cert.X509Certificate[] arg0,
java.lang.String arg1)
throws java.security.cert.CertificateException
checkClientTrusted in interface javax.net.ssl.X509TrustManagerjava.security.cert.CertificateException
public void checkServerTrusted(java.security.cert.X509Certificate[] arg0,
java.lang.String arg1)
throws java.security.cert.CertificateException
checkServerTrusted in interface javax.net.ssl.X509TrustManagerjava.security.cert.CertificateExceptionpublic java.security.cert.X509Certificate[] getAcceptedIssuers()
getAcceptedIssuers in interface javax.net.ssl.X509TrustManagerpublic static java.lang.String getOpenSSLCAHash(org.bouncycastle.asn1.x509.X509Name subject)
subject - the DN to hash.
public void checkUpdate()
throws java.io.IOException,
java.security.cert.CertificateException,
java.text.ParseException
java.io.IOException - thrown in case a file reading fails.
java.security.cert.CertificateException - thrown if there are problems with the certificates.
java.text.ParseException - thrown in case there are problems parsing certificates, CRLs or namespaces.public static java.lang.String getOpenSSLCAHash(java.security.cert.X509Certificate cert)
cert - the certificate from which the subject DN is taken and hashed.
|
||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | |||||||||