Class DynamicKeyManager (6.124.0)

public class DynamicKeyManager extends X509ExtendedKeyManager

An X509ExtendedKeyManager that dynamically reloads client certificates and private keys from disk whenever the underlying files are modified or rotated.

Inheritance

java.lang.Object > X509ExtendedKeyManager > DynamicKeyManager

Constructors

DynamicKeyManager(File certFile, File keyFile)

public DynamicKeyManager(File certFile, File keyFile)

Creates a DynamicKeyManager that dynamically reloads the given certificate and key files when modified on disk.

Parameters
Name Description
certFile File

File containing the X.509 client certificate chain.

keyFile File

File containing the PKCS#8 private key.

Methods

chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket)

public String chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket)
Parameters
Name Description
keyType String[]
issuers java.security.Principal[]
socket Socket
Returns
Type Description
String

chooseEngineClientAlias(String[] keyType, Principal[] issuers, SSLEngine engine)

public String chooseEngineClientAlias(String[] keyType, Principal[] issuers, SSLEngine engine)
Parameters
Name Description
keyType String[]
issuers java.security.Principal[]
engine SSLEngine
Returns
Type Description
String
Overrides

chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine)

public String chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine)
Parameters
Name Description
keyType String
issuers java.security.Principal[]
engine SSLEngine
Returns
Type Description
String
Overrides

chooseServerAlias(String keyType, Principal[] issuers, Socket socket)

public String chooseServerAlias(String keyType, Principal[] issuers, Socket socket)
Parameters
Name Description
keyType String
issuers java.security.Principal[]
socket Socket
Returns
Type Description
String

getCertificateChain(String alias)

public X509Certificate[] getCertificateChain(String alias)
Parameter
Name Description
alias String
Returns
Type Description
java.security.cert.X509Certificate[]

getClientAliases(String keyType, Principal[] issuers)

public String[] getClientAliases(String keyType, Principal[] issuers)
Parameters
Name Description
keyType String
issuers java.security.Principal[]
Returns
Type Description
String[]

getPrivateKey(String alias)

public PrivateKey getPrivateKey(String alias)
Parameter
Name Description
alias String
Returns
Type Description
PrivateKey

getServerAliases(String keyType, Principal[] issuers)

public String[] getServerAliases(String keyType, Principal[] issuers)
Parameters
Name Description
keyType String
issuers java.security.Principal[]
Returns
Type Description
String[]