X509TrustManager() — netty Function Reference

Architecture documentation for the X509TrustManager() function in CertificateBuilderTest.java from the netty codebase.

Function java Buffer Allocators

Entity Profile

Buffer→ Allocators→ X509TrustManager() — netty Function Reference

Dependency Diagram

graph TD
  9656bbf5_b7a3_4582_a227_64af1f27b9de["X509TrustManager()"]
  8c85a9d3_f3ae_f481_1984_99bd24f9c654["CertificateBuilderTest"]
  9656bbf5_b7a3_4582_a227_64af1f27b9de -->|defined in| 8c85a9d3_f3ae_f481_1984_99bd24f9c654
  style 9656bbf5_b7a3_4582_a227_64af1f27b9de fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

pkitesting/src/test/java/io/netty/pkitesting/CertificateBuilderTest.java lines 469–482

    private static X509TrustManager getX509TrustManager(X509Bundle root) throws Exception {
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
        PKIXBuilderParameters params = new PKIXBuilderParameters(Collections.singleton(
                new TrustAnchor(root.getCertificate(), null)), null);

        // Explicitly add the revocation checker. We cannot use params.setRevocationEnabled(true) because
        // it will not do any online revocation checking, i.e. it will not do any network access.
        CertPathBuilder cpb = CertPathBuilder.getInstance("PKIX");
        PKIXRevocationChecker rc = (PKIXRevocationChecker) cpb.getRevocationChecker();
        params.addCertPathChecker(rc);

        tmf.init(new CertPathTrustManagerParameters(params));
        return (X509TrustManager) tmf.getTrustManagers()[0];
    }