com.unboundid.directory.sdk.common.api
Class TrustManagerProvider

java.lang.Object
  com.unboundid.directory.sdk.common.api.TrustManagerProvider

All Implemented Interfaces:

Configurable, ExampleUsageProvider, Reconfigurable<TrustManagerProviderConfig>, UnboundIDExtension

@Extensible
@DirectoryServerExtension
@DirectoryProxyServerExtension(appliesToLocalContent=true,
                               appliesToRemoteContent=false)
@SynchronizationServerExtension(appliesToLocalContent=true,
                                appliesToSynchronizedContent=false)
@MetricsEngineExtension
@ThreadSafety(level=INTERFACE_THREADSAFE)
public abstract class TrustManagerProvider
extends java.lang.Object
implements UnboundIDExtension, Reconfigurable<TrustManagerProviderConfig>, ExampleUsageProvider

This class defines an API that must be implemented by extensions which provide access to trust managers which are used to determine whether to trust a certificate that has been presented to the server. Trust managers are generally used when performing cryptographic operations, including SSL and StartTLS communication, in which a certificate is presented to the server. In such cases, the secure communication will only be allowed if the trust managers determine that the presented certificate chain is trustworthy.

Configuring Trust Manager Providers

In order to configure a trust manager provider created using this API, use a command like:

      dsconfig create-trust-manager-provider \
           --provider-name "{provider-name}" \
           --type third-party \
           --set enabled:true \
           --set "extension-class:{class-name}" \
           --set "extension-argument:{name=value}"
 

where "{provider-name}" is the name to use for the trust manager provider instance, "{class-name}" is the fully-qualified name of the Java class that extends com.unboundid.directory.sdk.common.api.TrustManagerProvider, and "{name=value}" represents name-value pairs for any arguments to provide to the trust manager provider. If multiple arguments should be provided to the trust manager provider, then the "--set extension-argument:{name=value}" option should be provided multiple times.

Constructor Summary

TrustManagerProvider()
Creates a new instance of this trust manager provider.

Method Summary

com.unboundid.ldap.sdk.ResultCode	applyConfiguration(TrustManagerProviderConfig config, com.unboundid.util.args.ArgumentParser parser, java.util.List<java.lang.String> adminActionsRequired, java.util.List<java.lang.String> messages) Attempts to apply the configuration from the provided argument parser to this extension.
void	defineConfigArguments(com.unboundid.util.args.ArgumentParser parser) Updates the provided argument parser to define any configuration arguments which may be used by this extension.
void	finalizeTrustManagerProvider() Performs any cleanup which may be necessary when this trust manager provider is to be taken out of service.
java.util.Map<java.util.List<java.lang.String>,java.lang.String>	getExamplesArgumentSets() Retrieves a map containing examples of configurations that may be used for this extension.
abstract java.lang.String[]	getExtensionDescription() Retrieves a human-readable description for this extension.
abstract java.lang.String	getExtensionName() Retrieves a human-readable name for this extension.
abstract javax.net.ssl.TrustManager[]	getTrustManagers() Retrieves a set of trust managers that may be used for operations within the server which may need to determine whether to trust a presented certificate chain.
void	initializeTrustManagerProvider(ServerContext serverContext, TrustManagerProviderConfig config, com.unboundid.util.args.ArgumentParser parser) Initializes this trust manager provider.
boolean	isConfigurationAcceptable(TrustManagerProviderConfig config, com.unboundid.util.args.ArgumentParser parser, java.util.List<java.lang.String> unacceptableReasons) Indicates whether the configuration represented by the provided argument parser is acceptable for use by this extension.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TrustManagerProvider

public TrustManagerProvider()

Creates a new instance of this trust manager provider. All trust manager provider implementations must include a default constructor, but any initialization should generally be done in the initializeTrustManagerProvider method.

Method Detail

getExtensionName

public abstract java.lang.String getExtensionName()

Retrieves a human-readable name for this extension.

Specified by:

getExtensionName in interface UnboundIDExtension

Returns:

A human-readable name for this extension.

getExtensionDescription

public abstract java.lang.String[] getExtensionDescription()

Retrieves a human-readable description for this extension. Each element of the array that is returned will be considered a separate paragraph in generated documentation.

Specified by:

getExtensionDescription in interface UnboundIDExtension

Returns:

A human-readable description for this extension, or null or an empty array if no description should be available.

defineConfigArguments

public void defineConfigArguments(com.unboundid.util.args.ArgumentParser parser)
                           throws com.unboundid.util.args.ArgumentException

Updates the provided argument parser to define any configuration arguments which may be used by this extension. The argument parser may also be updated to define relationships between arguments (e.g., to specify required, exclusive, or dependent argument sets).

Specified by:

defineConfigArguments in interface Configurable

Parameters:

parser - The argument parser to be updated with the configuration arguments which may be used by this extension.

Throws:

com.unboundid.util.args.ArgumentException - If a problem is encountered while updating the provided argument parser.

initializeTrustManagerProvider

public void initializeTrustManagerProvider(ServerContext serverContext,
                                           TrustManagerProviderConfig config,
                                           com.unboundid.util.args.ArgumentParser parser)
                                    throws com.unboundid.ldap.sdk.LDAPException

Initializes this trust manager provider.

Parameters:

serverContext - A handle to the server context for the server in which this extension is running.

config - The general configuration for this trust manager provider.

parser - The argument parser which has been initialized from the configuration for this trust manager provider.

Throws:

com.unboundid.ldap.sdk.LDAPException - If a problem occurs while initializing this trust manager provider.

isConfigurationAcceptable

public boolean isConfigurationAcceptable(TrustManagerProviderConfig config,
                                         com.unboundid.util.args.ArgumentParser parser,
                                         java.util.List<java.lang.String> unacceptableReasons)

Indicates whether the configuration represented by the provided argument parser is acceptable for use by this extension. The parser will have been used to parse any configuration available for this extension, and any automatic validation will have been performed. This method may be used to perform any more complex validation which cannot be performed automatically by the argument parser.

Specified by:

isConfigurationAcceptable in interface Reconfigurable<TrustManagerProviderConfig>

Parameters:

config - The general configuration for this extension.

parser - The argument parser that has been used to parse the proposed configuration for this extension.

unacceptableReasons - A list to which messages may be added to provide additional information about why the provided configuration is not acceptable.

Returns:

true if the configuration in the provided argument parser appears to be acceptable, or false if not.

applyConfiguration

public com.unboundid.ldap.sdk.ResultCode applyConfiguration(TrustManagerProviderConfig config,
                                                            com.unboundid.util.args.ArgumentParser parser,
                                                            java.util.List<java.lang.String> adminActionsRequired,
                                                            java.util.List<java.lang.String> messages)

Attempts to apply the configuration from the provided argument parser to this extension.

Specified by:

applyConfiguration in interface Reconfigurable<TrustManagerProviderConfig>

Parameters:

config - The general configuration for this extension.

parser - The argument parser that has been used to parse the new configuration for this extension.

adminActionsRequired - A list to which messages may be added to provide additional information about any additional administrative actions that may be required to apply some of the configuration changes.

messages - A list to which messages may be added to provide additional information about the processing performed by this method.

Returns:

A result code providing information about the result of applying the configuration change. A result of SUCCESS should be used to indicate that all processing completed successfully. Any other result will indicate that a problem occurred during processing.

finalizeTrustManagerProvider

public void finalizeTrustManagerProvider()

Performs any cleanup which may be necessary when this trust manager provider is to be taken out of service.

getTrustManagers

public abstract javax.net.ssl.TrustManager[] getTrustManagers()
                                                       throws com.unboundid.ldap.sdk.LDAPException

Retrieves a set of trust managers that may be used for operations within the server which may need to determine whether to trust a presented certificate chain.

Returns:

The set of trust managers that may be used for operations within the server which may need to determine whether to trust a presented certificate chain.

Throws:

com.unboundid.ldap.sdk.LDAPException - If a problem occurs while attempting to retrieve the trust managers.

getExamplesArgumentSets

public java.util.Map<java.util.List<java.lang.String>,java.lang.String> getExamplesArgumentSets()

Retrieves a map containing examples of configurations that may be used for this extension. The map key should be a list of sample arguments, and the corresponding value should be a description of the behavior that will be exhibited by the extension when used with that configuration.

Specified by:

getExamplesArgumentSets in interface ExampleUsageProvider

Returns:

A map containing examples of configurations that may be used for this extension. It may be null or empty if there should not be any example argument sets.