Package org.apache.hadoop.security.ssl

Class ReloadingX509TrustManager

java.lang.Object

org.apache.hadoop.security.ssl.ReloadingX509TrustManager

All Implemented Interfaces:

javax.net.ssl.TrustManager, javax.net.ssl.X509TrustManager

@Private
@Evolving
public final class ReloadingX509TrustManager
extends java.lang.Object
implements javax.net.ssl.X509TrustManager

A TrustManager implementation that exposes a method, loadFrom(Path) to reload its configuration for example when the truststore file on disk changes.

Constructor Summary

Constructors

Constructor	Description
ReloadingX509TrustManager(java.lang.String type, java.lang.String location, java.lang.String password)	Creates a reloadable trustmanager.

Method Summary

Modifier and Type	Method	Description
void	checkClientTrusted(java.security.cert.X509Certificate[] chain, java.lang.String authType)
void	checkServerTrusted(java.security.cert.X509Certificate[] chain, java.lang.String authType)
java.security.cert.X509Certificate[]	getAcceptedIssuers()
ReloadingX509TrustManager	loadFrom(java.nio.file.Path path)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ReloadingX509TrustManager

public ReloadingX509TrustManager(java.lang.String type,
                                 java.lang.String location,
                                 java.lang.String password)
                          throws java.io.IOException,
                                 java.security.GeneralSecurityException

Creates a reloadable trustmanager. The trustmanager reloads itself if the underlying trustore file has changed.

Parameters:

type - type of truststore file, typically 'jks'.

location - local path to the truststore file.

password - password of the truststore file. changed, in milliseconds.

Throws:

java.io.IOException - thrown if the truststore could not be initialized due to an IO error.

java.security.GeneralSecurityException - thrown if the truststore could not be initialized due to a security error.

Method Detail

checkClientTrusted

public void checkClientTrusted(java.security.cert.X509Certificate[] chain,
                               java.lang.String authType)
                        throws java.security.cert.CertificateException

Specified by:

checkClientTrusted in interface javax.net.ssl.X509TrustManager

Throws:

java.security.cert.CertificateException

checkServerTrusted

public void checkServerTrusted(java.security.cert.X509Certificate[] chain,
                               java.lang.String authType)
                        throws java.security.cert.CertificateException

Specified by:

checkServerTrusted in interface javax.net.ssl.X509TrustManager

Throws:

java.security.cert.CertificateException

getAcceptedIssuers

public java.security.cert.X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface javax.net.ssl.X509TrustManager

loadFrom

public ReloadingX509TrustManager loadFrom(java.nio.file.Path path)