Package org.mozilla.jss
Class JSSLoader
- java.lang.Object
-
- org.mozilla.jss.JSSLoader
-
public class JSSLoader extends java.lang.Object
The JSS Loader facilitates loading JSS via the Provider interface directly, including from a static java.security configuration file. This replaces the previous CryptoManager.initialize(...) approach, allowing better control over where the JSSProvider gets loaded. In order to use this provider, the caller has to specify a configuration file (either via a String path or its contents via an InputStream). This configuration file is a java.util.Properties file. The following keys are understood: - nss.config_dir -- the path to the NSS DB to initialize with - nss.cert_prefix -- the prefix for the certificate store - nss.key_prefix -- the prefix for the key store - nss.secmod_name -- the name of the secmod file - nss.read_only -- whether to open the NSS DB read-only (default: false) - nss.java_only -- whether to initialize only the java portion of JSS, and assume that NSS is already initialized (default: false) - nss.pkix_verify -- whether to use PKIX for verification (default: false) - nss.no_cert_db -- whether to open the certificate and key databases; see InitializationValues for more info (default: false) - nss.no_mod_db -- whether to open the security module database; see InitializationValues for more info (default: false) - nss.force_open -- whether to force initializations even if the database cannot be opened; see InitializationValues for more info (default: false) - nss.no_root_init -- whether to look for root certificate module and load it; see InitializationValues for more info (default: false) - nss.optimize_space -- whether to use smaller tables and caches; see InitializationValues for more info (default: false) - nss.pk11_thread_safe -- whether to only load PKCS#11 modules that are thread-safe; see InitializationValues for more info (default: false) - nss.pk11_reload -- whether to ignore already initialized errors when loading PKCS#11 modules; see InitializationValues for more info (default: false) - nss.no_pk11_finalize -- whether to avoid calling C_Finalize on PKCS#11 modules; see InitializationValues for more info (default: false) - nss.cooperate -- whether to cooperate with other parts of the program already having initialized NSS (default: false) - jss.experimental.sslengine -- whether to enable experimental SSLEngine support - jss.fips -- whether to switch this NSS DB into FIPS mode; allowed values are ENABLED (to force FIPS mode), DISABLED (to force non-FIPS mode), or UNCHANGED (default, to infer the value from the NSS DB and/or the system) - jss.ocsp.enabled -- whether or not to enable OCSP checking - jss.ocsp.responder.url -- URL of the OCSP responder to check - jss.ocsp.responder.cert_nickname -- nickname of the OCSP responder's certificate in the NSS DB - jss.ocsp.policy -- which JSS OCSP checking policy to use; allowed values are NONE, NORMAL, and LEAF_AND_CHAIN; refer to CryptoManager documentation for the difference - jss.password -- static password to use to authenticate to tokens; if this fails, the user will be prompted via the console
-
-
Field Summary
Fields Modifier and Type Field Description static org.slf4j.Logger
logger
-
Constructor Summary
Constructors Constructor Description JSSLoader()
-
Method Summary
All Methods Static Methods Concrete Methods Modifier and Type Method Description static CryptoManager
init(java.io.InputStream istream)
Initialize JSS from an InputStream.static CryptoManager
init(java.lang.String config_path)
Initialize JSS from the specified path to a configuration file.static boolean
loaded()
Check if this provider has been configured.
-
-
-
Method Detail
-
loaded
public static boolean loaded()
Check if this provider has been configured.
-
init
public static CryptoManager init(java.lang.String config_path) throws java.lang.Exception
Initialize JSS from the specified path to a configuration file.- Throws:
java.lang.Exception
-
init
public static CryptoManager init(java.io.InputStream istream) throws java.lang.Exception
Initialize JSS from an InputStream.- Throws:
java.lang.Exception
-
-