org.globus.gsi.tomcat

Class GlobusSSLSocketFactory

java.lang.Object

org.apache.tomcat.util.net.jsse.JSSESocketFactory

org.globus.gsi.tomcat.GlobusSSLSocketFactory

All Implemented Interfaces:

org.apache.tomcat.util.net.ServerSocketFactory, org.apache.tomcat.util.net.SSLUtil

public class GlobusSSLSocketFactory
extends org.apache.tomcat.util.net.jsse.JSSESocketFactory

This extends the standard JSSE to support the globus trust manager and all of the associated properties: CRLs, SigningPolicies, proxy certificates.

Since:

1.0

Version:

1.0

Field Summary

Fields

Modifier and Type	Field and Description
protected Object	crlLocation
protected Object	rejectLimitedProxyEntry
protected Object	signingPolicyLocation

Fields inherited from class org.apache.tomcat.util.net.jsse.JSSESocketFactory

allowUnsafeLegacyRenegotiation, DEFAULT_KEY_PASS, enabledCiphers, enabledProtocols, requireClientAuth, sslProxy, wantClientAuth

Constructor Summary

Constructors

Constructor and Description
GlobusSSLSocketFactory(org.apache.tomcat.util.net.AbstractEndpoint endpoint)

Method Summary

Modifier and Type	Method and Description
protected Object	clone()
ServerSocket	createSocket(int port)
ServerSocket	createSocket(int port, int backlog)
ServerSocket	createSocket(int port, int backlog, InetAddress ifAddress)
protected TrustManager[]	getTrustManagers(String keystoreType, String keystoreProvider, String algorithm) Create a Globus trust manager which supports proxy certificates.

Methods inherited from class org.apache.tomcat.util.net.jsse.JSSESocketFactory

acceptSocket, configureClientAuth, configureSessionContext, configureUseServerCipherSuitesOrder, createSSLContext, getCRLs, getEnableableCiphers, getEnableableProtocols, getEnabledCiphers, getKeyManagers, getKeyManagers, getKeystore, getKeystorePassword, getParameters, getTrustManagers, getTrustStore, handshake

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

crlLocation

protected Object crlLocation

signingPolicyLocation

protected Object signingPolicyLocation

rejectLimitedProxyEntry

protected Object rejectLimitedProxyEntry

Constructor Detail

GlobusSSLSocketFactory

public GlobusSSLSocketFactory(org.apache.tomcat.util.net.AbstractEndpoint endpoint)

Method Detail

getTrustManagers

protected TrustManager[] getTrustManagers(String keystoreType,
                                          String keystoreProvider,
                                          String algorithm)
                                   throws Exception

Create a Globus trust manager which supports proxy certificates. This requires that the CRL store, and signing policy store be configured.

Overrides:

getTrustManagers in class org.apache.tomcat.util.net.jsse.JSSESocketFactory

Parameters:

keystoreType - The type of keystore to create.

keystoreProvider - The keystore provider to use.

algorithm - The keystore algorithm.

Returns:

A set of configured TrustManagers.

Throws:

Exception - If we cannot create the trust managers.

clone

protected Object clone()
                throws CloneNotSupportedException

Overrides:

clone in class Object

Throws:

CloneNotSupportedException

createSocket

public ServerSocket createSocket(int port,
                                 int backlog,
                                 InetAddress ifAddress)
                          throws IOException

Specified by:

createSocket in interface org.apache.tomcat.util.net.ServerSocketFactory

Overrides:

createSocket in class org.apache.tomcat.util.net.jsse.JSSESocketFactory

Throws:

IOException

createSocket

public ServerSocket createSocket(int port,
                                 int backlog)
                          throws IOException

Specified by:

createSocket in interface org.apache.tomcat.util.net.ServerSocketFactory

Overrides:

createSocket in class org.apache.tomcat.util.net.jsse.JSSESocketFactory

Throws:

IOException

createSocket

public ServerSocket createSocket(int port)
                          throws IOException

Specified by:

createSocket in interface org.apache.tomcat.util.net.ServerSocketFactory

Overrides:

createSocket in class org.apache.tomcat.util.net.jsse.JSSESocketFactory

Throws:

IOException