com.entrust.toolkit.x509.jsse

Class JSSEX509KeyManagerFactory

java.lang.Object

javax.net.ssl.KeyManagerFactorySpi

com.entrust.toolkit.x509.jsse.JSSEX509KeyManagerFactory

Direct Known Subclasses:

JSSEX509KeyManagerFactoryIbmX509Alg, JSSEX509KeyManagerFactorySunX509Alg, JSSEX509KeyManagerFactoryX509Alg

public class JSSEX509KeyManagerFactory
extends javax.net.ssl.KeyManagerFactorySpi

The JSSEX09KeyManagerFactory class implements the abstract class, javax.net.ssl.KeyManagerFractorySpi.

Note

The methods in this class should never be called directly.

An instance of this class should always be created using the javax.net.ssl.KeyManagerFactory engine class. For example:

     java.security.Security.addProvider(new com.entrust.toolkit.x509.jsse.provider.EntrustJSSEProvider());
     KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
 or
     KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509", "Entrust_JSSE");
 or
     KeyManagerFactory kmf =
     KeyManagerFactory.getInstance("SunX509", new com.entrust.toolkit.x509.jsse.provider.EntrustJSSEProvider());
 

A newly created key manager factory should be initialized as follows:

     KetStore ks = new KeyStore(...);
     ks.load(..., ...);
     kmf.init( ks, null );
 

where null is the password — ignored in this case.

You can retrieve the key managers by calling the getKeyManagers method:

     KeyManager[] keyManagers = kmf.getKeyManagers();
 

For more information, see the Oracle JSSE Reference Guide for the KeyManagerFactory

Note, if a non-Entrust keystore is being used, then this class will delegate the requested operation to the first provider in the list which supports the requested service/algorithm.

Since:

7.0

See Also:

KeyManagerFactory, JSSEX509KeyManager

Constructor Summary

Constructors

Constructor and Description
JSSEX509KeyManagerFactory()

Method Summary

Methods

Modifier and Type	Method and Description
protected javax.net.ssl.KeyManager[]	engineGetKeyManagers()
protected void	engineInit(java.security.KeyStore ks, char[] password)
protected void	engineInit(javax.net.ssl.ManagerFactoryParameters managerfactoryparameters)
protected java.lang.String	getAlgorithm() PKI-19467 This is only called if a non-Entrust keystore was passed into the engineInit method.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JSSEX509KeyManagerFactory

public JSSEX509KeyManagerFactory()

Method Detail

engineInit

protected void engineInit(java.security.KeyStore ks,
              char[] password)
                   throws java.security.KeyStoreException,
                          java.security.NoSuchAlgorithmException,
                          java.security.UnrecoverableKeyException

Specified by:

engineInit in class javax.net.ssl.KeyManagerFactorySpi

Throws:

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

java.security.UnrecoverableKeyException

engineGetKeyManagers

protected javax.net.ssl.KeyManager[] engineGetKeyManagers()

Specified by:

engineGetKeyManagers in class javax.net.ssl.KeyManagerFactorySpi

engineInit

protected void engineInit(javax.net.ssl.ManagerFactoryParameters managerfactoryparameters)
                   throws java.security.InvalidAlgorithmParameterException

Specified by:

engineInit in class javax.net.ssl.KeyManagerFactorySpi

Throws:

java.security.InvalidAlgorithmParameterException

getAlgorithm

protected java.lang.String getAlgorithm()

PKI-19467 This is only called if a non-Entrust keystore was passed into the engineInit method. In order to delegate to the next provider, the service (i.e. algorithm) being requested must be known. Since the algorithm is registered against a specific factory (by the Entrust provider, and is a JSSEX509KeyMananagerFactory in this case), the (invoked) subclass will know what algorithm it supports. Therefore, subclasses should override this with a valid algorithm (e.g. SunX509, etc.).

Returns: