1 /* 2 * Copyright (c) 2002, 2006, Oracle and/or its affiliates. All rights reserved. 3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 4 * 5 * This code is free software; you can redistribute it and/or modify it 6 * under the terms of the GNU General Public License version 2 only, as 7 * published by the Free Software Foundation. Oracle designates this 8 * particular file as subject to the "Classpath" exception as provided 9 * by Oracle in the LICENSE file that accompanied this code. 10 * 11 * This code is distributed in the hope that it will be useful, but WITHOUT 12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 13 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 14 * version 2 for more details (a copy is included in the LICENSE file that 15 * accompanied this code). 16 * 17 * You should have received a copy of the GNU General Public License version 18 * 2 along with this work; if not, write to the Free Software Foundation, 19 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. 20 * 21 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA 22 * or visit www.oracle.com if you need additional information or have any 23 * questions. 24 */ 25 26 package sun.security.validator; 27 28 import java.io.*; 29 import java.util.*; 30 31 import java.security.*; 32 import java.security.cert.*; 33 import java.security.cert.Certificate; 34 35 import sun.security.action.*; 36 37 /** 38 * Collection of static utility methods related to KeyStores. 39 * 40 * @author Andreas Sterbenz 41 */ 42 public class KeyStores { 43 KeyStores()44 private KeyStores() { 45 // empty 46 } 47 48 // in the future, all accesses to the system cacerts keystore should 49 // go through this class. but not right now. 50 /* 51 private final static String javaHome = 52 (String)AccessController.doPrivileged(new GetPropertyAction("java.home")); 53 54 private final static char SEP = File.separatorChar; 55 56 private static KeyStore caCerts; 57 58 private static KeyStore getKeyStore(String type, String name, 59 char[] password) throws IOException { 60 if (type == null) { 61 type = "JKS"; 62 } 63 try { 64 KeyStore ks = KeyStore.getInstance(type); 65 FileInputStream in = (FileInputStream)AccessController.doPrivileged 66 (new OpenFileInputStreamAction(name)); 67 ks.load(in, password); 68 return ks; 69 } catch (GeneralSecurityException e) { 70 // XXX 71 throw new IOException(); 72 } catch (PrivilegedActionException e) { 73 throw (IOException)e.getCause(); 74 } 75 } 76 77 /** 78 * Return a KeyStore with the contents of the lib/security/cacerts file. 79 * The file is only opened once per JVM invocation and the contents 80 * cached subsequently. 81 * 82 public synchronized static KeyStore getCaCerts() throws IOException { 83 if (caCerts != null) { 84 return caCerts; 85 } 86 String name = javaHome + SEP + "lib" + SEP + "security" + SEP + "cacerts"; 87 caCerts = getKeyStore(null, name, null); 88 return caCerts; 89 } 90 */ 91 92 /** 93 * Return a Set with all trusted X509Certificates contained in 94 * this KeyStore. 95 */ getTrustedCerts(KeyStore ks)96 public static Set<X509Certificate> getTrustedCerts(KeyStore ks) { 97 Set<X509Certificate> set = new HashSet<X509Certificate>(); 98 try { 99 for (Enumeration<String> e = ks.aliases(); e.hasMoreElements(); ) { 100 String alias = e.nextElement(); 101 if (ks.isCertificateEntry(alias)) { 102 Certificate cert = ks.getCertificate(alias); 103 if (cert instanceof X509Certificate) { 104 set.add((X509Certificate)cert); 105 } 106 } else if (ks.isKeyEntry(alias)) { 107 Certificate[] certs = ks.getCertificateChain(alias); 108 if ((certs != null) && (certs.length > 0) && 109 (certs[0] instanceof X509Certificate)) { 110 set.add((X509Certificate)certs[0]); 111 } 112 } 113 } 114 } catch (KeyStoreException e) { 115 // ignore 116 } 117 return set; 118 } 119 120 } 121