Package org.jetbrains.nativecerts.mac

Class SecurityFrameworkUtil

java.lang.Object

org.jetbrains.nativecerts.mac.SecurityFrameworkUtil

public class SecurityFrameworkUtil
extends Object

Get trusted certificates stored in corresponding keychains via Security frameworks APIs. for the other implementations see root_cgo_darwin.go in Go and trust_store_mac.cc in Chromium

In the future it would be better to implement X509TrustManager on SecTrustEvaluateWithError instead of getting trust chain manually. It's not yet investigated whether it is possible at all to integrate it into the SSL framework of JVM.

Constructor Summary

Constructors

Constructor	Description
SecurityFrameworkUtil()

Method Summary

Modifier and Type	Method	Description
static List<X509Certificate>	getTrustedRoots(SecurityFramework.SecTrustSettingsDomain domain)
static boolean	isTrustedRoot(SecurityFramework.SecTrustSettingsDomain domain, SecurityFramework.SecCertificateRef certificateRef)
static @NotNull List<X509Certificate>	SecTrustSettingsCopyCertificates(SecurityFramework.SecTrustSettingsDomain domain, Predicate<SecurityFramework.SecCertificateRef> predicate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityFrameworkUtil

public SecurityFrameworkUtil()

Method Detail

getTrustedRoots

public static List<X509Certificate> getTrustedRoots(SecurityFramework.SecTrustSettingsDomain domain)

SecTrustSettingsCopyCertificates

@NotNull
public static @NotNull List<X509Certificate> SecTrustSettingsCopyCertificates(@NotNull
                                                                              SecurityFramework.SecTrustSettingsDomain domain,
                                                                              Predicate<SecurityFramework.SecCertificateRef> predicate)

isTrustedRoot

public static boolean isTrustedRoot(SecurityFramework.SecTrustSettingsDomain domain,
                                    SecurityFramework.SecCertificateRef certificateRef)