Module org.eclipse.milo.opcua.stack.core

Package org.eclipse.milo.opcua.stack.core.security

Class FileBasedTrustListManager

java.lang.Object

org.eclipse.milo.opcua.stack.core.security.FileBasedTrustListManager

All Implemented Interfaces:

Closeable, AutoCloseable, TrustListManager

public class FileBasedTrustListManager
extends Object
implements TrustListManager, Closeable

Constructor Summary

Constructors

Constructor	Description
FileBasedTrustListManager(Path issuerCertsDir, Path issuerCrlDir, Path trustedCertsDir, Path trustedCrlDir)

Method Summary

Modifier and Type	Method	Description
void	addIssuerCertificate(X509Certificate certificate)	Add certificate to the Issuer Certificates list.
void	addTrustedCertificate(X509Certificate certificate)	Add certificate to the Trusted Certificates list.
void	close()
static FileBasedTrustListManager	createAndInitialize(Path baseDir)	Create and initialize a FileBasedTrustListManager at the specified baseDir, creating directories as necessary.
List<X509Certificate>	getIssuerCertificates()	Get the list of Issuer Certificates.
List<X509CRL>	getIssuerCrls()	Get the list of Issuer CRLs.
DateTime	getLastUpdateTime()	Get the last time the Trust List was updated.
List<X509Certificate>	getTrustedCertificates()	Get the list of Trusted Certificates.
List<X509CRL>	getTrustedCrls()	Get the list of Trusted CRLs.
void	initialize()
boolean	removeIssuerCertificate(ByteString thumbprint)	Remove the certificate identified by thumbprint from the Issuer Certificates list.
boolean	removeTrustedCertificate(ByteString thumbprint)	Remove the certificate identified by thumbprint from the Trusted Certificates list.
void	setIssuerCertificates(List<X509Certificate> issuerCertificates)	Set a new list of Issuer Certificates.
void	setIssuerCrls(List<X509CRL> issuerCrls)	Set a new list of Issuer CRLs.
void	setTrustedCertificates(List<X509Certificate> trustedCertificates)	Set a new list of Trusted Certificates.
void	setTrustedCrls(List<X509CRL> trustedCrls)	Set a new list of Trusted CRLs.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

FileBasedTrustListManager

public FileBasedTrustListManager(Path issuerCertsDir,
 Path issuerCrlDir,
 Path trustedCertsDir,
 Path trustedCrlDir)

Method Details

initialize

public void initialize()
                throws IOException

Throws:

IOException

close

public void close()
           throws IOException

Specified by:

close in interface AutoCloseable

Specified by:

close in interface Closeable

Throws:

IOException

getIssuerCrls

public List<X509CRL> getIssuerCrls()

Description copied from interface: TrustListManager

Get the list of Issuer CRLs.

Specified by:

getIssuerCrls in interface TrustListManager

Returns:

the list of Issuer X509CRLs.

getTrustedCrls

public List<X509CRL> getTrustedCrls()

Description copied from interface: TrustListManager

Get the list of Trusted CRLs.

Specified by:

getTrustedCrls in interface TrustListManager

Returns:

the list of Trusted X509CRLs.

getIssuerCertificates

public List<X509Certificate> getIssuerCertificates()

Description copied from interface: TrustListManager

Get the list of Issuer Certificates.

Specified by:

getIssuerCertificates in interface TrustListManager

Returns:

the list of Issuer X509Certificates.

getTrustedCertificates

public List<X509Certificate> getTrustedCertificates()

Description copied from interface: TrustListManager

Get the list of Trusted Certificates.

Specified by:

getTrustedCertificates in interface TrustListManager

Returns:

the list of Trusted X509Certificates.

setIssuerCrls

public void setIssuerCrls(List<X509CRL> issuerCrls)

Description copied from interface: TrustListManager

Set a new list of Issuer CRLs. This replaces any existing Issuer CRLs.

Specified by:

setIssuerCrls in interface TrustListManager

Parameters:

issuerCrls - a new list of issuer X509CRLs.

setTrustedCrls

public void setTrustedCrls(List<X509CRL> trustedCrls)

Description copied from interface: TrustListManager

Set a new list of Trusted CRLs. This replaces any existing Trusted CRLs.

Specified by:

setTrustedCrls in interface TrustListManager

Parameters:

trustedCrls - a new list of trusted X509CRLs.

setIssuerCertificates

public void setIssuerCertificates(List<X509Certificate> issuerCertificates)

Description copied from interface: TrustListManager

Set a new list of Issuer Certificates. This replaces any existing Issuer Certificates.

Specified by:

setIssuerCertificates in interface TrustListManager

Parameters:

issuerCertificates - a new list of issuer X509Certificates.

setTrustedCertificates

public void setTrustedCertificates(List<X509Certificate> trustedCertificates)

Description copied from interface: TrustListManager

Set a new list of Trusted Certificates. This replaces any existing Trusted Certificates.

Specified by:

setTrustedCertificates in interface TrustListManager

Parameters:

trustedCertificates - a new list of trusted X509Certificates.

addIssuerCertificate

public void addIssuerCertificate(X509Certificate certificate)

Description copied from interface: TrustListManager

Add certificate to the Issuer Certificates list.

Specified by:

addIssuerCertificate in interface TrustListManager

Parameters:

certificate - the X509Certificate to add to the Issuer Certificates list.

addTrustedCertificate

public void addTrustedCertificate(X509Certificate certificate)

Description copied from interface: TrustListManager

Add certificate to the Trusted Certificates list.

Specified by:

addTrustedCertificate in interface TrustListManager

Parameters:

certificate - the X509Certificate to add to the Trusted Certificates list.

removeIssuerCertificate

public boolean removeIssuerCertificate(ByteString thumbprint)

Description copied from interface: TrustListManager

Remove the certificate identified by thumbprint from the Issuer Certificates list.

Specified by:

removeIssuerCertificate in interface TrustListManager

Parameters:

thumbprint - the certificate thumbprint.

Returns:

true if a certificate with a matching thumbprint was found.

removeTrustedCertificate

public boolean removeTrustedCertificate(ByteString thumbprint)

Description copied from interface: TrustListManager

Remove the certificate identified by thumbprint from the Trusted Certificates list.

Specified by:

removeTrustedCertificate in interface TrustListManager

Parameters:

thumbprint - the certificate thumbprint.

Returns:

true if a certificate with a matching thumbprint was found.

getLastUpdateTime

public DateTime getLastUpdateTime()

Description copied from interface: TrustListManager

Get the last time the Trust List was updated.

Specified by:

getLastUpdateTime in interface TrustListManager

Returns:

the last time the Trust List was updated.

createAndInitialize

public static FileBasedTrustListManager createAndInitialize(Path baseDir)
                                                     throws IOException

Create and initialize a FileBasedTrustListManager at the specified baseDir, creating directories as necessary.

Parameters:

baseDir - the base directory to manage the Trust List in.

Returns:

a new, initialized FileBasedTrustListManager instance.

Throws:

IOException - if an error occurs creating directories or initializing.