com.perforce.p4java.impl.mapbased.rpc.stream

Class RpcSSLSocketFactory.TrustAllTrustManager

java.lang.Object

com.perforce.p4java.impl.mapbased.rpc.stream.RpcSSLSocketFactory.TrustAllTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

Enclosing class:

RpcSSLSocketFactory

public static class RpcSSLSocketFactory.TrustAllTrustManager
extends Object
implements X509TrustManager

This class allow any X509 certificates to be used to authenticate the remote side of a secure socket, including self-signed certificates.

Note that the tradeoff of this convenience usage is the vulnerability of man-in-the-middle attacks.

Constructor Summary

Constructors

Constructor and Description
TrustAllTrustManager()

Method Summary

Modifier and Type	Method and Description
void	checkClientTrusted(X509Certificate[] chain, String authType) Always trust for client SSL chain peer certificate chain with any authType authentication types.
void	checkServerTrusted(X509Certificate[] chain, String authType) Always trust for server SSL chain peer certificate chain with any authType exchange algorithm types.
X509Certificate[]	getAcceptedIssuers() Return an empty array of certificate authority certificates which are trusted for authenticating peers.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TrustAllTrustManager

public TrustAllTrustManager()

Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)

Always trust for client SSL chain peer certificate chain with any authType authentication types.

Specified by:

checkClientTrusted in interface X509TrustManager

Parameters:

chain - the peer certificate chain.

authType - the authentication type based on the client certificate.

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)

Always trust for server SSL chain peer certificate chain with any authType exchange algorithm types.

Specified by:

checkServerTrusted in interface X509TrustManager

Parameters:

chain - the peer certificate chain.

authType - the key exchange algorithm used.

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Return an empty array of certificate authority certificates which are trusted for authenticating peers.

Specified by:

getAcceptedIssuers in interface X509TrustManager

Returns:

a empty array of issuer certificates.