/*
    * Copyright 2012 The Netty Project
    *
    * The Netty Project licenses this file to you under the Apache License,
    * version 2.0 (the "License"); you may not use this file except in compliance
    * with the License. You may obtain a copy of the License at:
    *
    *   http://www.apache.org/licenses/LICENSE-2.0
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
   * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
   * License for the specific language governing permissions and limitations
   * under the License.
   */
  package org.jboss.netty.example.securechat;
  
  import javax.net.ssl.ManagerFactoryParameters;
  import javax.net.ssl.TrustManager;
  import javax.net.ssl.TrustManagerFactorySpi;
  import javax.net.ssl.X509TrustManager;
  import java.security.InvalidAlgorithmParameterException;
  import java.security.KeyStore;
  import java.security.KeyStoreException;
  import java.security.cert.X509Certificate;
  
  /**
   * Bogus {@link TrustManagerFactorySpi} which accepts any certificate
   * even if it is invalid.
   */
  public class SecureChatTrustManagerFactory extends TrustManagerFactorySpi {
  
      private static final TrustManager DUMMY_TRUST_MANAGER = new X509TrustManager() {
          public X509Certificate[] getAcceptedIssuers() {
              return new X509Certificate[0];
          }
  
          public void checkClientTrusted(X509Certificate[] chain, String authType) {
              // Always trust - it is an example.
              // You should do something in the real world.
              // You will reach here only if you enabled client certificate auth,
              // as described in SecureChatSslContextFactory.
              System.err.println(
                      "UNKNOWN CLIENT CERTIFICATE: " + chain[0].getSubjectDN());
          }
  
          public void checkServerTrusted(X509Certificate[] chain, String authType) {
              // Always trust - it is an example.
              // You should do something in the real world.
              System.err.println(
                      "UNKNOWN SERVER CERTIFICATE: " + chain[0].getSubjectDN());
          }
      };
  
      public static TrustManager[] getTrustManagers() {
          return new TrustManager[] { DUMMY_TRUST_MANAGER };
      }
  
      @Override
      protected TrustManager[] engineGetTrustManagers() {
          return getTrustManagers();
      }
  
      @Override
      protected void engineInit(KeyStore keystore) throws KeyStoreException {
          // Unused
      }
  
      @Override
      protected void engineInit(ManagerFactoryParameters managerFactoryParameters)
              throws InvalidAlgorithmParameterException {
          // Unused
      }
  }