|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectorg.glite.voms.PKIStore
public class PKIStore
PKIStore is the class serving to store all the components of a common PKI installation, i.e.: CA certificates, CRLs, Signing policy files... It is also capable of storing files specific to the handling of VOMS proxies, i.e. the content of the vomsdir diectory.
Field Summary | |
---|---|
static java.lang.String |
DEFAULT_CADIR
|
static java.lang.String |
DEFAULT_VOMSDIR
|
static int |
TYPE_CADIR
This PKIStore object will contain data from a CA directory. |
static int |
TYPE_VOMSDIR
This PKIStore object will contain data from a vomsdir directory. |
Constructor Summary | |
---|---|
PKIStore()
|
|
PKIStore(int type)
|
|
PKIStore(java.lang.String dir,
int type)
This is equivalent to PKIStore(dir, type, true) |
|
PKIStore(java.lang.String dir,
int type,
boolean aggressive)
|
Method Summary | |
---|---|
protected void |
addInstance()
|
java.security.cert.X509Certificate[] |
getAACandidate(javax.security.auth.x500.X500Principal issuer,
java.lang.String voName)
Gets an array of candidate issuer certificates for an AC with the given issuer and belonging to the given VO. |
java.util.Hashtable |
getCAs()
|
java.util.Hashtable |
getCRLs()
|
LSCFile |
getLSC(java.lang.String voName,
java.lang.String hostName)
Gets the LSC file corresponding to the given VO, for the given server. |
java.util.Hashtable |
getNamespaces()
|
java.util.Hashtable |
getSignings()
|
void |
load()
Loads the files from the directory specified in the constructors |
void |
refresh()
Refreshes the content of the PKIStore object. |
void |
rescheduleRefresh(int millisec)
Changes the interval between refreshes of the store. |
void |
setAggressive(boolean b)
Changes the aggressive mode of the store. |
void |
stopRefresh()
Stop all refreshes. |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Field Detail |
---|
public static final int TYPE_VOMSDIR
public static final int TYPE_CADIR
public static final java.lang.String DEFAULT_VOMSDIR
public static final java.lang.String DEFAULT_CADIR
Constructor Detail |
---|
public PKIStore(java.lang.String dir, int type, boolean aggressive) throws java.io.IOException, java.security.cert.CertificateException, java.security.cert.CRLException
dir
- -- The directory from which to read the files.
If null or the empty string, this will default
to "/etc/grid-security/certificates" if type is
TYPE_CADIR, or "etc/grid-security/vomsdir" if
type is TYPE_VOMSDIR.type
- -- either TYPE_CADIR for CA certificates,
or TYPE_VOMSDIR for VOMS certificate.aggressive
- -- if true, loading of data will continue even if
a particular file could not be loaded, while if
false loading will stop as soon as an error occur.
java.io.IOException
- if type is neither TYPE_CADIR nor TYPE_VOMSDIR.
java.security.cert.CertificateException
- if there are parsing errors while loading
a certificate.
java.security.cert.CRLException
- if there are parsing errors while loading a CRL.public PKIStore(java.lang.String dir, int type) throws java.io.IOException, java.security.cert.CertificateException, java.security.cert.CRLException
java.io.IOException
java.security.cert.CertificateException
java.security.cert.CRLException
PKIStore(String dir, int type, boolean aggressive)
public PKIStore(int type) throws java.io.IOException, java.security.cert.CertificateException, java.security.cert.CRLException
java.io.IOException
java.security.cert.CertificateException
java.security.cert.CRLException
public PKIStore()
Method Detail |
---|
public java.util.Hashtable getCAs()
PKIUtils.getHash(X509Certificate cert)
,
PKIUtils.getHash(X500Principal principal)
,
PKIUtils.getHash(X509Principal principal)
,
Vector
public java.util.Hashtable getCRLs()
PKIUtils.getHash(X509Certificate cert)
,
PKIUtils.getHash(X500Principal principal)
,
PKIUtils.getHash(X509Principal principal)
,
Vector
public java.util.Hashtable getSignings()
SigningPolicy
,
PKIUtils.getHash(X509Certificate cert)
,
PKIUtils.getHash(X500Principal principal)
,
PKIUtils.getHash(X509Principal principal)
,
Vector
public java.util.Hashtable getNamespaces()
public void refresh()
public void rescheduleRefresh(int millisec)
millisec
- New interval (in milliseconds)public void stopRefresh()
stopRefresh
in interface VOMSTrustStore
protected void addInstance()
public void setAggressive(boolean b)
b
- -- if true (default) load as much as possible,
otherwise stop loading at the first error.public LSCFile getLSC(java.lang.String voName, java.lang.String hostName)
getLSC
in interface VOMSTrustStore
voName
- -- The name of the VO.hostName
- -- The hostName of the issuing server.
public java.security.cert.X509Certificate[] getAACandidate(javax.security.auth.x500.X500Principal issuer, java.lang.String voName)
getAACandidate
in interface VOMSTrustStore
issuer
- The issuer of the AC.voName
- The name of the VO.
public void load() throws java.io.IOException, java.security.cert.CertificateException, java.security.cert.CRLException
java.io.IOException
- if type is neither TYPE_CADIR nor TYPE_VOMSDIR.
java.security.cert.CertificateException
- if there are parsing errors while loading
a certificate.
java.security.cert.CRLException
- if there are parsing errors while loading a CRL.
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |