1 /*
2 * Copyright (c) 2018, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation. Oracle designates this
8 * particular file as subject to the "Classpath" exception as provided
9 * by Oracle in the LICENSE file that accompanied this code.
10 *
11 * This code is distributed in the hope that it will be useful, but WITHOUT
12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14 * version 2 for more details (a copy is included in the LICENSE file that
15 * accompanied this code).
16 *
17 * You should have received a copy of the GNU General Public License version
18 * 2 along with this work; if not, write to the Free Software Foundation,
19 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 *
21 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22 * or visit www.oracle.com if you need additional information or have any
314 }
315
316 // Reload trust certs from the key store.
317 if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
318 SSLLogger.fine("Reload trust certs");
319 }
320
321 certs = loadTrustedCerts(ks);
322 if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
323 SSLLogger.fine("Reloaded " + certs.size() + " trust certs");
324 }
325
326 // Note that as ks is a local variable, it is not
327 // necessary to add it to the ksRef weak reference.
328 this.csRef = new WeakReference<>(certs);
329
330 return certs;
331 }
332
333 /**
334 * Load the the KeyStore as described in the specified descriptor.
335 */
336 private static KeyStore loadKeyStore(
337 TrustStoreDescriptor descriptor) throws Exception {
338 if (!"NONE".equals(descriptor.storeName) &&
339 descriptor.storeFile == null) {
340
341 // No file available, no KeyStore available.
342 if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
343 SSLLogger.fine("No available key store");
344 }
345
346 return null;
347 }
348
349 KeyStore ks;
350 if (descriptor.storeProvider.isEmpty()) {
351 ks = KeyStore.getInstance(descriptor.storeType);
352 } else {
353 ks = KeyStore.getInstance(
354 descriptor.storeType, descriptor.storeProvider);
|
1 /*
2 * Copyright (c) 2018, 2019, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation. Oracle designates this
8 * particular file as subject to the "Classpath" exception as provided
9 * by Oracle in the LICENSE file that accompanied this code.
10 *
11 * This code is distributed in the hope that it will be useful, but WITHOUT
12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14 * version 2 for more details (a copy is included in the LICENSE file that
15 * accompanied this code).
16 *
17 * You should have received a copy of the GNU General Public License version
18 * 2 along with this work; if not, write to the Free Software Foundation,
19 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20 *
21 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22 * or visit www.oracle.com if you need additional information or have any
314 }
315
316 // Reload trust certs from the key store.
317 if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
318 SSLLogger.fine("Reload trust certs");
319 }
320
321 certs = loadTrustedCerts(ks);
322 if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
323 SSLLogger.fine("Reloaded " + certs.size() + " trust certs");
324 }
325
326 // Note that as ks is a local variable, it is not
327 // necessary to add it to the ksRef weak reference.
328 this.csRef = new WeakReference<>(certs);
329
330 return certs;
331 }
332
333 /**
334 * Load the KeyStore as described in the specified descriptor.
335 */
336 private static KeyStore loadKeyStore(
337 TrustStoreDescriptor descriptor) throws Exception {
338 if (!"NONE".equals(descriptor.storeName) &&
339 descriptor.storeFile == null) {
340
341 // No file available, no KeyStore available.
342 if (SSLLogger.isOn && SSLLogger.isOn("trustmanager")) {
343 SSLLogger.fine("No available key store");
344 }
345
346 return null;
347 }
348
349 KeyStore ks;
350 if (descriptor.storeProvider.isEmpty()) {
351 ks = KeyStore.getInstance(descriptor.storeType);
352 } else {
353 ks = KeyStore.getInstance(
354 descriptor.storeType, descriptor.storeProvider);
|