com.microsoft.azure.sdk.iot.device.auth

Class IotHubSSLContext

java.lang.Object

com.microsoft.azure.sdk.iot.device.auth.IotHubSSLContext

public class IotHubSSLContext
extends java.lang.Object

A simple wrapper for holding the SSLContext used by all connections from clients in this library to the service.

Constructor Summary

Constructors

Constructor and Description
IotHubSSLContext() Create a default IotHubSSLContext that trusts the certificates stored in your physical device's Trusted Root Certification Authorities certificate store.
IotHubSSLContext(javax.net.ssl.SSLContext sslContext) Create an IotHubSSLContext that will use the provided sslContext rather than create one based on your device's Trusted Root Certification Authorities certificate store.

Method Summary

Modifier and Type	Method and Description
javax.net.ssl.SSLContext	getSSLContext() Get the SSLContext that will be used during the TLS handshake when establishing a connection to the service.
static javax.net.ssl.SSLContext	getSSLContextFromFile(java.lang.String trustedCertificatesFilePath) Create an IotHubSSLContext that trusts the PEM formatted certificates stored in a file with the provided path.
static javax.net.ssl.SSLContext	getSSLContextFromString(java.lang.String trustedCertificates) Create an IotHubSSLContext that trusts the PEM formatted certificates stored in the provided trustedCertificates.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IotHubSSLContext

public IotHubSSLContext()

Create a default IotHubSSLContext that trusts the certificates stored in your physical device's Trusted Root Certification Authorities certificate store. This IotHubSSLContext can be used for connections that use symmetric key authentication, but cannot be used for connections that use x509 authentication.

IotHubSSLContext

public IotHubSSLContext(javax.net.ssl.SSLContext sslContext)

Create an IotHubSSLContext that will use the provided sslContext rather than create one based on your device's Trusted Root Certification Authorities certificate store.

Parameters:

sslContext - the SSLContext that will be used during the TLS handshake when establishing a connection to the service.

Method Detail

getSSLContext

public javax.net.ssl.SSLContext getSSLContext()

Get the SSLContext that will be used during the TLS handshake when establishing a connection to the service.

Returns:

the SSLContext that will be used during the TLS handshake when establishing a connection to the service.

getSSLContextFromString

public static javax.net.ssl.SSLContext getSSLContextFromString(java.lang.String trustedCertificates)
                                                        throws java.security.cert.CertificateException,
                                                               java.io.IOException,
                                                               java.security.KeyStoreException,
                                                               java.security.NoSuchAlgorithmException,
                                                               java.security.KeyManagementException

Create an IotHubSSLContext that trusts the PEM formatted certificates stored in the provided trustedCertificates.

Parameters:

trustedCertificates - the PEM formatted certificates that this IotHubSSLContext will trust.

Returns:

the created IotHubSSLContext.

Throws:

java.security.cert.CertificateException - if the provided trustedCertificates are not PEM formatted and cannot be parsed.

java.io.IOException - if the provided trustedCertificates cannot be read as a stream.

java.security.KeyStoreException - if a key store cannot be created.

java.security.NoSuchAlgorithmException - if your device cannot use x509 certificates or TLS SSLContexts.

java.security.KeyManagementException - if the created SSLContext cannot be initialized.

getSSLContextFromFile

public static javax.net.ssl.SSLContext getSSLContextFromFile(java.lang.String trustedCertificatesFilePath)
                                                      throws java.security.cert.CertificateException,
                                                             java.io.IOException,
                                                             java.security.KeyStoreException,
                                                             java.security.NoSuchAlgorithmException,
                                                             java.security.KeyManagementException

Create an IotHubSSLContext that trusts the PEM formatted certificates stored in a file with the provided path.

Parameters:

trustedCertificatesFilePath - the absolute file path of the file that contains the PEM formatted certificates that this IotHubSSLContext will trust.

Returns:

the created IotHubSSLContext.

Throws:

java.security.cert.CertificateException - if the provided trustedCertificates are not PEM formatted and cannot be parsed.

java.io.IOException - if the provided trustedCertificates cannot be read as a stream.

java.security.KeyStoreException - if a key store cannot be created.

java.security.NoSuchAlgorithmException - if your device cannot use x509 certificates or TLS SSLContexts.

java.security.KeyManagementException - if the created SSLContext cannot be initialized.