Class Pkcs12TlsProvider

java.lang.Object
zeroecho.pki.server.http.Pkcs12TlsProvider
All Implemented Interfaces:
PkiServerTlsProvider

public final class Pkcs12TlsProvider extends Object implements PkiServerTlsProvider
Production JSSE provider using externally protected PKCS#12 identity and trust stores.

Configuration contains only store paths and names of environment variables. Passwords are resolved into short-lived character arrays, cleared after JSSE initialization, and never returned or logged.

  • Field Details

  • Constructor Details

    • Pkcs12TlsProvider

      public Pkcs12TlsProvider()
      Creates the stateless PKCS#12 TLS provider.
  • Method Details

    • id

      public String id()
      Description copied from interface: PkiServerTlsProvider
      Returns the stable explicit provider identity.
      Specified by:
      id in interface PkiServerTlsProvider
      Returns:
      provider identity used in configuration; never null
    • create

      public SSLContext create(ProviderConfig configuration) throws Exception
      Description copied from interface: PkiServerTlsProvider
      Creates one fully initialized mutual-TLS context.
      Specified by:
      create in interface PkiServerTlsProvider
      Parameters:
      configuration - opaque provider configuration that must be validated strictly; never null
      Returns:
      initialized JSSE context containing server identity and client trust; never null
      Throws:
      Exception - when material is unavailable, expired, or invalid