Package com.unboundid.util.ssl

Class JVMDefaultTrustManager

java.lang.Object

com.unboundid.util.ssl.JVMDefaultTrustManager

All Implemented Interfaces:

Serializable, TrustManager, X509TrustManager

@NotMutable
@ThreadSafety(level=COMPLETELY_THREADSAFE)
public final class JVMDefaultTrustManager
extends Object
implements X509TrustManager, Serializable

This class provides an implementation of a trust manager that relies on the JVM's default set of trusted issuers.

This implementation will first look for the trust store in the following locations within the Java installation, in the following order:

1. lib/security/jssecacerts
2. jre/lib/security/jssecacerts
3. lib/security/cacerts
4. jre/lib/security/cacerts

If none of those files exist (or if they cannot be parsed as a JKS or PKCS #12 key store), then we will search for a jssecacerts or cacerts file below the Java home directory.

See Also:

• Serialized Form

Method Summary

Modifier and Type	Method	Description
void	checkClientTrusted(X509Certificate[] chain, String authType)	Checks to determine whether the provided client certificate chain should be trusted.
void	checkServerTrusted(X509Certificate[] chain, String authType)	Checks to determine whether the provided server certificate chain should be trusted.
X509Certificate[]	getAcceptedIssuers()	Retrieves the accepted issuer certificates for this trust manager.
File	getCACertsFile()	Retrieves the path to the the file containing the JVM's default set of trusted issuers.
static JVMDefaultTrustManager	getInstance()	Retrieves the singleton instance of this trust manager.
Collection<X509Certificate>	getTrustedIssuerCertificates()	Retrieves the certificates included in this trust manager.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

getInstance

@NotNull
public static JVMDefaultTrustManager getInstance()

Retrieves the singleton instance of this trust manager.

Returns:

The singleton instance of this trust manager.

getCACertsFile

@NotNull
public File getCACertsFile()
                    throws CertificateException

Retrieves the path to the the file containing the JVM's default set of trusted issuers.

Returns:

The path to the file containing the JVM's default set of trusted issuers.

Throws:

CertificateException - If a problem was encountered while initializing this trust manager.

getTrustedIssuerCertificates

@NotNull
public Collection<X509Certificate> getTrustedIssuerCertificates()
                                                         throws CertificateException

Retrieves the certificates included in this trust manager.

Returns:

The certificates included in this trust manager.

Throws:

CertificateException - If a problem was encountered while initializing this trust manager.

checkClientTrusted

public void checkClientTrusted(@NotNull
 X509Certificate[] chain,
 @NotNull
 String authType)
                        throws CertificateException

Checks to determine whether the provided client certificate chain should be trusted.

Specified by:

checkClientTrusted in interface X509TrustManager

Parameters:

chain - The client certificate chain for which to make the determination.

authType - The authentication type based on the client certificate.

Throws:

CertificateException - If the provided client certificate chain should not be trusted.

checkServerTrusted

public void checkServerTrusted(@NotNull
 X509Certificate[] chain,
 @NotNull
 String authType)
                        throws CertificateException

Checks to determine whether the provided server certificate chain should be trusted.

Specified by:

checkServerTrusted in interface X509TrustManager

Parameters:

chain - The server certificate chain for which to make the determination.

authType - The key exchange algorithm used.

Throws:

CertificateException - If the provided server certificate chain should not be trusted.

getAcceptedIssuers

@NotNull
public X509Certificate[] getAcceptedIssuers()

Retrieves the accepted issuer certificates for this trust manager.

Specified by:

getAcceptedIssuers in interface X509TrustManager

Returns:

The accepted issuer certificates for this trust manager, or an empty set of accepted issuers if a problem was encountered while initializing this trust manager.