Java Trust Provider

Problem this snippet solves:

This example java class allows access to the JSSE Trust Layer allowing access to self-signed server certificates for HTTPS based SOAP connections.

Code :

/*
 * The contents of this file are subject to the "END USER LICENSE AGREEMENT FOR F5
 * Software Development Kit for iControl"; you may not use this file except in
 * compliance with the License. The License is included in the iControl
 * Software Development Kit.
 *
 * Software distributed under the License is distributed on an "AS IS"
 * basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See
 * the License for the specific language governing rights and limitations
 * under the License.
 *
 * The Original Code is iControl Code and related documentation
 * distributed by F5.
 *
 * The Initial Developer of the code is Jacob Gilley. 
 * Portions created by F5 are Copyright (C) 1996-2004 F5 Networks
 * Inc. All Rights Reserved.  iControl (TM) is a registered trademark of
 * F5 Networks, Inc.
 *
 * Alternatively, the contents of this file may be used under the terms
 * of the GNU General Public License (the "GPL"), in which case the
 * provisions of GPL are applicable instead of those above.  If you wish
 * to allow use of your version of this file only under the terms of the
 * GPL and not to allow others to use your version of this file under the
 * License, indicate your decision by deleting the provisions above and
 * replace them with the notice and other provisions required by the GPL.
 * If you do not delete the provisions above, a recipient may use your
 * version of this file under either the License or the GPL.
 */
import java.security.AccessController; 
import java.security.InvalidAlgorithmParameterException; 
import java.security.KeyStore; 
import java.security.KeyStoreException; 
import java.security.PrivilegedAction; 
import java.security.Security; 
import java.security.cert.X509Certificate; 
  
import javax.net.ssl.ManagerFactoryParameters; 
import javax.net.ssl.TrustManager; 
import javax.net.ssl.TrustManagerFactorySpi; 
import javax.net.ssl.X509TrustManager; 

public final class XTrustProvider extends java.security.Provider
{ 
  private final static String NAME = "XTrustJSSE"; 
  private final static String INFO = 
    "XTrust JSSE Provider (implements trust factory with truststore validation disabled)"; 
  private final static double VERSION = 1.0D; 

  public XTrustProvider()
  { 
    super(NAME, VERSION, INFO); 

    AccessController.doPrivileged(
      new PrivilegedAction()
      { 
        public Object run()
        { 
          put("TrustManagerFactory." + TrustManagerFactoryImpl.getAlgorithm(),  
            TrustManagerFactoryImpl.class.getName()); 
          return null;
        }
      }
    ); 
  }

  public static void install()
  { 
    if(Security.getProvider(NAME) == null)
    { 
      Security.insertProviderAt(new XTrustProvider(), 2); 
      Security.setProperty("ssl.TrustManagerFactory.algorithm", 
        TrustManagerFactoryImpl.getAlgorithm()); 
    } 
  } 

  public final static class TrustManagerFactoryImpl extends TrustManagerFactorySpi
  { 
    public TrustManagerFactoryImpl() { } 
    public static String getAlgorithm() { return "XTrust509"; } 
    protected void engineInit(KeyStore keystore) throws KeyStoreException { } 
    protected void engineInit(ManagerFactoryParameters mgrparams) 
      throws InvalidAlgorithmParameterException
    { 
      throw new InvalidAlgorithmParameterException(XTrustProvider.NAME + 
        " does not use ManagerFactoryParameters"); 
    } 

    protected TrustManager[] engineGetTrustManagers()
    { 
      return new TrustManager[]
      {
        new X509TrustManager()
        { 
          public X509Certificate[] getAcceptedIssuers() { return null; } 
          public void checkClientTrusted(X509Certificate[] certs, String authType) { } 
          public void checkServerTrusted(X509Certificate[] certs, String authType) { } 
        }
      }; 
    } 
  } 
}
Published Mar 08, 2015
Version 1.0

Was this article helpful?

2 Comments

  • ok, I've found samples in SDK. But it doesn't work. To solve my issue, I replaced temporarily the axis jar by an old version. But that's odd...