org.eclipse.jetty.util.ssl

Class SniX509ExtendedKeyManager

java.lang.Object

javax.net.ssl.X509ExtendedKeyManager

org.eclipse.jetty.util.ssl.SniX509ExtendedKeyManager

All Implemented Interfaces:

KeyManager, X509KeyManager

public class SniX509ExtendedKeyManager
extends X509ExtendedKeyManager

KeyManager to select a key with desired alias while delegating processing to specified KeyManager Can be used both with server and client sockets

Field Summary

Fields

Modifier and Type	Field and Description
static String	NO_MATCHERS
static String	SNI_NAME

Constructor Summary

Constructors

Constructor and Description
SniX509ExtendedKeyManager(X509ExtendedKeyManager keyManager, String alias) Construct KeyManager instance

Method Summary

Modifier and Type	Method and Description
String	chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket)
String	chooseEngineClientAlias(String[] keyType, Principal[] issuers, SSLEngine engine)
String	chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine)
protected String	chooseServerAlias(String keyType, Principal[] issuers, Collection<SNIMatcher> matchers, SSLSession session)
String	chooseServerAlias(String keyType, Principal[] issuers, Socket socket)
X509Certificate[]	getCertificateChain(String alias)
String[]	getClientAliases(String keyType, Principal[] issuers)
PrivateKey	getPrivateKey(String alias)
String[]	getServerAliases(String keyType, Principal[] issuers)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SNI_NAME

public static final String SNI_NAME

See Also:

Constant Field Values

NO_MATCHERS

public static final String NO_MATCHERS

See Also:

Constant Field Values

Constructor Detail

SniX509ExtendedKeyManager

public SniX509ExtendedKeyManager(X509ExtendedKeyManager keyManager,
                                 String alias)
                          throws Exception

Construct KeyManager instance

Parameters:

keyManager - Instance of KeyManager to be wrapped

alias - Alias of the key to be selected if no SNI selection

Throws:

Exception - if unable to create X509ExtendedKeyManager

Method Detail

chooseClientAlias

public String chooseClientAlias(String[] keyType,
                                Principal[] issuers,
                                Socket socket)

chooseEngineClientAlias

public String chooseEngineClientAlias(String[] keyType,
                                      Principal[] issuers,
                                      SSLEngine engine)

Overrides:

chooseEngineClientAlias in class X509ExtendedKeyManager

chooseServerAlias

protected String chooseServerAlias(String keyType,
                                   Principal[] issuers,
                                   Collection<SNIMatcher> matchers,
                                   SSLSession session)

chooseServerAlias

public String chooseServerAlias(String keyType,
                                Principal[] issuers,
                                Socket socket)

chooseEngineServerAlias

public String chooseEngineServerAlias(String keyType,
                                      Principal[] issuers,
                                      SSLEngine engine)

Overrides:

chooseEngineServerAlias in class X509ExtendedKeyManager

getCertificateChain

public X509Certificate[] getCertificateChain(String alias)

getClientAliases

public String[] getClientAliases(String keyType,
                                 Principal[] issuers)

getPrivateKey

public PrivateKey getPrivateKey(String alias)

getServerAliases

public String[] getServerAliases(String keyType,
                                 Principal[] issuers)