org.jivesoftware.openfire.keystore

Class TrustStore

java.lang.Object

org.jivesoftware.openfire.keystore.CertificateStore

org.jivesoftware.openfire.keystore.TrustStore

public class TrustStore
extends CertificateStore

A wrapper class for a store of certificates, its metadata (password, location) and related functionality that is used to verify credentials, a trust store The trust store should only contain certificates for the "most-trusted" Certificate Authorities (the store should not contain Intermediates"). These certificates are referred to as "Trust Anchors".

Author:

Guus der Kinderen, guus.der.kinderen@gmail.com

Field Summary

Fields inherited from class org.jivesoftware.openfire.keystore.CertificateStore

configuration, PROVIDER, store

Constructor Summary

Constructors

Constructor and Description
TrustStore(CertificateStoreConfiguration configuration, boolean createIfAbsent)

Method Summary

Methods

Modifier and Type	Method and Description
void	installCertificate(String alias, String pemRepresentation) Imports one certificate as a trust anchor into this store.

Methods inherited from class org.jivesoftware.openfire.keystore.CertificateStore

delete, getAllCertificates, getConfiguration, getStore, persist, reload

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TrustStore

public TrustStore(CertificateStoreConfiguration configuration,
          boolean createIfAbsent)
           throws CertificateStoreConfigException

Throws:

CertificateStoreConfigException

Method Detail

installCertificate

public void installCertificate(String alias,
                      String pemRepresentation)
                        throws CertificateStoreConfigException

Imports one certificate as a trust anchor into this store. Note that this method explicitly allows one to add invalid certificates. As this store is intended to contain certificates for "most-trusted" / root Certificate Authorities, this method will fail when the PEM representation contains more than one certificate.

Parameters:

alias - the name (key) under which the certificate is to be stored in the store (cannot be null or empty).

pemRepresentation - The PEM representation of the certificate to add (cannot be null or empty).

Throws:

CertificateStoreConfigException