| | |
| | | */ |
| | | package org.opends.server.extensions; |
| | | |
| | | |
| | | |
| | | import java.security.cert.X509Certificate; |
| | | import javax.net.ssl.TrustManager; |
| | | import javax.net.ssl.X509TrustManager; |
| | |
| | | import org.opends.server.types.DirectoryException; |
| | | import org.opends.server.types.InitializationException; |
| | | |
| | | |
| | | |
| | | /** |
| | | * This class provides an implementation of a trust manager provider that will |
| | | * indicate that any certificate presented should be blindly trusted by the |
| | |
| | | // No implementation is required. |
| | | } |
| | | |
| | | |
| | | |
| | | /** {@inheritDoc} */ |
| | | @Override |
| | | public void initializeTrustManagerProvider( |
| | | BlindTrustManagerProviderCfg configuration) |
| | |
| | | // No implementation is required. |
| | | } |
| | | |
| | | |
| | | |
| | | /** |
| | | * Performs any finalization that may be necessary for this trust manager |
| | | * provider. |
| | | */ |
| | | @Override |
| | | public void finalizeTrustManagerProvider() |
| | | { |
| | | // No implementation is required. |
| | | } |
| | | |
| | | |
| | | |
| | | /** {@inheritDoc} */ |
| | | @Override |
| | | public TrustManager[] getTrustManagers() |
| | | throws DirectoryException |
| | |
| | | return new TrustManager[] { this }; |
| | | } |
| | | |
| | | |
| | | |
| | | /** |
| | | * Determines whether an SSL client with the provided certificate chain should |
| | | * be trusted. In this case, all client certificates will be trusted. |
| | |
| | | * @param chain The certificate chain for the SSL client. |
| | | * @param authType The authentication type based on the client certificate. |
| | | */ |
| | | @Override |
| | | public void checkClientTrusted(X509Certificate[] chain, String authType) |
| | | { |
| | | // As long as we don't throw an exception, then the client certificate will |
| | | // be considered trusted. |
| | | } |
| | | |
| | | |
| | | |
| | | /** |
| | | * Determines whether an SSL server with the provided certificate chain should |
| | | * be trusted. In this case, all server certificates will be trusted. |
| | |
| | | * @param chain The certificate chain for the SSL server. |
| | | * @param authType The key exchange algorithm used. |
| | | */ |
| | | @Override |
| | | public void checkServerTrusted(X509Certificate[] chain, String authType) |
| | | { |
| | | // As long as we don't throw an exception, then the server certificate will |
| | | // be considered trusted. |
| | | } |
| | | |
| | | |
| | | |
| | | /** |
| | | * Retrieves the set of certificate authority certificates which are trusted |
| | | * for authenticating peers. |
| | |
| | | * @return An empty array, since we don't care what certificates are |
| | | * presented because we will trust them all. |
| | | */ |
| | | @Override |
| | | public X509Certificate[] getAcceptedIssuers() |
| | | { |
| | | return new X509Certificate[0]; |
| | | } |
| | | } |
| | | |