Package org.keycloak.truststore

Class TruststoreBuilder

java.lang.Object

org.keycloak.truststore.TruststoreBuilder

public class TruststoreBuilder
extends Object

Builds a system-wide truststore from the given config options.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DUMMY_PASSWORD
static final String	SYSTEM_TRUSTSTORE_KEY
static final String	SYSTEM_TRUSTSTORE_PASSWORD_KEY
static final String	SYSTEM_TRUSTSTORE_TYPE_KEY

Constructor Summary

Constructors

Constructor	Description
TruststoreBuilder()

Method Summary

Modifier and Type	Method	Description
static void	includeKubernetesTrustStorePaths(List<String> trustStores)	Include the Kubernetes and/or OpenShift service CA truststore paths if enabled and the files exist.
static void	includeKubernetesTrustStorePaths(List<String> trustStores, String kubernetesCaPath, String serviceCaPath)	Include the Kubernetes and/or OpenShift service CA truststore paths if enabled and the files exist.
static void	setSystemTruststore(String[] truststores, boolean trustStoreIncludeDefault, String dataDir)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

SYSTEM_TRUSTSTORE_KEY

public static final String SYSTEM_TRUSTSTORE_KEY

See Also:

• Constant Field Values

SYSTEM_TRUSTSTORE_PASSWORD_KEY

public static final String SYSTEM_TRUSTSTORE_PASSWORD_KEY

See Also:

• Constant Field Values

SYSTEM_TRUSTSTORE_TYPE_KEY

public static final String SYSTEM_TRUSTSTORE_TYPE_KEY

See Also:

• Constant Field Values

DUMMY_PASSWORD

public static final String DUMMY_PASSWORD

See Also:

• Constant Field Values

Constructor Details

TruststoreBuilder

public TruststoreBuilder()

Method Details

setSystemTruststore

public static void setSystemTruststore(String[] truststores,
 boolean trustStoreIncludeDefault,
 String dataDir)

includeKubernetesTrustStorePaths

public static void includeKubernetesTrustStorePaths(List<String> trustStores)

Include the Kubernetes and/or OpenShift service CA truststore paths if enabled and the files exist. Uses the default well-known Kubernetes service account paths.

Parameters:

trustStores - the existing truststore paths

includeKubernetesTrustStorePaths

public static void includeKubernetesTrustStorePaths(List<String> trustStores,
 String kubernetesCaPath,
 String serviceCaPath)

Include the Kubernetes and/or OpenShift service CA truststore paths if enabled and the files exist.

Parameters:

trustStores - the existing truststore paths

kubernetesCaPath - path to the Kubernetes service account CA certificate

serviceCaPath - path to the OpenShift service CA certificate