org.archive.httpclient

Class ConfigurableX509TrustManager

java.lang.Object

org.archive.httpclient.ConfigurableX509TrustManager

All Implemented Interfaces:

javax.net.ssl.TrustManager, javax.net.ssl.X509TrustManager

public class ConfigurableX509TrustManager
extends java.lang.Object
implements javax.net.ssl.X509TrustManager

A configurable trust manager built on X509TrustManager. If set to 'open' trust, the default, will get us into sites for whom we do not have the CA or any of intermediary CAs that go to make up the cert chain of trust. Will also get us past selfsigned and expired certs. 'loose' trust will get us into sites w/ valid certs even if they are just selfsigned. 'normal' is any valid cert not including selfsigned. 'strict' means cert must be valid and the cert DN must match server name.

Based on pointers in SSL Guide, and readings done in JSSE Guide.

TODO: Move to an ssl subpackage when we have other classes other than just this one.

Version:

$Id$

Author:

stack

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	ConfigurableX509TrustManager.TrustLevel

Field Summary

Fields

Modifier and Type	Field and Description
static ConfigurableX509TrustManager.TrustLevel	DEFAULT Default setting for trust level.
protected static java.util.logging.Logger	logger Logging instance.

Constructor Summary

Constructors

Constructor and Description
ConfigurableX509TrustManager()
ConfigurableX509TrustManager(ConfigurableX509TrustManager.TrustLevel level) Constructor.

Method Summary

Modifier and Type	Method and Description
void	checkClientTrusted(java.security.cert.X509Certificate[] certificates, java.lang.String type)
void	checkServerTrusted(java.security.cert.X509Certificate[] certificates, java.lang.String type)
java.security.cert.X509Certificate[]	getAcceptedIssuers()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static java.util.logging.Logger logger

Logging instance.

DEFAULT

public static final ConfigurableX509TrustManager.TrustLevel DEFAULT

Default setting for trust level.

Constructor Detail

ConfigurableX509TrustManager

public ConfigurableX509TrustManager()
                             throws java.security.NoSuchAlgorithmException,
                                    java.security.KeyStoreException

Throws:

java.security.NoSuchAlgorithmException

java.security.KeyStoreException

ConfigurableX509TrustManager

public ConfigurableX509TrustManager(ConfigurableX509TrustManager.TrustLevel level)
                             throws java.security.NoSuchAlgorithmException,
                                    java.security.KeyStoreException

Constructor.

Parameters:

level - Level of trust to effect.

Throws:

java.security.NoSuchAlgorithmException

java.security.KeyStoreException

Method Detail

checkClientTrusted

public void checkClientTrusted(java.security.cert.X509Certificate[] certificates,
                               java.lang.String type)
                        throws java.security.cert.CertificateException

Specified by:

checkClientTrusted in interface javax.net.ssl.X509TrustManager

Throws:

java.security.cert.CertificateException

checkServerTrusted

public void checkServerTrusted(java.security.cert.X509Certificate[] certificates,
                               java.lang.String type)
                        throws java.security.cert.CertificateException

Specified by:

checkServerTrusted in interface javax.net.ssl.X509TrustManager

Throws:

java.security.cert.CertificateException

getAcceptedIssuers

public java.security.cert.X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface javax.net.ssl.X509TrustManager