001: /*
002: * $Header: /home/jerenkrantz/tmp/commons/commons-convert/cvs/home/cvs/jakarta-commons//httpclient/src/contrib/org/apache/commons/httpclient/contrib/ssl/AuthSSLX509TrustManager.java,v 1.2 2004/06/10 18:25:24 olegk Exp $
003: * $Revision: 480424 $
004: * $Date: 2006-11-29 06:56:49 +0100 (Wed, 29 Nov 2006) $
005: *
006: * ====================================================================
007: *
008: * Licensed to the Apache Software Foundation (ASF) under one or more
009: * contributor license agreements. See the NOTICE file distributed with
010: * this work for additional information regarding copyright ownership.
011: * The ASF licenses this file to You under the Apache License, Version 2.0
012: * (the "License"); you may not use this file except in compliance with
013: * the License. You may obtain a copy of the License at
014: *
015: * http://www.apache.org/licenses/LICENSE-2.0
016: *
017: * Unless required by applicable law or agreed to in writing, software
018: * distributed under the License is distributed on an "AS IS" BASIS,
019: * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
020: * See the License for the specific language governing permissions and
021: * limitations under the License.
022: * ====================================================================
023: *
024: * This software consists of voluntary contributions made by many
025: * individuals on behalf of the Apache Software Foundation. For more
026: * information on the Apache Software Foundation, please see
027: * <http://www.apache.org/>.
028: *
029: */
030:
031: package org.apache.commons.httpclient.contrib.ssl;
032:
033: import java.security.cert.X509Certificate;
034:
035: import javax.net.ssl.X509TrustManager;
036: import java.security.cert.CertificateException;
037: import org.apache.commons.logging.Log;
038: import org.apache.commons.logging.LogFactory;
039:
040: /**
041: * <p>
042: * AuthSSLX509TrustManager can be used to extend the default {@link X509TrustManager}
043: * with additional trust decisions.
044: * </p>
045: *
046: * @author <a href="mailto:oleg@ural.ru">Oleg Kalnichevski</a>
047: *
048: * <p>
049: * DISCLAIMER: HttpClient developers DO NOT actively support this component.
050: * The component is provided as a reference material, which may be inappropriate
051: * for use without additional customization.
052: * </p>
053: */
054:
055: public class AuthSSLX509TrustManager implements X509TrustManager {
056: private X509TrustManager defaultTrustManager = null;
057:
058: /** Log object for this class. */
059: private static final Log LOG = LogFactory
060: .getLog(AuthSSLX509TrustManager.class);
061:
062: /**
063: * Constructor for AuthSSLX509TrustManager.
064: */
065: public AuthSSLX509TrustManager(
066: final X509TrustManager defaultTrustManager) {
067: super ();
068: if (defaultTrustManager == null) {
069: throw new IllegalArgumentException(
070: "Trust manager may not be null");
071: }
072: this .defaultTrustManager = defaultTrustManager;
073: }
074:
075: /**
076: * @see javax.net.ssl.X509TrustManager#checkClientTrusted(X509Certificate[],String authType)
077: */
078: public void checkClientTrusted(X509Certificate[] certificates,
079: String authType) throws CertificateException {
080: if (LOG.isInfoEnabled() && certificates != null) {
081: for (int c = 0; c < certificates.length; c++) {
082: X509Certificate cert = certificates[c];
083: LOG.info(" Client certificate " + (c + 1) + ":");
084: LOG.info(" Subject DN: " + cert.getSubjectDN());
085: LOG.info(" Signature Algorithm: "
086: + cert.getSigAlgName());
087: LOG.info(" Valid from: " + cert.getNotBefore());
088: LOG.info(" Valid until: " + cert.getNotAfter());
089: LOG.info(" Issuer: " + cert.getIssuerDN());
090: }
091: }
092: defaultTrustManager.checkClientTrusted(certificates, authType);
093: }
094:
095: /**
096: * @see javax.net.ssl.X509TrustManager#checkServerTrusted(X509Certificate[],String authType)
097: */
098: public void checkServerTrusted(X509Certificate[] certificates,
099: String authType) throws CertificateException {
100: if (LOG.isInfoEnabled() && certificates != null) {
101: for (int c = 0; c < certificates.length; c++) {
102: X509Certificate cert = certificates[c];
103: LOG.info(" Server certificate " + (c + 1) + ":");
104: LOG.info(" Subject DN: " + cert.getSubjectDN());
105: LOG.info(" Signature Algorithm: "
106: + cert.getSigAlgName());
107: LOG.info(" Valid from: " + cert.getNotBefore());
108: LOG.info(" Valid until: " + cert.getNotAfter());
109: LOG.info(" Issuer: " + cert.getIssuerDN());
110: }
111: }
112: defaultTrustManager.checkServerTrusted(certificates, authType);
113: }
114:
115: /**
116: * @see javax.net.ssl.X509TrustManager#getAcceptedIssuers()
117: */
118: public X509Certificate[] getAcceptedIssuers() {
119: return this.defaultTrustManager.getAcceptedIssuers();
120: }
121: }
|