@ Override protected TrustManager [ ] getTrustManagers ( String keystoreType , String keystoreProvider , String algorithm ) throws Exception { KeyStore trustStore = getTrustStore ( keystoreType , keystoreProvider ) ; CertStore crlStore = null ; if ( crlLocation != null ) { crlStore = GlobusSSLHelper . findCRLStore ( ( String ) crlLocation ) ; } ResourceSigningPolicyStore policyStore = null ; if ( signingPolicyLocation != null ) { policyStore = Stores . getSigningPolicyStore ( ( String ) signingPolicyLocation ) ; } boolean rejectLimitedProxy = rejectLimitedProxyEntry != null && Boolean . parseBoolean ( ( String ) rejectLimitedProxyEntry ) ; X509ProxyCertPathParameters parameters = new X509ProxyCertPathParameters ( trustStore , crlStore , policyStore , rejectLimitedProxy ) ; TrustManager trustManager = new PKITrustManager ( new X509ProxyCertPathValidator ( ) , parameters ) ; return new TrustManager [ ] { trustManager } ; }
Create a Globus trust manager which supports proxy certificates . This requires that the CRL store and signing policy store be configured .