org.openstreetmap.josm.io

Class CertificateAmendment

java.lang.Object

org.openstreetmap.josm.io.CertificateAmendment

public final class CertificateAmendment
extends java.lang.Object

Class to add missing root certificates to the list of trusted certificates for TLS connections. The added certificates are deemed trustworthy by the main web browsers and operating systems, but not included in some distributions of Java. The certificates are added in-memory at each start, nothing is written to disk.

Since:

9995

Field Summary

Fields

Modifier and Type	Field and Description
private static java.lang.String[]	CERT_AMEND
private static java.lang.String[]	SHA_HASHES

Constructor Summary

Constructors

Modifier	Constructor and Description
private	CertificateAmendment()

Method Summary

Modifier and Type	Method and Description
static void	addMissingCertificates() Add missing root certificates to the list of trusted certificates for TLS connections.
private static boolean	certificateIsMissing(java.security.KeyStore keyStore, java.security.cert.X509Certificate crt) Check if the certificate is missing and needs to be added to the keystore.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CERT_AMEND

private static final java.lang.String[] CERT_AMEND

SHA_HASHES

private static final java.lang.String[] SHA_HASHES

Constructor Detail

CertificateAmendment

private CertificateAmendment()

Method Detail

addMissingCertificates

public static void addMissingCertificates()
                                   throws java.io.IOException,
                                          java.security.GeneralSecurityException

Add missing root certificates to the list of trusted certificates for TLS connections.

Throws:

java.io.IOException - if an I/O error occurs

java.security.GeneralSecurityException - if a security error occurs

certificateIsMissing

private static boolean certificateIsMissing(java.security.KeyStore keyStore,
                                            java.security.cert.X509Certificate crt)
                                     throws java.security.KeyStoreException,
                                            java.security.InvalidAlgorithmParameterException

Check if the certificate is missing and needs to be added to the keystore.

Parameters:

keyStore - the keystore

crt - the certificate

Returns:

true, if the certificate is not contained in the keystore

Throws:

java.security.InvalidAlgorithmParameterException - if the keystore does not contain at least one trusted certificate entry

java.security.KeyStoreException - if the keystore has not been initialized