Class AdminTLS

java.lang.Object

io.github.protasm.jvmud.communication.transport.admin.AdminTLS

public final class AdminTLS
extends Object

Persistent TLS server identity and explicit certificate pinning for administration consoles.

Method Summary

Modifier and Type	Method	Description
static SSLContext	client(String fingerprint)	Trusts exactly the operator-supplied certificate fingerprint; never learns trust from the network.
static String	fingerprint(Certificate certificate)	SHA-256 pin for an exact certificate, suitable for out-of-band distribution.
static SSLContext	server(Path directory)	Creates a local self-signed identity once, then loads it; administrators distribute its fingerprint securely.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

server

public static SSLContext server(Path directory)
                         throws Exception

Creates a local self-signed identity once, then loads it; administrators distribute its fingerprint securely.

Throws:

Exception

client

public static SSLContext client(String fingerprint)
                         throws GeneralSecurityException

Trusts exactly the operator-supplied certificate fingerprint; never learns trust from the network.

Throws:

GeneralSecurityException

fingerprint

public static String fingerprint(Certificate certificate)
                          throws GeneralSecurityException

SHA-256 pin for an exact certificate, suitable for out-of-band distribution.

Throws:

GeneralSecurityException