Module nl.altindag.ssl

Package nl.altindag.ssl.trustmanager

Class InflatableX509ExtendedTrustManager

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

nl.altindag.ssl.trustmanager.DelegatingTrustManager<X509ExtendedTrustManager>

nl.altindag.ssl.trustmanager.DelegatingX509ExtendedTrustManager

nl.altindag.ssl.trustmanager.HotSwappableX509ExtendedTrustManager

nl.altindag.ssl.trustmanager.InflatableX509ExtendedTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class InflatableX509ExtendedTrustManager
extends HotSwappableX509ExtendedTrustManager

NOTE: Please don't use this class directly as it is part of the internal API. Class name and methods can be changed any time. Instead use the TrustManagerUtils which provides the same functionality while it has a stable API because it is part of the public API.

The Inflatable TrustManager has the capability to grow with newly trusted certificates at any moment in time. It can be either added manually with TrustManagerUtils.addCertificate(X509ExtendedTrustManager, List) or by providing a predicate in the constructor of this class so it can evaluate every certificate whether it should be trusted or not. Next to that it will write the trusted certificates to the file system as a keystore file if the properties are provided in the constructor. If this is not the case it will still use an in-memory keystore to maintain the newly added certificates, however the state will get lost when the application has been restarted.

Field Summary

Fields

Modifier and Type	Field	Description
private static final BiPredicate<KeyStore,X509Certificate>	IGNORE_DUPLICATE_CHECKER
private static final nl.altindag.sude.Logger	LOGGER
private final Predicate<TrustManagerParameters>	trustManagerParametersPredicate
private final KeyStore	trustStore
private final char[]	trustStorePassword
private final Path	trustStorePath

Fields inherited from class nl.altindag.ssl.trustmanager.HotSwappableX509ExtendedTrustManager

readLock, writeLock

Fields inherited from class nl.altindag.ssl.trustmanager.DelegatingTrustManager

trustManager

Constructor Summary

Constructors

Constructor	Description
InflatableX509ExtendedTrustManager()
InflatableX509ExtendedTrustManager(Path trustStorePath, char[] trustStorePassword, String trustStoreType, Predicate<TrustManagerParameters> trustManagerParametersPredicate)

Method Summary

Modifier and Type	Method	Description
void	addCertificates(List<X509Certificate> certificates)
private void	addCertificates(List<X509Certificate> certificates, BiPredicate<KeyStore,X509Certificate> duplicateChecker)
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkClientTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
void	checkServerTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine sslEngine)
private void	checkTrusted(TrustManagerRunnable trustManagerRunnable, X509Certificate[] chain, String authType, Socket socket, SSLEngine sslEngine)
private String	generateAlias(Certificate certificate)
private Optional<Path>	getTrustStorePath()

Methods inherited from class nl.altindag.ssl.trustmanager.HotSwappableX509ExtendedTrustManager

getAcceptedIssuers, getInnerTrustManager, setTrustManager

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOGGER

private static final nl.altindag.sude.Logger LOGGER

IGNORE_DUPLICATE_CHECKER

private static final BiPredicate<KeyStore,X509Certificate> IGNORE_DUPLICATE_CHECKER

trustStore

private final KeyStore trustStore

trustStorePath

private final Path trustStorePath

trustStorePassword

private final char[] trustStorePassword

trustManagerParametersPredicate

private final Predicate<TrustManagerParameters> trustManagerParametersPredicate

Constructor Details

InflatableX509ExtendedTrustManager

public InflatableX509ExtendedTrustManager()

InflatableX509ExtendedTrustManager

public InflatableX509ExtendedTrustManager(Path trustStorePath,
 char[] trustStorePassword,
 String trustStoreType,
 Predicate<TrustManagerParameters> trustManagerParametersPredicate)

Method Details

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Overrides:

checkServerTrusted in class HotSwappableX509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Overrides:

checkServerTrusted in class HotSwappableX509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine sslEngine)
                        throws CertificateException

Overrides:

checkServerTrusted in class HotSwappableX509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Overrides:

checkClientTrusted in class HotSwappableX509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Overrides:

checkClientTrusted in class HotSwappableX509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine sslEngine)
                        throws CertificateException

Overrides:

checkClientTrusted in class HotSwappableX509ExtendedTrustManager

Throws:

CertificateException

checkTrusted

private void checkTrusted(TrustManagerRunnable trustManagerRunnable,
 X509Certificate[] chain,
 String authType,
 Socket socket,
 SSLEngine sslEngine)
                   throws CertificateException

Throws:

CertificateException

addCertificates

public void addCertificates(List<X509Certificate> certificates)

addCertificates

private void addCertificates(List<X509Certificate> certificates,
 BiPredicate<KeyStore,X509Certificate> duplicateChecker)

generateAlias

private String generateAlias(Certificate certificate)

getTrustStorePath

private Optional<Path> getTrustStorePath()