Class Pkcs12TlsProvider
java.lang.Object
zeroecho.pki.server.http.Pkcs12TlsProvider
- All Implemented Interfaces:
PkiServerTlsProvider
Production JSSE provider using externally protected PKCS#12 identity and trust
stores.
Configuration contains only store paths and names of environment variables. Passwords are resolved into short-lived character arrays, cleared after JSSE initialization, and never returned or logged.
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptioncreate(ProviderConfig configuration) Creates one fully initialized mutual-TLS context.id()Returns the stable explicit provider identity.
-
Field Details
-
ID
-
-
Constructor Details
-
Pkcs12TlsProvider
public Pkcs12TlsProvider()Creates the stateless PKCS#12 TLS provider.
-
-
Method Details
-
id
Description copied from interface:PkiServerTlsProviderReturns the stable explicit provider identity.- Specified by:
idin interfacePkiServerTlsProvider- Returns:
- provider identity used in configuration; never
null
-
create
Description copied from interface:PkiServerTlsProviderCreates one fully initialized mutual-TLS context.- Specified by:
createin interfacePkiServerTlsProvider- Parameters:
configuration- opaque provider configuration that must be validated strictly; nevernull- Returns:
- initialized JSSE context containing server identity and client
trust; never
null - Throws:
Exception- when material is unavailable, expired, or invalid
-