Skip navigation links

weblogic.security.SSL
Class CertPathTrustManager

java.lang.Object
  weblogic.security.SSL.CertPathTrustManager

All Implemented Interfaces:

TrustManager

public final class CertPathTrustManager

extends Object

implements TrustManager

A CertPathTrustManager that makes use of the configured CertPathValidation providers to perform extra validation; for example, revocation checking.

By default, application code using outbound SSL in the server has access only to the built-in SSL certificate validation. However, application code can specify the CertPathTrustManager in order to access any additional certificate validation that the administrator has configured for the server.

There are three ways to use this class:

1. The trust manager calls configured CertPathValidators only if the administrator has set a switch on the SSLMBean stating that outbound SSL should use the validators. That is, the application completely delegate validation to whatever the administrator configures. This is the default.

2. The trust manager always calls any configured CertPathValidators.

3. The trust manager never calls any configured CertPathValidators.

For more information, see the sections that describe certification paths in "Developing Security Providers for Oracle WebLogic Server" and "Programming Security for Oracle WebLogic Server."

See Also:

SSLContext, Environment, HttpsURLConnection

setBuiltinSSLValidationAndCertPathValidators

public void setBuiltinSSLValidationAndCertPathValidators()

Configure this trust manager to always use the CertPathValidators configured in the realm.

setBuiltinSSLValidationOnly

public void setBuiltinSSLValidationOnly()

Configure this trust manager to never use the CertPathValidators configured in the realm.

setUseConfiguredSSLValidation

public void setUseConfiguredSSLValidation()

Configure this trust manager to use the validation rules the administrator configured for SSL.

Skip navigation links