Package org.apache.druid.server.security
Class DefaultTLSCertificateChecker
java.lang.Object
org.apache.druid.server.security.DefaultTLSCertificateChecker
- All Implemented Interfaces:
TLSCertificateChecker
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidcheckClient(X509Certificate[] chain, String authType, SSLEngine engine, X509ExtendedTrustManager baseTrustManager) This method allows an extension to replace the standardX509ExtendedTrustManager.checkClientTrusted(X509Certificate[], String, SSLEngine)method.voidcheckServer(X509Certificate[] chain, String authType, SSLEngine engine, X509ExtendedTrustManager baseTrustManager) This method allows an extension to replace the standardX509ExtendedTrustManager.checkServerTrusted(X509Certificate[], String, SSLEngine)method.
-
Constructor Details
-
DefaultTLSCertificateChecker
public DefaultTLSCertificateChecker()
-
-
Method Details
-
checkClient
public void checkClient(X509Certificate[] chain, String authType, SSLEngine engine, X509ExtendedTrustManager baseTrustManager) throws CertificateException Description copied from interface:TLSCertificateCheckerThis method allows an extension to replace the standardX509ExtendedTrustManager.checkClientTrusted(X509Certificate[], String, SSLEngine)method. This controls the certificate check used by Druid's server, checking certificates for internal requests made by other Druid services and user-submitted requests.- Specified by:
checkClientin interfaceTLSCertificateChecker- Parameters:
chain- See docs forX509ExtendedTrustManager.checkClientTrusted(X509Certificate[], String, SSLEngine).authType- See docs forX509ExtendedTrustManager.checkClientTrusted(X509Certificate[], String, SSLEngine).engine- See docs forX509ExtendedTrustManager.checkClientTrusted(X509Certificate[], String, SSLEngine).baseTrustManager- The base trust manager. An extension should call baseTrustManager.checkClientTrusted(chain, authType, engine) if/when it wishes to use the standard check in addition to custom checks.- Throws:
CertificateException
-
checkServer
public void checkServer(X509Certificate[] chain, String authType, SSLEngine engine, X509ExtendedTrustManager baseTrustManager) throws CertificateException Description copied from interface:TLSCertificateCheckerThis method allows an extension to replace the standardX509ExtendedTrustManager.checkServerTrusted(X509Certificate[], String, SSLEngine)method. This controls the certificate check used by Druid's internal client, used to validate the certificates of other Druid services.- Specified by:
checkServerin interfaceTLSCertificateChecker- Parameters:
chain- See docs forX509ExtendedTrustManager.checkServerTrusted(X509Certificate[], String, SSLEngine).authType- See docs forX509ExtendedTrustManager.checkServerTrusted(X509Certificate[], String, SSLEngine).engine- See docs forX509ExtendedTrustManager.checkServerTrusted(X509Certificate[], String, SSLEngine).baseTrustManager- The base trust manager. An extension should call baseTrustManager.checkServerTrusted(chain, authType, engine) if/when it wishes to use the standard check in addition to custom checks.- Throws:
CertificateException
-