Package at.gv.egovernment.moa.id.util

Class SSLUtils

java.lang.Object

at.gv.egovernment.moa.id.util.SSLUtils

public class SSLUtils
extends Object

Utility for a obtaining a secure socket factory using IAIKX509TrustManager. This TrustManager implementation features CRL checking.
SSLUtils caches secure socket factories for given ConnectionParameters.

Constructor Summary

Constructors

Constructor	Description
SSLUtils()

Method Summary

Modifier and Type	Method	Description
static SSLSocketFactory	getSSLSocketFactory(at.gv.egovernment.moa.id.commons.api.ConfigurationProvider conf, at.gv.egovernment.moa.id.commons.api.ConnectionParameterInterface connParam)	Creates an SSLSocketFactory which utilizes an IAIKX509TrustManager for the given trust store, and the given key store.
static SSLSocketFactory	getSSLSocketFactory(at.gv.egovernment.moa.id.commons.api.ConfigurationProvider conf, String url)
static void	initialize()
static String	readHttpsURL(at.gv.egovernment.moa.id.commons.api.ConfigurationProvider conf, ConnectionParameter connParam)	Reads a file, given by URL, into a byte array, securing the connection by IAIKX509TrustManager.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SSLUtils

public SSLUtils()

Method Detail

initialize

public static void initialize()

getSSLSocketFactory

public static SSLSocketFactory getSSLSocketFactory(at.gv.egovernment.moa.id.commons.api.ConfigurationProvider conf,
                                                   String url)
                                            throws IOException,
                                                   GeneralSecurityException,
                                                   at.gv.egovernment.moa.id.commons.api.exceptions.ConfigurationException,
                                                   iaik.pki.PKIException

Throws:

IOException

GeneralSecurityException

at.gv.egovernment.moa.id.commons.api.exceptions.ConfigurationException

iaik.pki.PKIException

getSSLSocketFactory

public static SSLSocketFactory getSSLSocketFactory(at.gv.egovernment.moa.id.commons.api.ConfigurationProvider conf,
                                                   at.gv.egovernment.moa.id.commons.api.ConnectionParameterInterface connParam)
                                            throws IOException,
                                                   GeneralSecurityException,
                                                   at.gv.egovernment.moa.id.commons.api.exceptions.ConfigurationException,
                                                   iaik.pki.PKIException

Creates an SSLSocketFactory which utilizes an IAIKX509TrustManager for the given trust store, and the given key store.

Parameters:

conf - configuration provider providing a generic properties pointing to trusted CA store and certificate store root

connParam - connection parameter containing the client key store settings to be used in case of client authentication; if connParam.getClientKeyStore() == null, client authentication is assumed to be disabled

Returns:

SSLSocketFactory to be used by an HttpsURLConnection

Throws:

IOException - thrown while reading key store file

GeneralSecurityException - thrown while creating the socket factory

at.gv.egovernment.moa.id.commons.api.exceptions.ConfigurationException - on invalid configuration data

iaik.pki.PKIException - while initializing the IAIKX509TrustManager

readHttpsURL

public static String readHttpsURL(at.gv.egovernment.moa.id.commons.api.ConfigurationProvider conf,
                                  ConnectionParameter connParam)
                           throws at.gv.egovernment.moa.id.commons.api.exceptions.ConfigurationException,
                                  iaik.pki.PKIException,
                                  IOException,
                                  GeneralSecurityException

Reads a file, given by URL, into a byte array, securing the connection by IAIKX509TrustManager.

Parameters:

connParam - containing URL and accepted server certificates

conf - ConfigurationProvider for reading

Returns:

String representation of content

Throws:

at.gv.egovernment.moa.id.commons.api.exceptions.ConfigurationException - on invalid configuration data

iaik.pki.PKIException - on invalid configuration data

IOException - on data-reading problems

GeneralSecurityException - on security issues