com.entrust.toolkit.x509.directory

Class LDAPSTrustStoreSingleton

java.lang.Object

com.entrust.toolkit.x509.directory.LDAPSTrustStoreSingleton

public class LDAPSTrustStoreSingleton
extends java.lang.Object

The purpose of this class is the overcome a limitation of the LDAP Context's SSL implementation. This limitation is a result of the Context allowing SSL to be customized by providing a custom SSLSocketFactory as an evironment parameter. The custom SSLSocket is then instantiated by the getDefault() method which is static. The result of this limitation is that all data, including trusted certificates, X509TrustManager, or X509KeyManagers must be available from a static context.

To overcome this limitation, this object is created as a Singleton, a single instance of a static object so that the required LDAP SSL configuration parameters can be created from the static context of the SSLSocketFactory.getDefault() method.

Note: The LDAPSTrustStoreSingleton can be returned from any context by calling:

 LDAPSTrustStoreSingleton.getLDAPSTrustStoreSingleton();
 

Since:

7.2 patch

Constructor Summary

Constructors

Constructor and Description
LDAPSTrustStoreSingleton()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	addCertificate(java.security.cert.X509Certificate cert) Adds a certificate to this object.
void	addCertificates(java.security.cert.X509Certificate[] certs) Adds a certificate to the LDAPS trustStore.
void	clearTrustStore() Clear the list of certificates trusted by LDAPS
java.security.cert.X509Certificate[]	getLDAPSTrustStoreCerts() Returns the list of trusted certificates that are stored by the Singleton object.
static LDAPSTrustStoreSingleton	getLDAPSTrustStoreSingleton() Returns the LDAPSTrustStoreSingleton.
boolean	removeCertificate(java.security.cert.X509Certificate cert) Removes a certificate from the LDAPS trustStore if it is contained in the trustStore

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LDAPSTrustStoreSingleton

public LDAPSTrustStoreSingleton()

Method Detail

addCertificate

public boolean addCertificate(java.security.cert.X509Certificate cert)

Adds a certificate to this object. If the certificate is already contained in this object it will not be added again.

Parameters:

cert - the certificate to add

Returns:

true if the certificate was added, false if it was not added

removeCertificate

public boolean removeCertificate(java.security.cert.X509Certificate cert)

Removes a certificate from the LDAPS trustStore if it is contained in the trustStore

Parameters:

cert - the certificate to add

Returns:

true if the certificate was removed, false if it was not removed.

addCertificates

public void addCertificates(java.security.cert.X509Certificate[] certs)

Adds a certificate to the LDAPS trustStore. If the certificate is already contained in this truststore it will not be added again.

Parameters:

certs - the certificates to add

getLDAPSTrustStoreSingleton

public static LDAPSTrustStoreSingleton getLDAPSTrustStoreSingleton()

Returns the LDAPSTrustStoreSingleton. To ensure that there is only one LDAPSTrustStoreSingleton, the constructor is private. Use this method to get the Singleton.

Returns:

the unique LDAPSTrustStoreSingleton graph

getLDAPSTrustStoreCerts

public java.security.cert.X509Certificate[] getLDAPSTrustStoreCerts()

Returns the list of trusted certificates that are stored by the Singleton object.

Returns:

the list of X509Certificates trusted by this repository.

clearTrustStore

public void clearTrustStore()

Clear the list of certificates trusted by LDAPS