Interface PkiServerClientTrustProvider

public interface PkiServerClientTrustProvider
Explicit provider for the external administrative-client trust policy used after a trusted proxy forwards a certificate chain.

Implementations must not expose trust-store secrets, key material, passwords, or aliases. Providers are activated only when their exact id() is declared in the server configuration.

Thread safety

Implementations must be thread-safe; the same provider instance may be called from multiple threads during server startup.

Since:
1.0

  • Method Summary

    Modifier and Type
    Method
    Description
    X509TrustManager
    create(ProviderConfig configuration)
    Creates an independent client trust manager without exposing trust-store secrets.
    String
    id()
    Returns the stable, explicitly configured provider identity.

  • Method Details

    • id

      String id()
      Returns the stable, explicitly configured provider identity.
      Returns:
      provider identity used in configuration; never null

    • create

      X509TrustManager create(ProviderConfig configuration) throws Exception
      Creates an independent client trust manager without exposing trust-store secrets.
      Parameters:
      configuration - strict provider configuration; never null
      Returns:
      initialized client trust manager; never null
      Throws:
      Exception - when configured trust material is unavailable, expired, or invalid