Module nl.altindag.ssl

Package nl.altindag.ssl.trustmanager

Class AggregatedX509ExtendedTrustManager

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

nl.altindag.ssl.trustmanager.AggregatedX509ExtendedTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager, CombinableX509TrustManager

public final class AggregatedX509ExtendedTrustManager
extends X509ExtendedTrustManager
implements CombinableX509TrustManager

AggregatedX509ExtendedTrustManager is a wrapper for a collection of TrustManagers. It has the ability to validate a certificate chain against multiple TrustManagers. If any one of the inner trust managers trusts a certificate chain, then it is trusted by the wrapper trust manager. The TrustManager can be built from one or more of any combination provided within the TrustManagerUtils.TrustManagerBuilder.

This includes:

     - Any amount of custom TrustManagers
     - Any amount of custom TrustStores
 

NOTE: Please don't use this class directly as it is part of the internal API. Class name and methods can be changed any time. Instead use the TrustManagerUtils which provides the same functionality while it has a stable API because it is part of the public API.

See Also:

• http://stackoverflow.com/questions/1793979/registering-multiple-keystores-in-jvm
• http://codyaray.com/2013/04/java-ssl-with-multiple-keystores

Field Summary

Fields

Modifier and Type	Field	Description
private final List<X509ExtendedTrustManager>	trustManagers

Fields inherited from interface nl.altindag.ssl.trustmanager.CombinableX509TrustManager

CERTIFICATE_EXCEPTION_MESSAGE

Constructor Summary

Constructors

Constructor	Description
AggregatedX509ExtendedTrustManager(List<? extends X509ExtendedTrustManager> trustManagers)

Method Summary

Modifier and Type	Method	Description
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkClientTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
void	checkServerTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
X509Certificate[]	getAcceptedIssuers()
List<X509ExtendedTrustManager>	getInnerTrustManagers()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface nl.altindag.ssl.trustmanager.CombinableX509TrustManager

checkTrusted

Field Details

trustManagers

private final List<X509ExtendedTrustManager> trustManagers

Constructor Details

AggregatedX509ExtendedTrustManager

public AggregatedX509ExtendedTrustManager(List<? extends X509ExtendedTrustManager> trustManagers)

Method Details

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine sslEngine)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager

getInnerTrustManagers

public List<X509ExtendedTrustManager> getInnerTrustManagers()

Specified by:

getInnerTrustManagers in interface CombinableX509TrustManager