Class SSLSocketFactory

  • All Implemented Interfaces:
    Comparator

    public class SSLSocketFactory
    extends SSLSocketFactory
    implements Comparator
    Using this class is ugly, but it is the only way to push our truststore to the default LDAP client implementation.

    This SSLSocketFactory can only use truststore configured by TruststoreProvider after the ProviderFactory was initialized using standard Spi load / init mechanism. That will only happen if "truststore" provider is configured by the Keycloak Provider SPI configuration mechanism

    If TruststoreProvider is not available this SSLSocketFactory will delegate all operations to the SSLSocketFactory returned by CryptoProvider.wrapFactoryForTruststore(javax.net.ssl.SSLSocketFactory), which will delegate further to the factory returned by javax.net.ssl.SSLSocketFactory.getDefault().

    Author:
    Marko Strukelj