Class SpiffeKeyManagerFactory

java.lang.Object

javax.net.ssl.KeyManagerFactorySpi

io.spiffe.provider.SpiffeKeyManagerFactory

public final class SpiffeKeyManagerFactory
extends KeyManagerFactorySpi

Implementation of a KeyManagerFactorySpi to create a KeyManager that is backed by the Workload API.

The Java Security API will call engineGetKeyManagers() to get an instance of a KeyManager. This KeyManager instance is injected with an DefaultX509Source to obtain the latest X.509 SVIDs updates from the Workload API.

See Also:

• SpiffeSslContextFactory
• X509SvidSource
• X509SourceManager
• SpiffeSslContextFactory

Constructor Summary

Constructors

Constructor	Description
SpiffeKeyManagerFactory()

Method Summary

Modifier and Type	Method	Description
protected KeyManager[]	engineGetKeyManagers()	Default method for creating the KeyManager, uses an DefaultX509Source instance that is handled by the Singleton X509SourceManager
KeyManager[]	engineGetKeyManagers(@NonNull io.spiffe.svid.x509svid.X509SvidSource x509SvidSource)	Creates a new key manager and initializes it with the given X.509 SVID source.
protected void	engineInit(KeyStore keyStore, char[] chars)
protected void	engineInit(ManagerFactoryParameters managerFactoryParameters)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SpiffeKeyManagerFactory

public SpiffeKeyManagerFactory()

Method Details

engineGetKeyManagers

protected KeyManager[] engineGetKeyManagers()

Default method for creating the KeyManager, uses an DefaultX509Source instance that is handled by the Singleton X509SourceManager

Specified by:

engineGetKeyManagers in class KeyManagerFactorySpi

Throws:

SpiffeProviderException - in case there is an error setting up the X.509 source

engineGetKeyManagers

public KeyManager[] engineGetKeyManagers(@NonNull
 @NonNull io.spiffe.svid.x509svid.X509SvidSource x509SvidSource)

Creates a new key manager and initializes it with the given X.509 SVID source.

Parameters:

x509SvidSource - an instance of a X509SvidSource

Returns:

an array with an instance of a KeyManager

engineInit

protected void engineInit(KeyStore keyStore,
 char[] chars)

Specified by:

engineInit in class KeyManagerFactorySpi

engineInit

protected void engineInit(ManagerFactoryParameters managerFactoryParameters)

Specified by:

engineInit in class KeyManagerFactorySpi