io.netty.handler.ssl

Class OpenSslX509KeyManagerFactory

java.lang.Object

javax.net.ssl.KeyManagerFactory

io.netty.handler.ssl.OpenSslX509KeyManagerFactory

public final class OpenSslX509KeyManagerFactory
extends KeyManagerFactory

Special KeyManagerFactory that pre-compute the keymaterial used when SslProvider.OPENSSL or SslProvider.OPENSSL_REFCNT is used and so will improve handshake times and its performance. Because the keymaterial is pre-computed any modification to the KeyStore is ignored after KeyManagerFactory.init(KeyStore, char[]) is called. KeyManagerFactory.init(ManagerFactoryParameters) is not supported by this implementation and so a call to it will always result in an InvalidAlgorithmParameterException.

Constructor Summary

Constructors

Constructor and Description
OpenSslX509KeyManagerFactory()
OpenSslX509KeyManagerFactory(Provider provider)
OpenSslX509KeyManagerFactory(String algorithm, Provider provider)

Method Summary

Modifier and Type	Method and Description
static OpenSslX509KeyManagerFactory	newEngineBased(File certificateChain, String password) Create a new initialized OpenSslX509KeyManagerFactory which loads its PrivateKey directly from an OpenSSL engine via the ENGINE_load_private_key function.
static OpenSslX509KeyManagerFactory	newEngineBased(X509Certificate[] certificateChain, String password) Create a new initialized OpenSslX509KeyManagerFactory which loads its PrivateKey directly from an OpenSSL engine via the ENGINE_load_private_key function.
static OpenSslX509KeyManagerFactory	newKeyless(File chain) See newEngineBased(X509Certificate[], String).
static OpenSslX509KeyManagerFactory	newKeyless(InputStream chain) See newEngineBased(X509Certificate[], String).
static OpenSslX509KeyManagerFactory	newKeyless(X509Certificate... certificateChain) Returns a new initialized OpenSslX509KeyManagerFactory which will provide its private key by using the OpenSslPrivateKeyMethod.

Methods inherited from class javax.net.ssl.KeyManagerFactory

getAlgorithm, getDefaultAlgorithm, getInstance, getInstance, getInstance, getKeyManagers, getProvider, init, init

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpenSslX509KeyManagerFactory

public OpenSslX509KeyManagerFactory()

OpenSslX509KeyManagerFactory

public OpenSslX509KeyManagerFactory(Provider provider)

OpenSslX509KeyManagerFactory

public OpenSslX509KeyManagerFactory(String algorithm,
                                    Provider provider)
                             throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

Method Detail

newEngineBased

public static OpenSslX509KeyManagerFactory newEngineBased(File certificateChain,
                                                          String password)
                                                   throws CertificateException,
                                                          IOException,
                                                          KeyStoreException,
                                                          NoSuchAlgorithmException,
                                                          UnrecoverableKeyException

Create a new initialized OpenSslX509KeyManagerFactory which loads its PrivateKey directly from an OpenSSL engine via the ENGINE_load_private_key function.

Throws:

CertificateException

IOException

KeyStoreException

NoSuchAlgorithmException

UnrecoverableKeyException

newEngineBased

public static OpenSslX509KeyManagerFactory newEngineBased(X509Certificate[] certificateChain,
                                                          String password)
                                                   throws CertificateException,
                                                          IOException,
                                                          KeyStoreException,
                                                          NoSuchAlgorithmException,
                                                          UnrecoverableKeyException

Create a new initialized OpenSslX509KeyManagerFactory which loads its PrivateKey directly from an OpenSSL engine via the ENGINE_load_private_key function.

Throws:

CertificateException

IOException

KeyStoreException

NoSuchAlgorithmException

UnrecoverableKeyException

newKeyless

public static OpenSslX509KeyManagerFactory newKeyless(File chain)
                                               throws CertificateException,
                                                      IOException,
                                                      KeyStoreException,
                                                      NoSuchAlgorithmException,
                                                      UnrecoverableKeyException

See newEngineBased(X509Certificate[], String).

Throws:

CertificateException

IOException

KeyStoreException

NoSuchAlgorithmException

UnrecoverableKeyException

newKeyless

public static OpenSslX509KeyManagerFactory newKeyless(InputStream chain)
                                               throws CertificateException,
                                                      IOException,
                                                      KeyStoreException,
                                                      NoSuchAlgorithmException,
                                                      UnrecoverableKeyException

See newEngineBased(X509Certificate[], String).

Throws:

CertificateException

IOException

KeyStoreException

NoSuchAlgorithmException

UnrecoverableKeyException

newKeyless

public static OpenSslX509KeyManagerFactory newKeyless(X509Certificate... certificateChain)
                                               throws CertificateException,
                                                      IOException,
                                                      KeyStoreException,
                                                      NoSuchAlgorithmException,
                                                      UnrecoverableKeyException

Returns a new initialized OpenSslX509KeyManagerFactory which will provide its private key by using the OpenSslPrivateKeyMethod.

Throws:

CertificateException

IOException

KeyStoreException

NoSuchAlgorithmException

UnrecoverableKeyException