com.perforce.p4java.impl.mapbased.rpc.stream
Class RpcSSLSocketFactory.TrustAllTrustManager

java.lang.Object
  extended by com.perforce.p4java.impl.mapbased.rpc.stream.RpcSSLSocketFactory.TrustAllTrustManager
All Implemented Interfaces:
TrustManager, X509TrustManager
Enclosing class:
RpcSSLSocketFactory

public static class RpcSSLSocketFactory.TrustAllTrustManager
extends Object
implements X509TrustManager

This class allow any X509 certificates to be used to authenticate the remote side of a secure socket, including self-signed certificates.

Note that the tradeoff of this convenience usage is the vulnerability of man-in-the-middle attacks.


Constructor Summary
RpcSSLSocketFactory.TrustAllTrustManager()
           
 
Method Summary
 void checkClientTrusted(X509Certificate[] chain, String authType)
          Always trust for client SSL chain peer certificate chain with any authType authentication types.
 void checkServerTrusted(X509Certificate[] chain, String authType)
          Always trust for server SSL chain peer certificate chain with any authType exchange algorithm types.
 X509Certificate[] getAcceptedIssuers()
          Return an empty array of certificate authority certificates which are trusted for authenticating peers.
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

RpcSSLSocketFactory.TrustAllTrustManager

public RpcSSLSocketFactory.TrustAllTrustManager()
Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)
Always trust for client SSL chain peer certificate chain with any authType authentication types.

Specified by:
checkClientTrusted in interface X509TrustManager
Parameters:
chain - the peer certificate chain.
authType - the authentication type based on the client certificate.

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)
Always trust for server SSL chain peer certificate chain with any authType exchange algorithm types.

Specified by:
checkServerTrusted in interface X509TrustManager
Parameters:
chain - the peer certificate chain.
authType - the key exchange algorithm used.

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()
Return an empty array of certificate authority certificates which are trusted for authenticating peers.

Specified by:
getAcceptedIssuers in interface X509TrustManager
Returns:
a empty array of issuer certificates.


Copyright © 2015 Perforce Software. All Rights Reserved.