Package com.spotify.docker.client
Class DockerCertificates
java.lang.Object
com.spotify.docker.client.DockerCertificates
- All Implemented Interfaces:
DockerCertificatesStore
DockerCertificates holds certificates for connecting to an HTTPS-secured Docker instance with
client/server authentication.
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic class
private static class
static interface
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final String
static final String
static final String
private static final char[]
private static final org.slf4j.Logger
private final SSLContext
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionstatic DockerCertificates.Builder
builder()
private static PrivateKey
generatePrivateKey
(org.bouncycastle.asn1.pkcs.PrivateKeyInfo privateKeyInfo) private KeyStore
private List
<Certificate> readCertificates
(Path file) private PrivateKey
readPrivateKey
(Path file) private static PrivateKey
tryGeneratePrivateKey
(PKCS8EncodedKeySpec spec, Set<String> algorithms)
-
Field Details
-
DEFAULT_CA_CERT_NAME
- See Also:
-
DEFAULT_CLIENT_CERT_NAME
- See Also:
-
DEFAULT_CLIENT_KEY_NAME
- See Also:
-
KEY_STORE_PASSWORD
private static final char[] KEY_STORE_PASSWORD -
PRIVATE_KEY_ALGS
-
log
private static final org.slf4j.Logger log -
sslContext
-
-
Constructor Details
-
DockerCertificates
- Throws:
DockerCertificateException
-
DockerCertificates
- Throws:
DockerCertificateException
-
-
Method Details
-
newKeyStore
private KeyStore newKeyStore() throws CertificateException, NoSuchAlgorithmException, IOException, KeyStoreException -
readPrivateKey
private PrivateKey readPrivateKey(Path file) throws IOException, InvalidKeySpecException, DockerCertificateException -
generatePrivateKey
private static PrivateKey generatePrivateKey(org.bouncycastle.asn1.pkcs.PrivateKeyInfo privateKeyInfo) throws IOException, InvalidKeySpecException - Throws:
IOException
InvalidKeySpecException
-
tryGeneratePrivateKey
private static PrivateKey tryGeneratePrivateKey(PKCS8EncodedKeySpec spec, Set<String> algorithms) throws InvalidKeySpecException - Throws:
InvalidKeySpecException
-
readCertificates
- Throws:
CertificateException
IOException
-
sslContext
- Specified by:
sslContext
in interfaceDockerCertificatesStore
-
hostnameVerifier
- Specified by:
hostnameVerifier
in interfaceDockerCertificatesStore
-
builder
-