Package org.apache.hadoop.security.ssl

Class ReloadingX509KeystoreManager

java.lang.Object

javax.net.ssl.X509ExtendedKeyManager

org.apache.hadoop.security.ssl.ReloadingX509KeystoreManager

All Implemented Interfaces:

javax.net.ssl.KeyManager, javax.net.ssl.X509KeyManager

@Private
@Evolving
public class ReloadingX509KeystoreManager
extends javax.net.ssl.X509ExtendedKeyManager

An implementation of X509KeyManager that exposes a method, loadFrom(Path) to reload its configuration. Note that it is necessary to implement the X509ExtendedKeyManager to properly delegate the additional methods, otherwise the SSL handshake will fail.

Constructor Summary

Constructors

Constructor	Description
ReloadingX509KeystoreManager(java.lang.String type, java.lang.String location, java.lang.String storePassword, java.lang.String keyPassword)	Construct a Reloading509KeystoreManager

Method Summary

Modifier and Type	Method	Description
java.lang.String	chooseClientAlias(java.lang.String[] strings, java.security.Principal[] principals, java.net.Socket socket)
java.lang.String	chooseEngineClientAlias(java.lang.String[] strings, java.security.Principal[] principals, javax.net.ssl.SSLEngine sslEngine)
java.lang.String	chooseEngineServerAlias(java.lang.String s, java.security.Principal[] principals, javax.net.ssl.SSLEngine sslEngine)
java.lang.String	chooseServerAlias(java.lang.String s, java.security.Principal[] principals, java.net.Socket socket)
java.security.cert.X509Certificate[]	getCertificateChain(java.lang.String s)
java.lang.String[]	getClientAliases(java.lang.String s, java.security.Principal[] principals)
java.security.PrivateKey	getPrivateKey(java.lang.String s)
java.lang.String[]	getServerAliases(java.lang.String s, java.security.Principal[] principals)
ReloadingX509KeystoreManager	loadFrom(java.nio.file.Path path)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ReloadingX509KeystoreManager

public ReloadingX509KeystoreManager(java.lang.String type,
                                    java.lang.String location,
                                    java.lang.String storePassword,
                                    java.lang.String keyPassword)
                             throws java.io.IOException,
                                    java.security.GeneralSecurityException

Construct a Reloading509KeystoreManager

Parameters:

type - type of keystore file, typically 'jks'.

location - local path to the keystore file.

storePassword - password of the keystore file.

keyPassword - The password of the key.

Throws:

java.io.IOException - raised on errors performing I/O.

java.security.GeneralSecurityException - thrown if create encryptor error.

Method Detail

chooseEngineClientAlias

public java.lang.String chooseEngineClientAlias(java.lang.String[] strings,
                                                java.security.Principal[] principals,
                                                javax.net.ssl.SSLEngine sslEngine)

Overrides:

chooseEngineClientAlias in class javax.net.ssl.X509ExtendedKeyManager

chooseEngineServerAlias

public java.lang.String chooseEngineServerAlias(java.lang.String s,
                                                java.security.Principal[] principals,
                                                javax.net.ssl.SSLEngine sslEngine)

Overrides:

chooseEngineServerAlias in class javax.net.ssl.X509ExtendedKeyManager

getClientAliases

public java.lang.String[] getClientAliases(java.lang.String s,
                                           java.security.Principal[] principals)

chooseClientAlias

public java.lang.String chooseClientAlias(java.lang.String[] strings,
                                          java.security.Principal[] principals,
                                          java.net.Socket socket)

getServerAliases

public java.lang.String[] getServerAliases(java.lang.String s,
                                           java.security.Principal[] principals)

chooseServerAlias

public java.lang.String chooseServerAlias(java.lang.String s,
                                          java.security.Principal[] principals,
                                          java.net.Socket socket)

getCertificateChain

public java.security.cert.X509Certificate[] getCertificateChain(java.lang.String s)

getPrivateKey

public java.security.PrivateKey getPrivateKey(java.lang.String s)

loadFrom

public ReloadingX509KeystoreManager loadFrom(java.nio.file.Path path)