public class GsiWrappingTrustManager extends Object implements X509TrustManager
Modifier and Type | Class and Description |
---|---|
static class |
GsiWrappingTrustManager.CertificateCriticalExtensionsNotSupported |
static class |
GsiWrappingTrustManager.Wrapper
Wrapper factory class that wraps existing X509TrustManagers into
GsiWrappingTrustManagers.
|
Modifier and Type | Field and Description |
---|---|
static String |
KEY_USAGE_EXTENSION_OID_STRING |
static String |
PRERFC_EXTENSION_OID_STRING |
static String |
RFC3820_EXTENSION_OID_STRING |
Constructor and Description |
---|
GsiWrappingTrustManager(X509TrustManager trustManager,
boolean allowLegacy,
boolean allowPreRfc,
boolean allowRfc3820)
Creates a new instance from an existing X509TrustManager.
|
Modifier and Type | Method and Description |
---|---|
void |
checkClientTrusted(X509Certificate[] chain,
String authType)
Checks that the client is trusted; the aim is to follow RFC 3820.
|
void |
checkServerTrusted(X509Certificate[] chain,
String authType)
Checks that the server is trusted; in this case, it delegates this check
to the trust manager it wraps.
|
X509Certificate[] |
getAcceptedIssuers()
Returns the accepted issuers; in this case, it delegates this to the
trust manager it wraps.
|
static CertificateException |
verifyLegacyProxyCertificate(X509Certificate[] chain,
int eecCertIndex,
Date date) |
static CertificateException |
verifyPreRfcProxyCertificate(X509Certificate[] chain,
int eecCertIndex,
Date date) |
static CertificateException |
verifyProxyCertificate(X509Certificate[] chain,
int eecCertIndex,
boolean allowLegacy,
boolean allowPreRfc,
boolean allowRfc3820,
Date date) |
static CertificateException |
verifyProxyCertificate(X509Certificate[] chain,
int eecCertIndex,
Date date) |
static CertificateException |
verifyRfc3820ProxyCertificate(X509Certificate[] chain,
int eecCertIndex,
Date date) |
public static final String PRERFC_EXTENSION_OID_STRING
public static final String RFC3820_EXTENSION_OID_STRING
public static final String KEY_USAGE_EXTENSION_OID_STRING
public GsiWrappingTrustManager(X509TrustManager trustManager, boolean allowLegacy, boolean allowPreRfc, boolean allowRfc3820)
trustManager
- X509TrustManager to wrap.public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException
checkClientTrusted
in interface X509TrustManager
CertificateException
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException
checkServerTrusted
in interface X509TrustManager
CertificateException
public X509Certificate[] getAcceptedIssuers()
getAcceptedIssuers
in interface X509TrustManager
public static CertificateException verifyProxyCertificate(X509Certificate[] chain, int eecCertIndex, Date date)
public static CertificateException verifyProxyCertificate(X509Certificate[] chain, int eecCertIndex, boolean allowLegacy, boolean allowPreRfc, boolean allowRfc3820, Date date)
public static CertificateException verifyLegacyProxyCertificate(X509Certificate[] chain, int eecCertIndex, Date date)
public static CertificateException verifyPreRfcProxyCertificate(X509Certificate[] chain, int eecCertIndex, Date date)
public static CertificateException verifyRfc3820ProxyCertificate(X509Certificate[] chain, int eecCertIndex, Date date)
Copyright © 2013. All Rights Reserved.