com.entrust.toolkit.x509.jsse

Class JSSEX509TrustManagerFactory

java.lang.Object

javax.net.ssl.TrustManagerFactorySpi

com.entrust.toolkit.x509.jsse.JSSEX509TrustManagerFactory

public class JSSEX509TrustManagerFactory
extends javax.net.ssl.TrustManagerFactorySpi

The JSSEX509TrustManagerFactory class implements the javax.net.ssl.TrustManagerFractorySpi abstract class.

Note

The methods in this class should never be called directly.

To create instances of this class, always use the javax.net.ssl.TrustManagerFactory engine class. For example:

     java.security.Security.addProvider(new com.entrust.toolkit.x509.jsse.provider.EntrustJSSEProvider());
     TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
 or
     TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509", "Entrust_JSSE");
 or
     TrustManagerFactory tmf =
     TrustManagerFactory.getInstance("SunX509", new com.entrust.toolkit.x509.jsse.provider.EntrustJSSEProvider());
 

A newly created trust manager factory should be initialized by a KeyStore object, as follows:

     KetStore ks = new KeyStore(...);
     ks.load(..., ...);
     tmf.init( ks );
 

You can also initialize the KeyStore using the JSSEEntrustManagerFactoryParameters If a KeyStore is not provided, then the system configured truststore specified by the JVM setting javax.net.ssl.trustStore will be used. (Additionally, if the optional javax.net.ssl.trustStorePassword is configured, then it will be used to validate the integrity of the specified truststore.) If a KeyStore is not provided and the JVM javax.net.ssl.trustStore is not configured, then a KeyStore Exception will be thrown by this class.

  //Pass in the KeyStore, Directory and ClientSettings
  JSSEEntrustManagerFactoryParameters parameters = 
       new JSSEEntrustManagerFactoryParameters(eks, directory, clientSettings);

  // For convenience, the KSIniFile can also be used to extract the directory information
  // JSSEEntrustManagerFactoryParameters parameters = 
  //     new JSSEEntrustManagerFactoryParameters(eks,new FileInputStream(ksIniFile), password);

  // Initialize the TrustManagerFactory with the JSSEEntrustManagerFactoryParameters
  tmf.init(parameters);
 
 

You can retrieve the trust managers by calling

     TrustManager[] trustManagers = tmf.getManagers();
 

For more information, see the Oracle JSSE Reference Guide for the TrustManagerFactory

Note, if a non-Entrust keystore is being used, then this class will delegate the requested operation to the first provider in the list which supports the requested service/algorithm.

See Also:

TrustManagerFactory, JSSEX509TrustManager

Constructor Summary

Constructors

Constructor and Description
JSSEX509TrustManagerFactory()

Method Summary

Modifier and Type	Method and Description
protected javax.net.ssl.TrustManager[]	engineGetTrustManagers()
protected void	engineInit(java.security.KeyStore ks)
protected void	engineInit(javax.net.ssl.ManagerFactoryParameters managerFactoryParameters) Must implement this abstract method in javax.net.ssl.TrustManagerFactorySpi.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JSSEX509TrustManagerFactory

public JSSEX509TrustManagerFactory()

Method Detail

engineGetTrustManagers

protected javax.net.ssl.TrustManager[] engineGetTrustManagers()

Specified by:

engineGetTrustManagers in class javax.net.ssl.TrustManagerFactorySpi

engineInit

protected void engineInit(java.security.KeyStore ks)
                   throws java.security.KeyStoreException

Specified by:

engineInit in class javax.net.ssl.TrustManagerFactorySpi

Throws:

java.security.KeyStoreException

engineInit

protected void engineInit(javax.net.ssl.ManagerFactoryParameters managerFactoryParameters)
                   throws java.security.InvalidAlgorithmParameterException

Must implement this abstract method in javax.net.ssl.TrustManagerFactorySpi.

Specified by:

engineInit in class javax.net.ssl.TrustManagerFactorySpi

Throws:

java.security.KeyStoreException

java.security.InvalidAlgorithmParameterException

Since:

7.2 patch