io.pivotal.springcloud.ssl

Class SslCertificateTruster

java.lang.Object

io.pivotal.springcloud.ssl.SslCertificateTruster

public class SslCertificateTruster
extends Object

Utility for getting the JVM to trust an untrusted certificate

Author:

wtran@pivotal.io

Field Summary

Fields

Modifier and Type	Field and Description
static String	JAVAX_NET_SSL_TRUST_STORE
static String	JAVAX_NET_SSL_TRUST_STORE_PASSWORD

Method Summary

Modifier and Type	Method and Description
static void	appendToTruststore(X509Certificate[] chain) Append the certificate to the JVM's currently used truststore.
static X509Certificate[]	getUntrustedCertificate(String host, int port, int timeout) Performs an SSL handshake with the given host and port, and if the JVM does not trust the certificate presented during SSL handshake, return the certificate chain, otherwise return null.
static void	trustCertificate(String host, int port, int timeout) If the certificate at the specified host and port is untrusted, append the untrusted certificate to the JVM's currently used truststore.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

JAVAX_NET_SSL_TRUST_STORE_PASSWORD

public static final String JAVAX_NET_SSL_TRUST_STORE_PASSWORD

See Also:

Constant Field Values

JAVAX_NET_SSL_TRUST_STORE

public static final String JAVAX_NET_SSL_TRUST_STORE

See Also:

Constant Field Values

Method Detail

getUntrustedCertificate

public static X509Certificate[] getUntrustedCertificate(String host,
                                                        int port,
                                                        int timeout)
                                                 throws Exception

Performs an SSL handshake with the given host and port, and if the JVM does not trust the certificate presented during SSL handshake, return the certificate chain, otherwise return null.

Parameters:

host -

port -

timeout - socket timeout in milliseconds

Returns:

Throws:

Exception - if the certificate chain could not be obtained during SSL handshake

trustCertificate

public static void trustCertificate(String host,
                                    int port,
                                    int timeout)
                             throws Exception

If the certificate at the specified host and port is untrusted, append the untrusted certificate to the JVM's currently used truststore. The change is made to a copy of the truststore, and the JVM can use the new copy via system property "javax.net.ssl.trustStore".

Parameters:

host -

port -

timeout -

Throws:

Exception

appendToTruststore

public static void appendToTruststore(X509Certificate[] chain)
                               throws NoSuchAlgorithmException,
                                      KeyStoreException,
                                      IOException,
                                      CertificateException,
                                      FileNotFoundException

Append the certificate to the JVM's currently used truststore. The change is made to a copy of the truststore, and the JVM can use the new copy via system property "javax.net.ssl.trustStore".

Parameters:

chain -

Throws:

NoSuchAlgorithmException

KeyStoreException

IOException

CertificateException

FileNotFoundException