File Based Trust Manager Provider

The file-based trust manager provider determines whether to trust a presented certificate based on whether that certificate exists in a server trust store file.

The trust store file can be in either JKS (the default Java key store format) or PKCS#12 (a standard certificate format) form.

Parent

The File Based Trust Manager Provider object inherits from Trust Manager Provider.

Properties

Use the --advanced option to access advanced properties.

Basic Properties

enabled

SynopsisIndicate whether the Trust Manager Provider is enabled for use.
Default ValueNone
Allowed Valuestrue
false
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

trust-store-file

SynopsisSpecifies the path to the file containing the trust information. It can be an absolute path or a path that is relative to the OpenDJ instance root.
DescriptionChanges to this configuration attribute take effect the next time that the trust manager is accessed.
Default ValueNone
Allowed ValuesAn absolute path or a path that is relative to the OpenDJ directory server instance root.
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

trust-store-pin

SynopsisSpecifies the clear-text PIN needed to access the File Based Trust Manager Provider .
Default ValueNone
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Trust Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

trust-store-pin-environment-variable

SynopsisSpecifies the name of the environment variable that contains the clear-text PIN needed to access the File Based Trust Manager Provider .
Default ValueNone
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Trust Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

trust-store-pin-file

SynopsisSpecifies the path to the text file whose only contents should be a single line containing the clear-text PIN needed to access the File Based Trust Manager Provider .
Default ValueNone
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Trust Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

trust-store-pin-property

SynopsisSpecifies the name of the Java property that contains the clear-text PIN needed to access the File Based Trust Manager Provider .
Default ValueNone
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Trust Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

trust-store-type

SynopsisSpecifies the format for the data in the trust store file.
DescriptionValid values always include 'JKS' and 'PKCS12', but different implementations can allow other values as well. If no value is provided, then the JVM default value is used. Changes to this configuration attribute take effect the next time that the trust manager is accessed.
Default ValueNone
Allowed ValuesAny key store format supported by the Java runtime environment. The "JKS" and "PKCS12" formats are typically available in Java environments.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

Advanced Properties

java-class

SynopsisThe fully-qualified name of the Java class that provides the File Based Trust Manager Provider implementation.
Default Valueorg.opends.server.extensions.FileBasedTrustManagerProvider
Allowed ValuesA Java class that extends or implements:
org.opends.server.api.TrustManagerProvider
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedYes
Read-OnlyNo