Java X509ExtendedKeyManager类代码示例

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public X509Certificate[] getCertificateChain(final String s) {
    return with(new Function<X509Certificate[]>() {

        @Override
        public X509Certificate[] apply(X509ExtendedKeyManager delegate) {
            return delegate.getCertificateChain(s);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
protected final KeyManager[] engineGetKeyManagers() {
    List<X509ExtendedKeyManager> delegates = new ArrayList<>();

    X509ExtendedKeyManager systemKeyManager = getSystemKeyManager();
    if (systemKeyManager != null) {
        delegates.add(systemKeyManager);
    }

    FileWatchingX509ExtendedKeyManager containerKeyManager = getContainerKeyManager();
    if (containerKeyManager != null) {
        delegates.add(containerKeyManager);
    }

    return new KeyManager[]{new DelegatingX509ExtendedKeyManager(delegates)};
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
public void implRun() throws SSLException
{
  KeyExchangeAlgorithm kexalg = engine.session().suite.keyExchangeAlgorithm();
  X509ExtendedKeyManager km = engine.contextImpl.keyManager;
  Principal[] issuers = null; // XXX use TrustedAuthorities extension.
  keyAlias = km.chooseEngineServerAlias(kexalg.name(), issuers, engine);
  if (keyAlias == null)
    throw new SSLException("no certificates available");
  X509Certificate[] chain = km.getCertificateChain(keyAlias);
  engine.session().setLocalCertificates(chain);
  localCert = chain[0];
  serverKey = km.getPrivateKey(keyAlias);
  if (kexalg == DH_DSS || kexalg == DH_RSA)
    dhPair = new KeyPair(localCert.getPublicKey(),
                         km.getPrivateKey(keyAlias));
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
private static X509ExtendedKeyManager getX509KeyManager(KeyManager keyManager) throws StartException {
    if (keyManager == null) {
        return null;
    }
    if (keyManager instanceof X509ExtendedKeyManager) {
        X509ExtendedKeyManager x509KeyManager = (X509ExtendedKeyManager) keyManager;
        if (x509KeyManager instanceof DelegatingKeyManager && IS_FIPS.getAsBoolean()) {
            ROOT_LOGGER.trace("FIPS enabled on JVM, unwrapping KeyManager");
            // If FIPS is enabled unwrap the KeyManager
            x509KeyManager = ((DelegatingKeyManager)x509KeyManager).delegating.get();
        }

        return x509KeyManager;
    }
    throw ROOT_LOGGER.invalidTypeInjected(X509ExtendedKeyManager.class.getSimpleName());
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
private CipherTestUtils()
        throws IOException, FileNotFoundException, KeyStoreException,
        NoSuchAlgorithmException, CertificateException,
        UnrecoverableKeyException, InvalidKeySpecException {
    factory = (SSLSocketFactory) SSLSocketFactory.getDefault();
    KeyStore serverKeyStore = createServerKeyStore(SERVER_PUBLIC_KEY,
            SERVER_PRIVATE_KEY);
    KeyStore serverTrustStore = createServerKeyStore(CA_PUBLIC_KEY,
            CA_PRIVATE_KEY);

    if (serverKeyStore != null) {
        KeyManagerFactory keyFactory1
                = KeyManagerFactory.getInstance(
                        KeyManagerFactory.getDefaultAlgorithm());
        keyFactory1.init(serverKeyStore, PASSWORD);
        serverKeyManager = (X509ExtendedKeyManager) keyFactory1.
                getKeyManagers()[0];
    } else {
        serverKeyManager = null;
    }
    serverTrustManager = serverTrustStore != null
            ? new AlwaysTrustManager(serverTrustStore) : null;

    KeyStore clientKeyStore, clientTrustStore;
    clientTrustStore = serverTrustStore;
    clientKeyStore =
            createServerKeyStore(CLIENT_PUBLIC_KEY,CLIENT_PRIVATE_KEY);
    if (clientKeyStore != null) {
        KeyManagerFactory keyFactory
                = KeyManagerFactory.getInstance(
                        KeyManagerFactory.getDefaultAlgorithm());
        keyFactory.init(clientKeyStore, PASSWORD);
        clientKeyManager = (X509ExtendedKeyManager) keyFactory.
                getKeyManagers()[0];
    } else {
        clientKeyManager = null;
    }
    clientTrustManager = (clientTrustStore != null)
            ? new AlwaysTrustManager(clientTrustStore) : null;
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
public MyX509ExtendedKeyManager(
        X509ExtendedKeyManager akm, String expectedAP, boolean doCheck) {
    this.akm = akm;
    this.expectedAP = expectedAP;
    this.doCheck = doCheck;

}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public String chooseClientAlias(final String[] strings, final Principal[] principals, final Socket socket) {
    return with(new Function<String>() {

        @Override
        public String apply(X509ExtendedKeyManager delegate) {
            return delegate.chooseClientAlias(strings, principals, socket);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public String chooseEngineClientAlias(final String[] strings, final Principal[] principals, final SSLEngine sslEngine) {
    return with(new Function<String>() {

        @Override
        public String apply(X509ExtendedKeyManager delegate) {
            return delegate.chooseEngineClientAlias(strings, principals, sslEngine);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public String chooseEngineServerAlias(final String s, final Principal[] principals, final SSLEngine sslEngine) {
    return with(new Function<String>() {

        @Override
        public String apply(X509ExtendedKeyManager delegate) {
            return delegate.chooseEngineServerAlias(s, principals, sslEngine);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public String chooseServerAlias(final String s, final Principal[] principals, final Socket socket) {
    return with(new Function<String>() {

        @Override
        public String apply(X509ExtendedKeyManager delegate) {
            return delegate.chooseServerAlias(s, principals, socket);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public String[] getClientAliases(final String s, final Principal[] principals) {
    return collect(new Function<String[]>() {

        @Override
        public String[] apply(X509ExtendedKeyManager delegate) {
            return delegate.getClientAliases(s, principals);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public PrivateKey getPrivateKey(final String s) {
    return with(new Function<PrivateKey>() {

        @Override
        public PrivateKey apply(X509ExtendedKeyManager delegate) {
            return delegate.getPrivateKey(s);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
@Override
public String[] getServerAliases(final String s, final Principal[] principals) {
    return collect(new Function<String[]>() {

        @Override
        public String[] apply(X509ExtendedKeyManager delegate) {
            return delegate.getServerAliases(s, principals);
        }

    });
}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
private String[] collect(Function<String[]> function) {
    List<String> collected = new ArrayList<>();

    for (X509ExtendedKeyManager delegate : this.delegates) {
        String[] candidate = function.apply(delegate);
        if (candidate != null) {
            Collections.addAll(collected, candidate);
        }
    }

    return collected.toArray(new String[collected.size()]);

}
 

import javax.net.ssl.X509ExtendedKeyManager; //导入依赖的package包/类
private <T> T with(Function<T> function) {
    for (X509ExtendedKeyManager delegate : this.delegates) {
        T candidate = function.apply(delegate);
        if (candidate != null) {
            return candidate;
        }
    }

    return null;
}