Module nl.altindag.ssl

Package nl.altindag.ssl.util

Class CertificateExtractingClient

java.lang.Object

nl.altindag.ssl.util.CertificateExtractingClient

public class CertificateExtractingClient
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	CertificateExtractingClient.Builder

Field Summary

Fields

Modifier and Type	Field	Description
private static final Pattern	CA_ISSUERS_AUTHORITY_INFO_ACCESS
private final SSLSocketFactory	certificateCapturingSslSocketFactory
private final Map<String,List<X509Certificate>>	certificatesCollector
private final ClientConfig	clientConfig
private final ClientRunnable	clientRunnable
private static final Duration	DEFAULT_TIMEOUT
private static CertificateExtractingClient	instance
private static final nl.altindag.sude.Logger	LOGGER
private final Proxy	proxy
private final boolean	shouldResolveRootCa
private final SSLFactory	sslFactoryForCertificateCapturing
private final Duration	timeout
private final SSLFactory	unsafeSslFactory
private final SSLSocketFactory	unsafeSslSocketFactory

Constructor Summary

Constructors

Modifier	Constructor	Description
private	CertificateExtractingClient(boolean shouldResolveRootCa, Proxy proxy, PasswordAuthentication passwordAuthentication, Duration timeout, ClientRunnable clientRunnable)

Method Summary

Modifier and Type	Method	Description
static CertificateExtractingClient.Builder	builder()
void	call(String url)
void	call(String url, ClientRunnable clientRunnable)
void	clearCertificatesCollector()
(package private) URLConnection	createConnection(URL url)
List<X509Certificate>	get(String url)
Map<String,List<X509Certificate>>	getCertificatesCollector()
(package private) List<X509Certificate>	getCertificatesFromRemoteFile(String issuerLocation, X509Certificate intermediateCertificate)
(package private) static CertificateExtractingClient	getInstance()
(package private) List<X509Certificate>	getRootCaFromAuthorityInfoAccessExtensionIfPresent(X509Certificate certificate)
(package private) List<X509Certificate>	getRootCaFromChainIfPossible(List<X509Certificate> certificates)
(package private) List<X509Certificate>	getRootCaFromJdkTrustedCertificates(X509Certificate intermediateCertificate)
(package private) List<X509Certificate>	getRootCaIfPossible(X509Certificate x509Certificate)
Map<String,List<X509Certificate>>	getSiblings(List<X509Certificate> certificates)	Extracts certificates based on a list of DNS Names from the Subject Alternative Name extension.
(package private) boolean	isIssuerOfIntermediateCertificate(X509Certificate intermediateCertificate, X509Certificate issuer)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOGGER

private static final nl.altindag.sude.Logger LOGGER

CA_ISSUERS_AUTHORITY_INFO_ACCESS

private static final Pattern CA_ISSUERS_AUTHORITY_INFO_ACCESS

DEFAULT_TIMEOUT

private static final Duration DEFAULT_TIMEOUT

instance

private static CertificateExtractingClient instance

shouldResolveRootCa

private final boolean shouldResolveRootCa

proxy

private final Proxy proxy

sslFactoryForCertificateCapturing

private final SSLFactory sslFactoryForCertificateCapturing

unsafeSslFactory

private final SSLFactory unsafeSslFactory

unsafeSslSocketFactory

private final SSLSocketFactory unsafeSslSocketFactory

certificateCapturingSslSocketFactory

private final SSLSocketFactory certificateCapturingSslSocketFactory

certificatesCollector

private final Map<String,List<X509Certificate>> certificatesCollector

timeout

private final Duration timeout

clientConfig

private final ClientConfig clientConfig

clientRunnable

private final ClientRunnable clientRunnable

Constructor Details

CertificateExtractingClient

private CertificateExtractingClient(boolean shouldResolveRootCa,
 Proxy proxy,
 PasswordAuthentication passwordAuthentication,
 Duration timeout,
 ClientRunnable clientRunnable)

Method Details

getInstance

static CertificateExtractingClient getInstance()

get

public List<X509Certificate> get(String url)

call

public void call(String url)

call

public void call(String url,
 ClientRunnable clientRunnable)

createConnection

URLConnection createConnection(URL url)
                        throws IOException

Throws:

IOException

getRootCaFromChainIfPossible

List<X509Certificate> getRootCaFromChainIfPossible(List<X509Certificate> certificates)

getRootCaIfPossible

List<X509Certificate> getRootCaIfPossible(X509Certificate x509Certificate)

getRootCaFromAuthorityInfoAccessExtensionIfPresent

List<X509Certificate> getRootCaFromAuthorityInfoAccessExtensionIfPresent(X509Certificate certificate)

getCertificatesFromRemoteFile

List<X509Certificate> getCertificatesFromRemoteFile(String issuerLocation,
 X509Certificate intermediateCertificate)

getRootCaFromJdkTrustedCertificates

List<X509Certificate> getRootCaFromJdkTrustedCertificates(X509Certificate intermediateCertificate)

isIssuerOfIntermediateCertificate

boolean isIssuerOfIntermediateCertificate(X509Certificate intermediateCertificate,
 X509Certificate issuer)

getSiblings

public Map<String,List<X509Certificate>> getSiblings(List<X509Certificate> certificates)

Extracts certificates based on a list of DNS Names from the Subject Alternative Name extension.

getCertificatesCollector

public Map<String,List<X509Certificate>> getCertificatesCollector()

clearCertificatesCollector

public void clearCertificatesCollector()

builder

public static CertificateExtractingClient.Builder builder()