org.archive.httpclient

Class ConfigurableX509TrustManager

java.lang.Object

org.archive.httpclient.ConfigurableX509TrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class ConfigurableX509TrustManager
extends Object
implements X509TrustManager

A configurable trust manager built on X509TrustManager. If set to 'open' trust, the default, will get us into sites for whom we do not have the CA or any of intermediary CAs that go to make up the cert chain of trust. Will also get us past selfsigned and expired certs. 'loose' trust will get us into sites w/ valid certs even if they are just selfsigned. 'normal' is any valid cert not including selfsigned. 'strict' means cert must be valid and the cert DN must match server name.

Based on pointers in SSL Guide, and readings done in JSSE Guide.

TODO: Move to an ssl subpackage when we have other classes other than just this one.

Version:

$Id$

Author:

stack

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	ConfigurableX509TrustManager.TrustLevel

Field Summary

Fields

Modifier and Type	Field and Description
static ConfigurableX509TrustManager.TrustLevel	DEFAULT Default setting for trust level.
protected static Logger	logger Logging instance.

Constructor Summary

Constructors

Constructor and Description
ConfigurableX509TrustManager()
ConfigurableX509TrustManager(ConfigurableX509TrustManager.TrustLevel level) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
void	checkClientTrusted(X509Certificate[] certificates, String type)
void	checkServerTrusted(X509Certificate[] certificates, String type)
X509Certificate[]	getAcceptedIssuers()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static Logger logger

Logging instance.

DEFAULT

public static final ConfigurableX509TrustManager.TrustLevel DEFAULT

Default setting for trust level.

Constructor Detail

ConfigurableX509TrustManager

public ConfigurableX509TrustManager()
                             throws NoSuchAlgorithmException,
                                    KeyStoreException

Throws:

NoSuchAlgorithmException

KeyStoreException

ConfigurableX509TrustManager

public ConfigurableX509TrustManager(ConfigurableX509TrustManager.TrustLevel level)
                             throws NoSuchAlgorithmException,
                                    KeyStoreException

Constructor.

Parameters:

level - Level of trust to effect.

Throws:

NoSuchAlgorithmException

KeyStoreException

Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] certificates,
                      String type)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] certificates,
                      String type)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager