Back to index...

	/*
	* Copyright (c) 1999, 2018, Oracle and/or its affiliates. All rights reserved.
	* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
	*
	* This code is free software; you can redistribute it and/or modify it
	* under the terms of the GNU General Public License version 2 only, as
	* published by the Free Software Foundation. Oracle designates this
	* particular file as subject to the "Classpath" exception as provided
	* by Oracle in the LICENSE file that accompanied this code.
	*
	* This code is distributed in the hope that it will be useful, but WITHOUT
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
	* version 2 for more details (a copy is included in the LICENSE file that
	* accompanied this code).
	*
	* You should have received a copy of the GNU General Public License version
	* 2 along with this work; if not, write to the Free Software Foundation,
	* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
	*
	* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
	* or visit www.oracle.com if you need additional information or have any
	* questions.
	*/

	package sun.security.ssl;

	import java.io.*;
	import java.security.*;
	import java.security.cert.*;
	import java.util.*;
	import javax.net.ssl.*;
	import sun.security.validator.TrustStoreUtil;
	import sun.security.validator.Validator;

	abstract class TrustManagerFactoryImpl extends TrustManagerFactorySpi {

	private X509TrustManager trustManager = null;
	private boolean isInitialized = false;

	TrustManagerFactoryImpl() {
	// empty
	}

	@Override
	protected void engineInit(KeyStore ks) throws KeyStoreException {
	if (ks == null) {
	try {
	trustManager = getInstance(TrustStoreManager.getTrustedCerts());
	} catch (SecurityException se) {
	// eat security exceptions but report other throwables
	if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
	SSLLogger.fine(
	"SunX509: skip default keystore", se);
	}
	} catch (Error err) {
	if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
	SSLLogger.fine(
	"SunX509: skip default keystore", err);
	}
	throw err;
	} catch (RuntimeException re) {
	if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
	SSLLogger.fine(
	"SunX509: skip default keystor", re);
	}
	throw re;
	} catch (Exception e) {
	if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
	SSLLogger.fine(
	"SunX509: skip default keystore", e);
	}
	throw new KeyStoreException(
	"problem accessing trust store", e);
	}
	} else {
	trustManager = getInstance(TrustStoreUtil.getTrustedCerts(ks));
	}

	isInitialized = true;
	}

	abstract X509TrustManager getInstance(
	Collection<X509Certificate> trustedCerts);

	abstract X509TrustManager getInstance(ManagerFactoryParameters spec)
	throws InvalidAlgorithmParameterException;

	@Override
	protected void engineInit(ManagerFactoryParameters spec) throws
	InvalidAlgorithmParameterException {
	trustManager = getInstance(spec);
	isInitialized = true;
	}

	/**
	* Returns one trust manager for each type of trust material.
	*/
	@Override
	protected TrustManager[] engineGetTrustManagers() {
	if (!isInitialized) {
	throw new IllegalStateException(
	"TrustManagerFactoryImpl is not initialized");
	}
	return new TrustManager[] { trustManager };
	}

	/*
	* Try to get an InputStream based on the file we pass in.
	*/
	private static FileInputStream getFileInputStream(final File file)
	throws Exception {
	return AccessController.doPrivileged(
	new PrivilegedExceptionAction<FileInputStream>() {
	@Override
	public FileInputStream run() throws Exception {
	try {
	if (file.exists()) {
	return new FileInputStream(file);
	} else {
	return null;
	}
	} catch (FileNotFoundException e) {
	// couldn't find it, oh well.
	return null;
	}
	}
	});
	}

	public static final class SimpleFactory extends TrustManagerFactoryImpl {
	@Override
	X509TrustManager getInstance(
	Collection<X509Certificate> trustedCerts) {
	return new X509TrustManagerImpl(
	Validator.TYPE_SIMPLE, trustedCerts);
	}

	@Override
	X509TrustManager getInstance(ManagerFactoryParameters spec)
	throws InvalidAlgorithmParameterException {
	throw new InvalidAlgorithmParameterException
	("SunX509 TrustManagerFactory does not use "
	+ "ManagerFactoryParameters");
	}
	}

	public static final class PKIXFactory extends TrustManagerFactoryImpl {
	@Override
	X509TrustManager getInstance(
	Collection<X509Certificate> trustedCerts) {
	return new X509TrustManagerImpl(Validator.TYPE_PKIX, trustedCerts);
	}

	@Override
	X509TrustManager getInstance(ManagerFactoryParameters spec)
	throws InvalidAlgorithmParameterException {
	if (spec instanceof CertPathTrustManagerParameters == false) {
	throw new InvalidAlgorithmParameterException
	("Parameters must be CertPathTrustManagerParameters");
	}
	CertPathParameters params =
	((CertPathTrustManagerParameters)spec).getParameters();
	if (params instanceof PKIXBuilderParameters == false) {
	throw new InvalidAlgorithmParameterException
	("Encapsulated parameters must be PKIXBuilderParameters");
	}
	PKIXBuilderParameters pkixParams = (PKIXBuilderParameters)params;
	return new X509TrustManagerImpl(Validator.TYPE_PKIX, pkixParams);
	}
	}
	}

Back to index...