Package org.keycloak.truststore

Class FileTruststoreProvider

java.lang.Object

org.keycloak.truststore.FileTruststoreProvider

All Implemented Interfaces:

Provider, TruststoreProvider

public class FileTruststoreProvider
extends Object
implements TruststoreProvider

Author:

Marko Strukelj

Constructor Summary

Constructors

Constructor	Description
FileTruststoreProvider(KeyStore truststore, HostnameVerificationPolicy policy, Map<X500Principal,List<X509Certificate>> rootCertificates, Map<X500Principal,List<X509Certificate>> intermediateCertificates, KeyStore httpsTruststore, Map<X500Principal,List<X509Certificate>> httpsRootCertificates, Map<X500Principal,List<X509Certificate>> httpsIntermediateCertificates)

Method Summary

Modifier and Type	Method	Description
void	close()
Map<X500Principal,List<X509Certificate>>	getHttpsIntermediateCertificates()
Map<X500Principal,List<X509Certificate>>	getHttpsRootCertificates()
KeyStore	getHttpsTruststore()	Returns the truststore used for mTLS
Map<X500Principal,List<X509Certificate>>	getIntermediateCertificates()
HostnameVerificationPolicy	getPolicy()
Map<X500Principal,List<X509Certificate>>	getRootCertificates()
SSLSocketFactory	getSSLSocketFactory()
KeyStore	getTruststore()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

FileTruststoreProvider

public FileTruststoreProvider(KeyStore truststore,
 HostnameVerificationPolicy policy,
 Map<X500Principal,List<X509Certificate>> rootCertificates,
 Map<X500Principal,List<X509Certificate>> intermediateCertificates,
 KeyStore httpsTruststore,
 Map<X500Principal,List<X509Certificate>> httpsRootCertificates,
 Map<X500Principal,List<X509Certificate>> httpsIntermediateCertificates)

Method Details

getPolicy

public HostnameVerificationPolicy getPolicy()

Specified by:

getPolicy in interface TruststoreProvider

getSSLSocketFactory

public SSLSocketFactory getSSLSocketFactory()

Specified by:

getSSLSocketFactory in interface TruststoreProvider

getTruststore

public KeyStore getTruststore()

Specified by:

getTruststore in interface TruststoreProvider

getHttpsTruststore

public KeyStore getHttpsTruststore()

Description copied from interface: TruststoreProvider

Returns the truststore used for mTLS

Specified by:

getHttpsTruststore in interface TruststoreProvider

Returns:

The mTLS truststore

getHttpsRootCertificates

public Map<X500Principal,List<X509Certificate>> getHttpsRootCertificates()

Specified by:

getHttpsRootCertificates in interface TruststoreProvider

getHttpsIntermediateCertificates

public Map<X500Principal,List<X509Certificate>> getHttpsIntermediateCertificates()

Specified by:

getHttpsIntermediateCertificates in interface TruststoreProvider

getRootCertificates

public Map<X500Principal,List<X509Certificate>> getRootCertificates()

Specified by:

getRootCertificates in interface TruststoreProvider

Returns:

root certificates from the configured truststore as a map where the key is the X500Principal of the corresponding X509Certificate

getIntermediateCertificates

public Map<X500Principal,List<X509Certificate>> getIntermediateCertificates()

Specified by:

getIntermediateCertificates in interface TruststoreProvider

Returns:

intermediate certificates from the configured truststore as a map where the key is the X500Principal of the corresponding X509Certificate

close

public void close()

Specified by:

close in interface Provider