davmail.http

Class DavMailX509KeyManager

java.lang.Object

davmail.http.DavMailX509KeyManager

All Implemented Interfaces:

KeyManager, X509KeyManager

public class DavMailX509KeyManager
extends Object
implements X509KeyManager

Special X509 Key Manager that handles cases where more than one private key is sufficient to establish the HTTPs connection by asking the user to select one.

Field Summary

Fields

Modifier and Type	Field and Description
protected static org.apache.log4j.Logger	LOGGER

Constructor Summary

Constructors

Constructor and Description
DavMailX509KeyManager(X509KeyManager keyManager) Build the specialized key manager wrapping the default one

Method Summary

Modifier and Type	Method and Description
String	chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket) Select a client alias.
String	chooseServerAlias(String string, Principal[] prncpls, Socket socket) Passthrough to wrapped keymanager
X509Certificate[]	getCertificateChain(String string) Passthrough to wrapped keymanager
String[]	getClientAliases(String string, Principal[] principals) Get the client aliases, simply pass this through to wrapped key manager
PrivateKey	getPrivateKey(String string) Passthrough to wrapped keymanager
String[]	getServerAliases(String string, Principal[] prncpls) Passthrough to wrapped keymanager
protected String	stripAlias(String alias) PKCS11 aliases are in the format: dd.0, dd is incremented every time the SSL connection is re-negotiated

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGGER

protected static final org.apache.log4j.Logger LOGGER

Constructor Detail

DavMailX509KeyManager

public DavMailX509KeyManager(X509KeyManager keyManager)

Build the specialized key manager wrapping the default one

Parameters:

keyManager - original key manager

Method Detail

getClientAliases

public String[] getClientAliases(String string,
                                 Principal[] principals)

Get the client aliases, simply pass this through to wrapped key manager

Specified by:

getClientAliases in interface X509KeyManager

chooseClientAlias

public String chooseClientAlias(String[] keyType,
                                Principal[] issuers,
                                Socket socket)

Select a client alias. Some servers are misconfigured and claim to accept any client certificate during the SSL handshake, however OWA only authenticates using a single certificate.

This method allows the user to select the right client certificate

Specified by:

chooseClientAlias in interface X509KeyManager

stripAlias

protected String stripAlias(String alias)

PKCS11 aliases are in the format: dd.0, dd is incremented every time the SSL connection is re-negotiated

Parameters:

alias - original alias

Returns:

alias without prefix

getServerAliases

public String[] getServerAliases(String string,
                                 Principal[] prncpls)

Passthrough to wrapped keymanager

Specified by:

getServerAliases in interface X509KeyManager

chooseServerAlias

public String chooseServerAlias(String string,
                                Principal[] prncpls,
                                Socket socket)

Passthrough to wrapped keymanager

Specified by:

chooseServerAlias in interface X509KeyManager

getCertificateChain

public X509Certificate[] getCertificateChain(String string)

Passthrough to wrapped keymanager

Specified by:

getCertificateChain in interface X509KeyManager

getPrivateKey

public PrivateKey getPrivateKey(String string)

Passthrough to wrapped keymanager

Specified by:

getPrivateKey in interface X509KeyManager