Package org.apache.hadoop.hbase.io.crypto.tls

Class PEMFileLoader

java.lang.Object

org.apache.hadoop.hbase.io.crypto.tls.FileKeyStoreLoader

org.apache.hadoop.hbase.io.crypto.tls.PEMFileLoader

All Implemented Interfaces:

KeyStoreLoader

final class PEMFileLoader
extends FileKeyStoreLoader

Implementation of FileKeyStoreLoader that loads from PEM files.

This file has been copied from the Apache ZooKeeper project.

See Also:

• Base revision

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) static class	PEMFileLoader.Builder

Field Summary

Fields inherited from class org.apache.hadoop.hbase.io.crypto.tls.FileKeyStoreLoader

keyStorePassword, keyStorePath, trustStorePassword, trustStorePath

Constructor Summary

Constructors

Modifier	Constructor	Description
private	PEMFileLoader(String keyStorePath, String trustStorePath, char[] keyStorePassword, char[] trustStorePassword)

Method Summary

Modifier and Type	Method	Description
KeyStore	loadKeyStore()	Loads a KeyStore which contains at least one private key and the associated X509 cert chain.
KeyStore	loadTrustStore()	Loads a KeyStore which contains at least one X509 cert chain for a trusted Certificate Authority (CA).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

PEMFileLoader

private PEMFileLoader(String keyStorePath,
 String trustStorePath,
 char[] keyStorePassword,
 char[] trustStorePassword)

Method Details

loadKeyStore

public KeyStore loadKeyStore()
                      throws IOException,
GeneralSecurityException

Description copied from interface: KeyStoreLoader

Loads a KeyStore which contains at least one private key and the associated X509 cert chain.

Returns:

a new KeyStore

Throws:

IOException - if loading the key store fails due to an IO error, such as "file not found".

GeneralSecurityException - if loading the key store fails due to a security error, such as "unsupported crypto algorithm".

loadTrustStore

public KeyStore loadTrustStore()
                        throws IOException,
GeneralSecurityException

Description copied from interface: KeyStoreLoader

Loads a KeyStore which contains at least one X509 cert chain for a trusted Certificate Authority (CA).

Returns:

a new KeyStore

Throws:

IOException - if loading the trust store fails due to an IO error, such as "file not found".

GeneralSecurityException - if loading the trust store fails due to a security error, such as "unsupported crypto algorithm".