Package org.graylog2.security

Class TruststoreCreator

java.lang.Object

org.graylog2.security.TruststoreCreator

public class TruststoreCreator
extends Object

Constructor Summary

Constructors

Constructor	Description
TruststoreCreator(KeyStore truststore)

Method Summary

Modifier and Type	Method	Description
TruststoreCreator	addCertificates(List<X509Certificate> trustedCertificates)
TruststoreCreator	addFromKeystore(KeystoreInformation keystoreInformation, String alias)	Originally we added only the root(=selfsigned) certificate to the truststore.
KeyStore	getTruststore()
static TruststoreCreator	newDefaultJvm()
static TruststoreCreator	newEmpty()
FilesystemKeystoreInformation	persist(Path truststorePath, char[] truststorePassword)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TruststoreCreator

public TruststoreCreator(KeyStore truststore)

Method Details

newDefaultJvm

public static TruststoreCreator newDefaultJvm()

newEmpty

public static TruststoreCreator newEmpty()

addFromKeystore

public TruststoreCreator addFromKeystore(KeystoreInformation keystoreInformation,
 String alias)
                                  throws IOException,
GeneralSecurityException

Originally we added only the root(=selfsigned) certificate to the truststore. But this causes problems with usage of intermediate CAs. There is nothing wrong adding the whole cert chain to the truststore.

Parameters:

keystoreInformation - access to the keystore, to obtain certificate chains by the given alias

alias - which certificate chain should we extract from the provided keystore

Throws:

IOException

GeneralSecurityException

addCertificates

public TruststoreCreator addCertificates(List<X509Certificate> trustedCertificates)

persist

public FilesystemKeystoreInformation persist(Path truststorePath,
 char[] truststorePassword)
                                      throws IOException,
GeneralSecurityException

Throws:

IOException

GeneralSecurityException

getTruststore

@Nonnull
public KeyStore getTruststore()