Package org.mozilla.jss.provider.javax.crypto

Class JSSTrustManager

java.lang.Object

org.mozilla.jss.provider.javax.crypto.JSSTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class JSSTrustManager
extends Object
implements X509TrustManager

Field Summary

Fields

Modifier and Type	Field	Description
private boolean	allowMissingExtendedKeyUsage
private SSLCertificateApprovalCallback	callback
static final String	CLIENT_AUTH_OID
private boolean	enableCertRevokeVerify
private String	hostname
static final String	INTERNAL_TOKEN_FULL_NAME
static final String	INTERNAL_TOKEN_NAME
static final org.slf4j.Logger	logger
static final String	SERVER_AUTH_OID
private String	tokenName

Constructor Summary

Constructors

Constructor	Description
JSSTrustManager()

Method Summary

Modifier and Type	Method	Description
private void	addTrustAnchors(Collection<X509Certificate> caCerts, CryptoToken token)
private void	certChainRevokeVerify(X509Certificate[] certChain, String KeyUsage, SSLCertificateApprovalCallback.ValidityStatus status)
private int	certRevokeVerify(X509Certificate cert, int usage)
void	checkCertChain(X509Certificate[] certChain, String keyUsage)
void	checkCertChain(X509Certificate[] certChain, String keyUsage, SSLCertificateApprovalCallback.ValidityStatus status)
void	checkClientTrusted(X509Certificate[] certChain, String authType)
void	checkHostname(X509Certificate[] certChain, SSLCertificateApprovalCallback.ValidityStatus status)
void	checkIssuerTrusted(X509Certificate[] certChain, SSLCertificateApprovalCallback.ValidityStatus status)
void	checkKeyUsage(X509Certificate[] certChain, String keyUsage, SSLCertificateApprovalCallback.ValidityStatus status)
void	checkServerTrusted(X509Certificate[] certChain, String authType)
void	checkSignature(X509Certificate cert, X509Certificate[] caCerts, int depth, SSLCertificateApprovalCallback.ValidityStatus status)
void	checkValidityDates(X509Certificate[] certChain, SSLCertificateApprovalCallback.ValidityStatus status)
void	configureAllowMissingExtendedKeyUsage(boolean allow)
X509Certificate[]	getAcceptedIssuers()
private X509Certificate[]	getAcceptedIssuersFromCACerts()
private X509Certificate[]	getAcceptedIssuersFromToken()
SSLCertificateApprovalCallback	getCallback()
String	getHostname()
String	getTokenName()
private Collection<CryptoToken>	getTrustAnchorTokens(CryptoManager manager)
private static boolean	isCATrust(int trust)
boolean	isEnableCertRevokeVerify()
private static boolean	isInternalTokenName(String name)
private static boolean	isTrustAnchor(X509Certificate cert)
boolean	isTrustedPeer(X509Certificate[] certChain)
boolean	isValidSAN(SubjectAlternativeNameExtension sanExt)
boolean	isValidSubject(CertificateSubjectName subject)
void	setCallback(SSLCertificateApprovalCallback certCallback)
void	setEnableCertRevokeVerify(boolean enableCertRevokeVerify)
void	setHostname(String hostname)
void	setTokenName(String tokenName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

public static final org.slf4j.Logger logger

SERVER_AUTH_OID

public static final String SERVER_AUTH_OID

See Also:

• Constant Field Values

CLIENT_AUTH_OID

public static final String CLIENT_AUTH_OID

See Also:

• Constant Field Values

INTERNAL_TOKEN_NAME

public static final String INTERNAL_TOKEN_NAME

See Also:

• Constant Field Values

INTERNAL_TOKEN_FULL_NAME

public static final String INTERNAL_TOKEN_FULL_NAME

See Also:

• Constant Field Values

hostname

private String hostname

tokenName

private String tokenName

allowMissingExtendedKeyUsage

private boolean allowMissingExtendedKeyUsage

enableCertRevokeVerify

private boolean enableCertRevokeVerify

callback

private SSLCertificateApprovalCallback callback

Constructor Details

JSSTrustManager

public JSSTrustManager()

Method Details

isEnableCertRevokeVerify

public boolean isEnableCertRevokeVerify()

setEnableCertRevokeVerify

public void setEnableCertRevokeVerify(boolean enableCertRevokeVerify)

getHostname

public String getHostname()

setHostname

public void setHostname(String hostname)

getTokenName

public String getTokenName()

setTokenName

public void setTokenName(String tokenName)

configureAllowMissingExtendedKeyUsage

public void configureAllowMissingExtendedKeyUsage(boolean allow)

getCallback

public SSLCertificateApprovalCallback getCallback()

setCallback

public void setCallback(SSLCertificateApprovalCallback certCallback)

isValidSAN

public boolean isValidSAN(SubjectAlternativeNameExtension sanExt)
                   throws Exception

Throws:

Exception

isValidSubject

public boolean isValidSubject(CertificateSubjectName subject)
                       throws Exception

Throws:

Exception

checkHostname

public void checkHostname(X509Certificate[] certChain,
 SSLCertificateApprovalCallback.ValidityStatus status)
                   throws Exception

Throws:

Exception

checkCertChain

public void checkCertChain(X509Certificate[] certChain,
 String keyUsage)
                    throws Exception

Throws:

Exception

checkCertChain

public void checkCertChain(X509Certificate[] certChain,
 String keyUsage,
 SSLCertificateApprovalCallback.ValidityStatus status)
                    throws Exception

Throws:

Exception

isTrustedPeer

public boolean isTrustedPeer(X509Certificate[] certChain)
                      throws Exception

Throws:

Exception

checkIssuerTrusted

public void checkIssuerTrusted(X509Certificate[] certChain,
 SSLCertificateApprovalCallback.ValidityStatus status)
                        throws Exception

Throws:

Exception

checkSignature

public void checkSignature(X509Certificate cert,
 X509Certificate[] caCerts,
 int depth,
 SSLCertificateApprovalCallback.ValidityStatus status)
                    throws Exception

Throws:

Exception

checkValidityDates

public void checkValidityDates(X509Certificate[] certChain,
 SSLCertificateApprovalCallback.ValidityStatus status)
                        throws Exception

Throws:

Exception

checkKeyUsage

public void checkKeyUsage(X509Certificate[] certChain,
 String keyUsage,
 SSLCertificateApprovalCallback.ValidityStatus status)
                   throws Exception

Throws:

Exception

checkClientTrusted

public void checkClientTrusted(X509Certificate[] certChain,
 String authType)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] certChain,
 String authType)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager

getAcceptedIssuersFromCACerts

private X509Certificate[] getAcceptedIssuersFromCACerts()

getAcceptedIssuersFromToken

private X509Certificate[] getAcceptedIssuersFromToken()

getTrustAnchorTokens

private Collection<CryptoToken> getTrustAnchorTokens(CryptoManager manager)
                                              throws NotInitializedException,
NoSuchTokenException,
TokenException

Throws:

NotInitializedException

NoSuchTokenException

TokenException

isInternalTokenName

private static boolean isInternalTokenName(String name)

addTrustAnchors

private void addTrustAnchors(Collection<X509Certificate> caCerts,
 CryptoToken token)
                      throws TokenException

Throws:

TokenException

isTrustAnchor

private static boolean isTrustAnchor(X509Certificate cert)

isCATrust

private static boolean isCATrust(int trust)

certChainRevokeVerify

private void certChainRevokeVerify(X509Certificate[] certChain,
 String KeyUsage,
 SSLCertificateApprovalCallback.ValidityStatus status)

certRevokeVerify

private int certRevokeVerify(X509Certificate cert,
 int usage)
                      throws ObjectNotFoundException

Throws:

ObjectNotFoundException