Examples of com.intel.mtwilson.tls.TrustKnownCertificateTlsPolicy

com.intel.mtwilson.tls.TrustKnownCertificateTlsPolicy

This trust policy must be initialized with the server that is being checked and its associated server-specific keystore. The keystore must already have a trusted certificate for this server. This policy never adds new certificates to the keystore. If the server has a self-signed certificate, it must be in the keystore to be validated. If the server has a ca-signed certificate, the ca must be in the keystore for the server to be validated. It checks the repository for the trusted certificate every time it is used - if you want to cache the repository information (eg. to avoid a database hit on each SSL connection), then you need to provide an in-memory repository that contains just the cached certificates (query the database once and put the results in an ArrayCertificateRepository and provide that to the policy object). @author jbuhacoff

        }
        if( ucName.equals("TRUST_FIRST_CERTIFICATE") ) {
            return new TrustFirstCertificateTlsPolicy(new KeystoreCertificateRepository(tlsKeystore));
        }
        if( ucName.equals("TRUST_KNOWN_CERTIFICATE") ) {
            return new TrustKnownCertificateTlsPolicy(new KeystoreCertificateRepository(tlsKeystore));
        }
        if( ucName.equals("INSECURE") ) {
            return new InsecureTlsPolicy();
        }
        throw new IllegalArgumentException("Unknown TLS Policy: "+tlsPolicyName);

            log.info("TLS Policy: TRUST_FIRST_CERTIFICATE");
            return new TrustFirstCertificateTlsPolicy(new KeystoreCertificateRepository(sslKeystore));
        }
        else if( tlsPolicyName.equals("TRUST_KNOWN_CERTIFICATE") ) {
            log.info("TLS Policy: TRUST_KNOWN_CERTIFICATE");
            return new TrustKnownCertificateTlsPolicy(new KeystoreCertificateRepository(sslKeystore));
        }
        else if( tlsPolicyName.equals("INSECURE") ) {
            log.warn("TLS Policy: INSECURE");
            return new InsecureTlsPolicy();
        }

Examples of com.intel.mtwilson.tls.TrustKnownCertificateTlsPolicy

Related Classes of com.intel.mtwilson.tls.TrustKnownCertificateTlsPolicy