Package com.spotify.docker.client

Class DockerCertificates

java.lang.Object

com.spotify.docker.client.DockerCertificates

All Implemented Interfaces:

DockerCertificatesStore

public class DockerCertificates
extends Object
implements DockerCertificatesStore

DockerCertificates holds certificates for connecting to an HTTPS-secured Docker instance with client/server authentication.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	DockerCertificates.Builder
private static class	DockerCertificates.DefaultSslContextFactory
static interface	DockerCertificates.SslContextFactory

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DEFAULT_CA_CERT_NAME
static final String	DEFAULT_CLIENT_CERT_NAME
static final String	DEFAULT_CLIENT_KEY_NAME
private static final char[]	KEY_STORE_PASSWORD
private static final org.slf4j.Logger	log
private static final Set<String>	PRIVATE_KEY_ALGS
private final SSLContext	sslContext

Constructor Summary

Constructors

Modifier	Constructor	Description
private	DockerCertificates(DockerCertificates.Builder builder)
	DockerCertificates(Path dockerCertPath)

Method Summary

Modifier and Type	Method	Description
static DockerCertificates.Builder	builder()
private static PrivateKey	generatePrivateKey(org.bouncycastle.asn1.pkcs.PrivateKeyInfo privateKeyInfo)
HostnameVerifier	hostnameVerifier()
private KeyStore	newKeyStore()
private List<Certificate>	readCertificates(Path file)
private PrivateKey	readPrivateKey(Path file)
SSLContext	sslContext()
private static PrivateKey	tryGeneratePrivateKey(PKCS8EncodedKeySpec spec, Set<String> algorithms)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_CA_CERT_NAME

public static final String DEFAULT_CA_CERT_NAME

See Also:

• Constant Field Values

DEFAULT_CLIENT_CERT_NAME

public static final String DEFAULT_CLIENT_CERT_NAME

See Also:

• Constant Field Values

DEFAULT_CLIENT_KEY_NAME

public static final String DEFAULT_CLIENT_KEY_NAME

See Also:

• Constant Field Values

KEY_STORE_PASSWORD

private static final char[] KEY_STORE_PASSWORD

PRIVATE_KEY_ALGS

private static final Set<String> PRIVATE_KEY_ALGS

log

private static final org.slf4j.Logger log

sslContext

private final SSLContext sslContext

Constructor Details

DockerCertificates

public DockerCertificates(Path dockerCertPath)
                   throws DockerCertificateException

Throws:

DockerCertificateException

DockerCertificates

private DockerCertificates(DockerCertificates.Builder builder)
                    throws DockerCertificateException

Throws:

DockerCertificateException

Method Details

newKeyStore

private KeyStore newKeyStore()
                      throws CertificateException,
NoSuchAlgorithmException,
IOException,
KeyStoreException

Throws:

CertificateException

NoSuchAlgorithmException

IOException

KeyStoreException

readPrivateKey

private PrivateKey readPrivateKey(Path file)
                           throws IOException,
InvalidKeySpecException,
DockerCertificateException

Throws:

IOException

InvalidKeySpecException

DockerCertificateException

generatePrivateKey

private static PrivateKey generatePrivateKey(org.bouncycastle.asn1.pkcs.PrivateKeyInfo privateKeyInfo)
                                      throws IOException,
InvalidKeySpecException

Throws:

IOException

InvalidKeySpecException

tryGeneratePrivateKey

private static PrivateKey tryGeneratePrivateKey(PKCS8EncodedKeySpec spec,
 Set<String> algorithms)
                                         throws InvalidKeySpecException

Throws:

InvalidKeySpecException

readCertificates

private List<Certificate> readCertificates(Path file)
                                    throws CertificateException,
IOException

Throws:

CertificateException

IOException

sslContext

public SSLContext sslContext()

Specified by:

sslContext in interface DockerCertificatesStore

hostnameVerifier

public HostnameVerifier hostnameVerifier()

Specified by:

hostnameVerifier in interface DockerCertificatesStore

builder

public static DockerCertificates.Builder builder()