Package org.apache.nifi.security.cert

Class StandardPeerIdentityProvider

java.lang.Object

org.apache.nifi.security.cert.StandardPeerIdentityProvider

All Implemented Interfaces:

PeerIdentityProvider

public class StandardPeerIdentityProvider
extends Object
implements PeerIdentityProvider

Standard implementation of Peer Identity Provider reads the first certificate as an X.509 certificate with Subject Alternative Names

Field Summary

Fields

Modifier and Type	Field	Description
private final CertificateAttributeReader	certificateAttributeReader

Constructor Summary

Constructors

Constructor	Description
StandardPeerIdentityProvider()

Method Summary

Modifier and Type	Method	Description
Set<String>	getIdentities(Certificate[] peerCertificates)	Get Peer Identities from DNS Subject Alternative Names found on validated X.509 certificate provided
private Set<String>	getIdentities(X509Certificate certificate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

certificateAttributeReader

private final CertificateAttributeReader certificateAttributeReader

Constructor Details

StandardPeerIdentityProvider

public StandardPeerIdentityProvider()

Method Details

getIdentities

public Set<String> getIdentities(Certificate[] peerCertificates)
                          throws SSLPeerUnverifiedException

Get Peer Identities from DNS Subject Alternative Names found on validated X.509 certificate provided

Specified by:

getIdentities in interface PeerIdentityProvider

Parameters:

peerCertificates - Peer certificates

Returns:

Set of identities or empty when no DNS Subject Alternative Names found

Throws:

SSLPeerUnverifiedException - Thrown on peer certificates not found or not valid

getIdentities

private Set<String> getIdentities(X509Certificate certificate)