Package org.postgresql.ssl

Class LazyKeyManager

java.lang.Object

org.postgresql.ssl.LazyKeyManager

All Implemented Interfaces:

KeyManager, X509KeyManager

public class LazyKeyManager
extends Object
implements X509KeyManager

A Key manager that only loads the keys, if necessary.

Field Summary

Fields

Modifier and Type	Field	Description
private final CallbackHandler	cbh
private X509Certificate[]	cert
private final String	certfile
private final boolean	defaultfile
private PSQLException	error
private PrivateKey	key
private final String	keyfile

Constructor Summary

Constructors

Constructor	Description
LazyKeyManager(String certfile, String keyfile, CallbackHandler cbh, boolean defaultfile)	Constructor.

Method Summary

Modifier and Type	Method	Description
String	chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket)
String	chooseServerAlias(String keyType, Principal[] issuers, Socket socket)
X509Certificate[]	getCertificateChain(String alias)
String[]	getClientAliases(String keyType, Principal[] issuers)
PrivateKey	getPrivateKey(String alias)
String[]	getServerAliases(String keyType, Principal[] issuers)
private static byte[]	readFileFully(String path)
void	throwKeyManagerException()	getCertificateChain and getPrivateKey cannot throw exceptions, therefore any exception is stored in error and can be raised by this method.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

cert

private X509Certificate[] cert

key

private PrivateKey key

certfile

private final String certfile

keyfile

private final String keyfile

cbh

private final CallbackHandler cbh

defaultfile

private final boolean defaultfile

error

private PSQLException error

Constructor Details

LazyKeyManager

public LazyKeyManager(String certfile,
 String keyfile,
 CallbackHandler cbh,
 boolean defaultfile)

Constructor. certfile and keyfile can be null, in that case no certificate is presented to the server.

Parameters:

certfile - certfile

keyfile - key file

cbh - callback handler

defaultfile - default file

Method Details

throwKeyManagerException

public void throwKeyManagerException()
                              throws PSQLException

getCertificateChain and getPrivateKey cannot throw exceptions, therefore any exception is stored in error and can be raised by this method.

Throws:

PSQLException - if any exception is stored in error and can be raised

chooseClientAlias

public String chooseClientAlias(String[] keyType,
 Principal[] issuers,
 Socket socket)

Specified by:

chooseClientAlias in interface X509KeyManager

chooseServerAlias

public String chooseServerAlias(String keyType,
 Principal[] issuers,
 Socket socket)

Specified by:

chooseServerAlias in interface X509KeyManager

getCertificateChain

public X509Certificate[] getCertificateChain(String alias)

Specified by:

getCertificateChain in interface X509KeyManager

getClientAliases

public String[] getClientAliases(String keyType,
 Principal[] issuers)

Specified by:

getClientAliases in interface X509KeyManager

readFileFully

private static byte[] readFileFully(String path)
                             throws IOException

Throws:

IOException

getPrivateKey

public PrivateKey getPrivateKey(String alias)

Specified by:

getPrivateKey in interface X509KeyManager

getServerAliases

public String[] getServerAliases(String keyType,
 Principal[] issuers)

Specified by:

getServerAliases in interface X509KeyManager