org.eclipse.milo.opcua.stack.core.security

Class DefaultTrustListManager

java.lang.Object

org.eclipse.milo.opcua.stack.core.security.DefaultTrustListManager

All Implemented Interfaces:

AutoCloseable, TrustListManager

public class DefaultTrustListManager
extends Object
implements TrustListManager, AutoCloseable

Constructor Summary

Constructors

Constructor and Description
DefaultTrustListManager(File baseDir)

Method Summary

Modifier and Type	Method and Description
void	addIssuerCertificate(X509Certificate certificate) Add certificate to the Issuer Certificates list.
void	addRejectedCertificate(X509Certificate certificate) Add certificate to the Rejected Certificates list.
void	addTrustedCertificate(X509Certificate certificate) Add certificate to the Trusted Certificates list.
void	close() Stop the certificate store watcher and free all resources.
File	getBaseDir()
com.google.common.collect.ImmutableList<X509Certificate>	getIssuerCertificates() Get the list of Issuer Certificates.
File	getIssuerCertsDir()
File	getIssuerCrlDir()
com.google.common.collect.ImmutableList<X509CRL>	getIssuerCrls() Get the list of Issuer CRLs.
File	getIssuerDir()
com.google.common.collect.ImmutableList<X509Certificate>	getRejectedCertificates() Get the list of Rejected Certificates.
File	getRejectedDir()
com.google.common.collect.ImmutableList<X509Certificate>	getTrustedCertificates() Get the list of Trusted Certificates.
File	getTrustedCertsDir()
File	getTrustedCrlDir()
com.google.common.collect.ImmutableList<X509CRL>	getTrustedCrls() Get the list of Trusted CRLs.
File	getTrustedDir()
boolean	removeIssuerCertificate(ByteString thumbprint) Remove the certificate identified by thumbprint from the Issuer Certificates list.
boolean	removeRejectedCertificate(ByteString thumbprint) Remove the certificate identified by thumbprint from the Rejected Certificates list.
boolean	removeTrustedCertificate(ByteString thumbprint) Remove the certificate identified by thumbprint from the Trusted Certificates list.
void	setIssuerCertificates(List<X509Certificate> issuerCertificates) Set a new list of Issuer Certificates.
void	setIssuerCrls(List<X509CRL> issuerCrls) Set a new list of Issuer CRLs.
void	setTrustedCertificates(List<X509Certificate> trustedCertificates) Set a new list of Trusted Certificates.
void	setTrustedCrls(List<X509CRL> trustedCrls) Set a new list of Trusted CRLs.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultTrustListManager

public DefaultTrustListManager(File baseDir)
                        throws IOException

Throws:

IOException

Method Detail

close

public void close()
           throws IOException

Stop the certificate store watcher and free all resources.

After calling closing CertificateValidator.validateCertificateChain(List) will fail for all inputs.

Specified by:

close in interface AutoCloseable

Throws:

IOException

getIssuerCrls

public com.google.common.collect.ImmutableList<X509CRL> getIssuerCrls()

Description copied from interface: TrustListManager

Get the list of Issuer CRLs.

Specified by:

getIssuerCrls in interface TrustListManager

Returns:

the list of Issuer X509CRLs.

getTrustedCrls

public com.google.common.collect.ImmutableList<X509CRL> getTrustedCrls()

Description copied from interface: TrustListManager

Get the list of Trusted CRLs.

Specified by:

getTrustedCrls in interface TrustListManager

Returns:

the list of Trusted X509CRLs.

getIssuerCertificates

public com.google.common.collect.ImmutableList<X509Certificate> getIssuerCertificates()

Description copied from interface: TrustListManager

Get the list of Issuer Certificates.

Specified by:

getIssuerCertificates in interface TrustListManager

Returns:

the list of Issuer X509Certificates.

getTrustedCertificates

public com.google.common.collect.ImmutableList<X509Certificate> getTrustedCertificates()

Description copied from interface: TrustListManager

Get the list of Trusted Certificates.

Specified by:

getTrustedCertificates in interface TrustListManager

Returns:

the list of Trusted X509Certificates.

getRejectedCertificates

public com.google.common.collect.ImmutableList<X509Certificate> getRejectedCertificates()

Description copied from interface: TrustListManager

Get the list of Rejected Certificates.

Specified by:

getRejectedCertificates in interface TrustListManager

Returns:

the list of Rejected X509Certificates.

setIssuerCrls

public void setIssuerCrls(List<X509CRL> issuerCrls)

Description copied from interface: TrustListManager

Set a new list of Issuer CRLs. This replaces any existing Issuer CRLs.

Specified by:

setIssuerCrls in interface TrustListManager

Parameters:

issuerCrls - a new list of issuer X509CRLs.

setTrustedCrls

public void setTrustedCrls(List<X509CRL> trustedCrls)

Description copied from interface: TrustListManager

Set a new list of Trusted CRLs. This replaces any existing Trusted CRLs.

Specified by:

setTrustedCrls in interface TrustListManager

Parameters:

trustedCrls - a new list of trusted X509CRLs.

setIssuerCertificates

public void setIssuerCertificates(List<X509Certificate> issuerCertificates)

Description copied from interface: TrustListManager

Set a new list of Issuer Certificates. This replaces any existing Issuer Certificates.

Specified by:

setIssuerCertificates in interface TrustListManager

Parameters:

issuerCertificates - a new list of issuer X509Certificates.

setTrustedCertificates

public void setTrustedCertificates(List<X509Certificate> trustedCertificates)

Description copied from interface: TrustListManager

Set a new list of Trusted Certificates. This replaces any existing Trusted Certificates.

Specified by:

setTrustedCertificates in interface TrustListManager

Parameters:

trustedCertificates - a new list of trusted X509Certificates.

addIssuerCertificate

public void addIssuerCertificate(X509Certificate certificate)

Description copied from interface: TrustListManager

Add certificate to the Issuer Certificates list.

Specified by:

addIssuerCertificate in interface TrustListManager

Parameters:

certificate - the X509Certificate to add to the Issuer Certificates list.

addTrustedCertificate

public void addTrustedCertificate(X509Certificate certificate)

Description copied from interface: TrustListManager

Add certificate to the Trusted Certificates list.

Specified by:

addTrustedCertificate in interface TrustListManager

Parameters:

certificate - the X509Certificate to add to the Trusted Certificates list.

addRejectedCertificate

public void addRejectedCertificate(X509Certificate certificate)

Description copied from interface: TrustListManager

Add certificate to the Rejected Certificates list.

Specified by:

addRejectedCertificate in interface TrustListManager

Parameters:

certificate - the X509Certificate to add to the Rejected Certificates list.

removeIssuerCertificate

public boolean removeIssuerCertificate(ByteString thumbprint)

Description copied from interface: TrustListManager

Remove the certificate identified by thumbprint from the Issuer Certificates list.

Specified by:

removeIssuerCertificate in interface TrustListManager

Parameters:

thumbprint - the certificate thumbprint.

Returns:

true if a certificate with a matching thumbprint was found.

removeTrustedCertificate

public boolean removeTrustedCertificate(ByteString thumbprint)

Description copied from interface: TrustListManager

Remove the certificate identified by thumbprint from the Trusted Certificates list.

Specified by:

removeTrustedCertificate in interface TrustListManager

Parameters:

thumbprint - the certificate thumbprint.

Returns:

true if a certificate with a matching thumbprint was found.

removeRejectedCertificate

public boolean removeRejectedCertificate(ByteString thumbprint)

Description copied from interface: TrustListManager

Remove the certificate identified by thumbprint from the Rejected Certificates list.

Specified by:

removeRejectedCertificate in interface TrustListManager

Parameters:

thumbprint - the certificate thumbprint.

Returns:

true if a certificate with a matching thumbprint was found.

getBaseDir

public File getBaseDir()

getIssuerDir

public File getIssuerDir()

getIssuerCertsDir

public File getIssuerCertsDir()

getIssuerCrlDir

public File getIssuerCrlDir()

getTrustedDir

public File getTrustedDir()

getTrustedCertsDir

public File getTrustedCertsDir()

getTrustedCrlDir

public File getTrustedCrlDir()

getRejectedDir

public File getRejectedDir()