org.forgerock.opendj.security

Class TrustManagers

java.lang.Object

org.forgerock.opendj.security.TrustManagers

public final class TrustManagers
extends Object

This class contains methods for creating common types of trust manager.

Method Summary

Modifier and Type	Method and Description
static X509TrustManager	checkUsingKeyStore(KeyStore optionalKeyStore) Creates a new X509TrustManager which will use the key store to determine whether to trust a certificate.
static X509TrustManager	checkUsingKeyStoreFile(String file, char[] password, String format) Creates a new X509TrustManager which will use the named trust store file to determine whether to trust a certificate.
static X509TrustManager	distrustAll() Returns an X509TrustManager which does not trust any certificates.
static X509TrustManager	trustAll() Returns an X509TrustManager which trusts all certificates.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

checkUsingKeyStoreFile

public static X509TrustManager checkUsingKeyStoreFile(String file,
                                                      char[] password,
                                                      String format)
                                               throws GeneralSecurityException,
                                                      IOException

Creates a new X509TrustManager which will use the named trust store file to determine whether to trust a certificate. It will use the provided trust store format and password.

Parameters:

file - The trust store file name.

password - The trust store password, which may be null.

format - The trust store format, which may be null to indicate that the default trust store format for the JVM (e.g. JKS) should be used.

Returns:

A new X509TrustManager which will use the named trust store file to determine whether to trust a certificate.

Throws:

GeneralSecurityException - If the trust store could not be loaded, perhaps due to incorrect format, or missing algorithms.

IOException - If the trust store file could not be found or could not be read.

NullPointerException - If file was null.

checkUsingKeyStore

public static X509TrustManager checkUsingKeyStore(KeyStore optionalKeyStore)
                                           throws NoSuchAlgorithmException,
                                                  KeyStoreException

Creates a new X509TrustManager which will use the key store to determine whether to trust a certificate.

Parameters:

optionalKeyStore - The key store containing the trusted certificates or null to use the default key store.

Returns:

A new X509TrustManager which will use the key store to determine whether to trust a certificate.

Throws:

NoSuchAlgorithmException - If default trust store algorithm cannot be found.

KeyStoreException - If the trust manager could not be initialized with the provided key store.

distrustAll

public static X509TrustManager distrustAll()

Returns an X509TrustManager which does not trust any certificates.

Returns:

An X509TrustManager which does not trust any certificates.

trustAll

public static X509TrustManager trustAll()

Returns an X509TrustManager which trusts all certificates.

Returns:

An X509TrustManager which trusts all certificates.