Package io.grpc.xds.internal.security.trust

Class XdsTrustManagerFactory

java.lang.Object

javax.net.ssl.TrustManagerFactory

io.netty.handler.ssl.util.SimpleTrustManagerFactory

io.grpc.xds.internal.security.trust.XdsTrustManagerFactory

public final class XdsTrustManagerFactory
extends io.netty.handler.ssl.util.SimpleTrustManagerFactory

Factory class used to provide a XdsX509TrustManager for trust and SAN checks.

Field Summary

Fields

Modifier and Type	Field	Description
private static java.util.logging.Logger	logger
private XdsX509TrustManager	xdsX509TrustManager

Constructor Summary

Constructors

Modifier	Constructor	Description
	XdsTrustManagerFactory(CertificateValidationContext certificateValidationContext)	Constructor constructs from a CertificateValidationContext.
	XdsTrustManagerFactory(java.security.cert.X509Certificate[] certs, CertificateValidationContext staticCertificateValidationContext)
private	XdsTrustManagerFactory(java.security.cert.X509Certificate[] certs, CertificateValidationContext certificateValidationContext, boolean validationContextIsStatic)

Method Summary

Modifier and Type	Method	Description
(package private) static XdsX509TrustManager	createX509TrustManager(java.security.cert.X509Certificate[] certs, CertificateValidationContext certContext)
protected javax.net.ssl.TrustManager[]	engineGetTrustManagers()
protected void	engineInit(java.security.KeyStore keyStore)
protected void	engineInit(javax.net.ssl.ManagerFactoryParameters managerFactoryParameters)
private static java.security.cert.X509Certificate[]	getTrustedCaFromCertContext(CertificateValidationContext certificateValidationContext)

Methods inherited from class javax.net.ssl.TrustManagerFactory

getAlgorithm, getDefaultAlgorithm, getInstance, getInstance, getInstance, getProvider, getTrustManagers, init, init

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

private static final java.util.logging.Logger logger

xdsX509TrustManager

private XdsX509TrustManager xdsX509TrustManager

Constructor Detail

XdsTrustManagerFactory

public XdsTrustManagerFactory(CertificateValidationContext certificateValidationContext)
                       throws java.security.cert.CertificateException,
                              java.io.IOException,
                              java.security.cert.CertStoreException

Constructor constructs from a CertificateValidationContext.

Throws:

java.security.cert.CertificateException

java.io.IOException

java.security.cert.CertStoreException

XdsTrustManagerFactory

public XdsTrustManagerFactory(java.security.cert.X509Certificate[] certs,
                              CertificateValidationContext staticCertificateValidationContext)
                       throws java.security.cert.CertStoreException

Throws:

java.security.cert.CertStoreException

XdsTrustManagerFactory

private XdsTrustManagerFactory(java.security.cert.X509Certificate[] certs,
                               CertificateValidationContext certificateValidationContext,
                               boolean validationContextIsStatic)
                        throws java.security.cert.CertStoreException

Throws:

java.security.cert.CertStoreException

Method Detail

getTrustedCaFromCertContext

private static java.security.cert.X509Certificate[] getTrustedCaFromCertContext(CertificateValidationContext certificateValidationContext)
                                                                         throws java.security.cert.CertificateException,
                                                                                java.io.IOException

Throws:

java.security.cert.CertificateException

java.io.IOException

createX509TrustManager

static XdsX509TrustManager createX509TrustManager(java.security.cert.X509Certificate[] certs,
                                                  CertificateValidationContext certContext)
                                           throws java.security.cert.CertStoreException

Throws:

java.security.cert.CertStoreException

engineInit

protected void engineInit(java.security.KeyStore keyStore)
                   throws java.lang.Exception

Specified by:

engineInit in class io.netty.handler.ssl.util.SimpleTrustManagerFactory

Throws:

java.lang.Exception

engineInit

protected void engineInit(javax.net.ssl.ManagerFactoryParameters managerFactoryParameters)
                   throws java.lang.Exception

Specified by:

engineInit in class io.netty.handler.ssl.util.SimpleTrustManagerFactory

Throws:

java.lang.Exception

engineGetTrustManagers

protected javax.net.ssl.TrustManager[] engineGetTrustManagers()

Specified by:

engineGetTrustManagers in class io.netty.handler.ssl.util.SimpleTrustManagerFactory