com.ibm.tivoli.nm.collectors.framework.server

Class GrpcTlsHelper

java.lang.Object

com.ibm.tivoli.nm.collectors.framework.server.GrpcTlsHelper

public class GrpcTlsHelper
extends java.lang.Object

Helper class for creating SSL/TLS contexts for gRPC communication. Provides utilities for loading certificates, private keys, and building SSL contexts for both server and client configurations.

Author:

IBM

Constructor Summary

Constructors

Constructor and Description
GrpcTlsHelper()

Method Summary

Modifier and Type	Method and Description
static SslContext	createClientSslContext(GrpcTlsConfig config) Create an SSL context for gRPC client with TLS configuration
static SslContext	createServerSslContext(GrpcTlsConfig config) Create an SSL context for gRPC server with TLS configuration
static java.util.List<java.security.cert.X509Certificate>	loadCertificates(java.io.File certFile) Load X.509 certificates from a PEM file
static boolean	validateCertificateChain(java.io.File certFile) Validate certificate chain

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GrpcTlsHelper

public GrpcTlsHelper()

Method Detail

createServerSslContext

public static SslContext createServerSslContext(GrpcTlsConfig config)
                                         throws javax.net.ssl.SSLException,
                                                java.io.IOException

Create an SSL context for gRPC server with TLS configuration

Parameters:

config - The TLS configuration

Returns:

SslContext for the server

Throws:

javax.net.ssl.SSLException - If SSL context creation fails

java.io.IOException - If certificate or key files cannot be read

createClientSslContext

public static SslContext createClientSslContext(GrpcTlsConfig config)
                                         throws javax.net.ssl.SSLException,
                                                java.io.IOException

Create an SSL context for gRPC client with TLS configuration

Parameters:

config - The TLS configuration

Returns:

SslContext for the client

Throws:

javax.net.ssl.SSLException - If SSL context creation fails

java.io.IOException - If certificate or key files cannot be read

loadCertificates

public static java.util.List<java.security.cert.X509Certificate> loadCertificates(java.io.File certFile)
                                                                           throws java.security.cert.CertificateException,
                                                                                  java.io.IOException

Load X.509 certificates from a PEM file

Parameters:

certFile - The certificate file

Returns:

List of X509Certificate objects

Throws:

java.security.cert.CertificateException - If certificates cannot be loaded

java.io.IOException - If file cannot be read

validateCertificateChain

public static boolean validateCertificateChain(java.io.File certFile)

Validate certificate chain

Parameters:

certFile - The certificate chain file

Returns:

true if valid, false otherwise