Package org.jolokia.jvmagent.security

Class KeyStoreUtil

java.lang.Object

org.jolokia.jvmagent.security.KeyStoreUtil

public class KeyStoreUtil
extends Object

Utility class for handling keystores

Since:

30/09/15

Author:

roland

Method Summary

Modifier and Type	Method	Description
static void	updateWithCaCertificates(KeyStore pTrustStore, File pCaCerts)	Update a keystore with a CA certificate (stored as certificate entry)
static void	updateWithSelfSignedServerCertificate(KeyStore pKeyStore, JolokiaServerConfig pConfig)	Update the given keystore with a self-signed server certificate.
static void	updateWithServerCertificate(KeyStore pKeyStore, File pServerCert, File pServerKey, String pKeyAlgo, char[] pPassword)	Update a keystore with a Server certificate and key (stored as (trusted) key entry)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

updateWithCaCertificates

public static void updateWithCaCertificates(KeyStore pTrustStore,
 File pCaCerts)
                                     throws IOException,
CertificateException,
KeyStoreException

Update a keystore with a CA certificate (stored as certificate entry)

Parameters:

pTrustStore - the keystore to update

pCaCerts - CA certificate in PEM or DER format - may contain more entries (certificates) if in PEM format

Throws:

IOException

CertificateException

KeyStoreException

updateWithServerCertificate

public static void updateWithServerCertificate(KeyStore pKeyStore,
 File pServerCert,
 File pServerKey,
 String pKeyAlgo,
 char[] pPassword)
                                        throws IOException,
CertificateException,
NoSuchAlgorithmException,
InvalidKeySpecException,
KeyStoreException

Update a keystore with a Server certificate and key (stored as (trusted) key entry)

Parameters:

pKeyStore - keystore to update

pServerCert - server certificate in PEM or DER format - should contain one certificate

pServerKey - server key in DER/PEM format encoded using PKCS#1 or PKCS#8 matching the pServerCert

pKeyAlgo - algorithm used in the keystore (e.g. "RSA")

pPassword - password to use for the key file. must not be null, use new char[0] for an empty password.

Throws:

IOException

CertificateException

NoSuchAlgorithmException

InvalidKeySpecException

KeyStoreException

updateWithSelfSignedServerCertificate

public static void updateWithSelfSignedServerCertificate(KeyStore pKeyStore,
 JolokiaServerConfig pConfig)
                                                  throws NoSuchAlgorithmException,
KeyStoreException

Update the given keystore with a self-signed server certificate. This can be used if no server certificate is provided from the outside and no SSL verification is used by the client.

Parameters:

pKeyStore - keystore to update

pConfig -

Throws:

NoSuchAlgorithmException

KeyStoreException