org.openeuler.sun.security.ssl

类 X509KeyManagerImpl

java.lang.Object

javax.net.ssl.X509ExtendedKeyManager

org.openeuler.sun.security.ssl.X509KeyManagerImpl

所有已实现的接口:

KeyManager, X509KeyManager

final class X509KeyManagerImpl
extends X509ExtendedKeyManager
implements X509KeyManager

The new X509 key manager implementation. The main differences to the old SunX509 key manager are: . it is based around the KeyStore.Builder API. This allows it to use other forms of KeyStore protection or password input (e.g. a CallbackHandler) or to have keys within one KeyStore protected by different keys. . it can use multiple KeyStores at the same time. . it is explicitly designed to accommodate KeyStores that change over the lifetime of the process. . it makes an effort to choose the key that matches best, i.e. one that is not expired and has the appropriate certificate extensions. Note that this code is not explicitly performance optimzied yet.

作者:

Andreas Sterbenz

嵌套类概要

嵌套类

限定符和类型	类和说明
private static class	X509KeyManagerImpl.CheckResult
private static class	X509KeyManagerImpl.CheckType
private static class	X509KeyManagerImpl.EntryStatus
private static class	X509KeyManagerImpl.KeyType
private static class	X509KeyManagerImpl.SizedMap<K,V>

字段概要

字段

限定符和类型	字段和说明
private List<KeyStore.Builder>	builders
private Map<String,Reference<KeyStore.PrivateKeyEntry>>	entryCacheMap
private AtomicLong	uidCounter
private static Date	verificationDate

构造器概要

构造器

构造器和说明
X509KeyManagerImpl(KeyStore.Builder builder)
X509KeyManagerImpl(List<KeyStore.Builder> builders)

方法概要

限定符和类型	方法和说明
private String	chooseAlias(List<X509KeyManagerImpl.KeyType> keyTypeList, Principal[] issuers, X509KeyManagerImpl.CheckType checkType, AlgorithmConstraints constraints)
private String	chooseAlias(List<X509KeyManagerImpl.KeyType> keyTypeList, Principal[] issuers, X509KeyManagerImpl.CheckType checkType, AlgorithmConstraints constraints, List<SNIServerName> requestedServerNames, String idAlgorithm)
String	chooseClientAlias(String[] keyTypes, Principal[] issuers, Socket socket)
String	chooseEngineClientAlias(String[] keyTypes, Principal[] issuers, SSLEngine engine)
String	chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine)
String	chooseServerAlias(String keyType, Principal[] issuers, Socket socket)
private static boolean	conformsToAlgorithmConstraints(AlgorithmConstraints constraints, Certificate[] chain, String variant)
private AlgorithmConstraints	getAlgorithmConstraints(Socket socket)
private AlgorithmConstraints	getAlgorithmConstraints(SSLEngine engine)
private List<X509KeyManagerImpl.EntryStatus>	getAliases(int builderIndex, List<X509KeyManagerImpl.KeyType> keyTypes, Set<Principal> issuerSet, boolean findAll, X509KeyManagerImpl.CheckType checkType, AlgorithmConstraints constraints, List<SNIServerName> requestedServerNames, String idAlgorithm)
String[]	getAliases(String keyType, Principal[] issuers, X509KeyManagerImpl.CheckType checkType, AlgorithmConstraints constraints)
X509Certificate[]	getCertificateChain(String alias)
String[]	getClientAliases(String keyType, Principal[] issuers)
private KeyStore.PrivateKeyEntry	getEntry(String alias)
private Set<Principal>	getIssuerSet(Principal[] issuers)
private static List<X509KeyManagerImpl.KeyType>	getKeyTypes(String... keyTypes)
PrivateKey	getPrivateKey(String alias)
String[]	getServerAliases(String keyType, Principal[] issuers)
private String	makeAlias(X509KeyManagerImpl.EntryStatus entry)
private String[]	toAliases(List<X509KeyManagerImpl.EntryStatus> results)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

verificationDate

private static Date verificationDate

builders

private final List<KeyStore.Builder> builders

uidCounter

private final AtomicLong uidCounter

entryCacheMap

private final Map<String,Reference<KeyStore.PrivateKeyEntry>> entryCacheMap

构造器详细资料

X509KeyManagerImpl

X509KeyManagerImpl(KeyStore.Builder builder)

X509KeyManagerImpl

X509KeyManagerImpl(List<KeyStore.Builder> builders)

方法详细资料

getCertificateChain

public X509Certificate[] getCertificateChain(String alias)

指定者:

getCertificateChain 在接口中 X509KeyManager

getPrivateKey

public PrivateKey getPrivateKey(String alias)

指定者:

getPrivateKey 在接口中 X509KeyManager

chooseClientAlias

public String chooseClientAlias(String[] keyTypes,
                                Principal[] issuers,
                                Socket socket)

指定者:

chooseClientAlias 在接口中 X509KeyManager

chooseEngineClientAlias

public String chooseEngineClientAlias(String[] keyTypes,
                                      Principal[] issuers,
                                      SSLEngine engine)

覆盖:

chooseEngineClientAlias 在类中 X509ExtendedKeyManager

chooseServerAlias

public String chooseServerAlias(String keyType,
                                Principal[] issuers,
                                Socket socket)

指定者:

chooseServerAlias 在接口中 X509KeyManager

chooseEngineServerAlias

public String chooseEngineServerAlias(String keyType,
                                      Principal[] issuers,
                                      SSLEngine engine)

覆盖:

chooseEngineServerAlias 在类中 X509ExtendedKeyManager

getClientAliases

public String[] getClientAliases(String keyType,
                                 Principal[] issuers)

指定者:

getClientAliases 在接口中 X509KeyManager

getServerAliases

public String[] getServerAliases(String keyType,
                                 Principal[] issuers)

指定者:

getServerAliases 在接口中 X509KeyManager

getAlgorithmConstraints

private AlgorithmConstraints getAlgorithmConstraints(Socket socket)

getAlgorithmConstraints

private AlgorithmConstraints getAlgorithmConstraints(SSLEngine engine)

makeAlias

private String makeAlias(X509KeyManagerImpl.EntryStatus entry)

getEntry

private KeyStore.PrivateKeyEntry getEntry(String alias)

getKeyTypes

private static List<X509KeyManagerImpl.KeyType> getKeyTypes(String... keyTypes)

chooseAlias

private String chooseAlias(List<X509KeyManagerImpl.KeyType> keyTypeList,
                           Principal[] issuers,
                           X509KeyManagerImpl.CheckType checkType,
                           AlgorithmConstraints constraints)

chooseAlias

private String chooseAlias(List<X509KeyManagerImpl.KeyType> keyTypeList,
                           Principal[] issuers,
                           X509KeyManagerImpl.CheckType checkType,
                           AlgorithmConstraints constraints,
                           List<SNIServerName> requestedServerNames,
                           String idAlgorithm)

getAliases

public String[] getAliases(String keyType,
                           Principal[] issuers,
                           X509KeyManagerImpl.CheckType checkType,
                           AlgorithmConstraints constraints)

toAliases

private String[] toAliases(List<X509KeyManagerImpl.EntryStatus> results)

getIssuerSet

private Set<Principal> getIssuerSet(Principal[] issuers)

getAliases

private List<X509KeyManagerImpl.EntryStatus> getAliases(int builderIndex,
                                                        List<X509KeyManagerImpl.KeyType> keyTypes,
                                                        Set<Principal> issuerSet,
                                                        boolean findAll,
                                                        X509KeyManagerImpl.CheckType checkType,
                                                        AlgorithmConstraints constraints,
                                                        List<SNIServerName> requestedServerNames,
                                                        String idAlgorithm)
                                                 throws Exception

抛出:

Exception

conformsToAlgorithmConstraints

private static boolean conformsToAlgorithmConstraints(AlgorithmConstraints constraints,
                                                      Certificate[] chain,
                                                      String variant)