com.perforce.p4java.impl.mapbased.rpc.stream
Class RpcSSLSocketFactory.TrustAllTrustManager

java.lang.Object
  com.perforce.p4java.impl.mapbased.rpc.stream.RpcSSLSocketFactory.TrustAllTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

Enclosing class:

RpcSSLSocketFactory

public static class RpcSSLSocketFactory.TrustAllTrustManager
extends Object
implements X509TrustManager

This class allow any X509 certificates to be used to authenticate the remote side of a secure socket, including self-signed certificates.

Note that the tradeoff of this convenience usage is the vulnerability of man-in-the-middle attacks.

Constructor Summary

RpcSSLSocketFactory.TrustAllTrustManager()

Method Summary

void	checkClientTrusted(X509Certificate[] chain, String authType) Always trust for client SSL chain peer certificate chain with any authType authentication types.
void	checkServerTrusted(X509Certificate[] chain, String authType) Always trust for server SSL chain peer certificate chain with any authType exchange algorithm types.
X509Certificate[]	getAcceptedIssuers() Return an empty array of certificate authority certificates which are trusted for authenticating peers.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RpcSSLSocketFactory.TrustAllTrustManager

public RpcSSLSocketFactory.TrustAllTrustManager()

Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)

Always trust for client SSL chain peer certificate chain with any authType authentication types.

Specified by:

checkClientTrusted in interface X509TrustManager

Parameters:

chain - the peer certificate chain.

authType - the authentication type based on the client certificate.

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)

Always trust for server SSL chain peer certificate chain with any authType exchange algorithm types.

Specified by:

checkServerTrusted in interface X509TrustManager

Parameters:

chain - the peer certificate chain.

authType - the key exchange algorithm used.

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Return an empty array of certificate authority certificates which are trusted for authenticating peers.

Specified by:

getAcceptedIssuers in interface X509TrustManager

Returns:

a empty array of issuer certificates.