public interface

X509TrustManager

implements TrustManager
com.sun.net.ssl.X509TrustManager

This interface is deprecated.
As of JDK 1.4, this implementation-specific class was replaced by X509TrustManager.

Class Overview

Instance of this interface manage which X509 certificates may be used to authenticate the remote side of a secure socket. Decisions may be based on trusted certificate authorities, certificate revocation lists, online status checking or other means.

Summary

Public Methods
abstract X509Certificate[] getAcceptedIssuers()
Return an array of certificate authority certificates which are trusted for authenticating peers.
abstract boolean isClientTrusted(X509Certificate[] chain)
Given the partial or complete certificate chain provided by the peer, build a certificate path to a trusted root and return true if it can be validated and is trusted for client SSL authentication.
abstract boolean isServerTrusted(X509Certificate[] chain)
Given the partial or complete certificate chain provided by the peer, build a certificate path to a trusted root and return true if it can be validated and is trusted for server SSL authentication.

Public Methods

public abstract X509Certificate[] getAcceptedIssuers ()

Return an array of certificate authority certificates which are trusted for authenticating peers.

Returns
  • the acceptable CA issuer certificates

public abstract boolean isClientTrusted (X509Certificate[] chain)

Given the partial or complete certificate chain provided by the peer, build a certificate path to a trusted root and return true if it can be validated and is trusted for client SSL authentication.

Parameters
chain the peer certificate chain

public abstract boolean isServerTrusted (X509Certificate[] chain)

Given the partial or complete certificate chain provided by the peer, build a certificate path to a trusted root and return true if it can be validated and is trusted for server SSL authentication.

Parameters
chain the peer certificate chain