Provides a SSLSocketFactory that authenticates the remote server against
an explicit pre-shared SSL certificate. This is more secure than using the
NonValidatingFactory as it prevents "man in the middle" attacks. It is also
more secure than relying on a central CA signing your server's certificate
as it pins the server's certificate.
This class requires a single String parameter specified by setting
the connection property
sslfactoryarg
. The value of this property
is the PEM-encoded remote server's SSL certificate.
Where the certificate is loaded from is based upon the prefix of the
sslfactoryarg
property. The following table lists the valid
set of prefixes.
Prefix |
Example |
Explanation |
classpath: |
classpath:ssl/server.crt |
Loaded from the classpath. |
file: |
file:/foo/bar/server.crt |
Loaded from the filesystem. |
env: |
env:mydb_cert
Loaded from string value of the mydb_cert
environment variable. |
|
sys: |
sys:mydb_cert
Loaded from string value of the mydb_cert
system property. |
|
-----BEGIN CERTIFICATE------ |
-----BEGIN CERTIFICATE-----
MIIDQzCCAqygAwIBAgIJAOd1tlfiGoEoMA0GCSqGSIb3DQEBBQUAMHUxCzAJBgNV
[... truncated ...]
UCmmYqgiVkAGWRETVo+byOSDZ4swb10=
-----END CERTIFICATE-----
|
Loaded from string value of the argument. |