http.async.client.cert — com.fluree/http.async.client 1.3.1-25-0xae4f

Asynchronous HTTP Client - Clojure - Utils

add-x509-cert clj

(add-x509-cert keystore cert-alias certificate)

Adds the x509 certificate to the specified keystore. Param cert-alias is a name for this cert. Returns KeyStore with the certificate loaded.

BlindTrustManager clj

key-manager-factory clj

(key-manager-factory keystore password)

Returns a key manager for X509 certs using the speficied keystore.

load-embedded-resource clj

(load-embedded-resource resource)

Loads a resource embedded in a jar file. Returns an InputStream

load-keystore clj

(load-keystore keystore-stream password)

Loads a KeyStore from the specified file. Param keystore-stream is an InputStream. If password is provided, that will be used to unlock the KeyStore. Password may be nil. If keystore-stream is nil, this returns an empty default KeyStore.

load-x509-cert clj

(load-x509-cert path)

Loads an x509 certificate from the specified path, which may be either a file system path or a path to an embedded resource in a jar file. Returns an instace of java.security.cert.X509Certificate.

resource-stream clj

(resource-stream path)

Loads the resource at the specified path, and returns it as an InputStream. If there is no file at the specified path, and we are running as a jar, we'll attempt to load the resource embedded within the jar at the specified path.

ssl-context clj

(ssl-context &
             {:keys [keystore-file keystore-password certificate-alias
                     certificate-file trust-managers]})

Creates a new SSLContext with x509 certificates. This allows you to use client certificates in your async http requests.

File params should be relative to resources when your app is running as a jar. For example, if your certificate file is in resources/security/mycert.pem, then the :certificate-file param would be "security/mycert.pem".

:keystore-file - Path to Java keystore containing any private keys and trusted certificate authority certificates required for this connection. If this is nil or missing, a default keystore will be used.

:keystore-password - Password to unlock KeyStore if keystore file is provided.

:certificate-file The path to the file containing an X509 certificate (or certificate chain) to be used in the https connection

:certificate-alias - A name by which to access an X509 certificate that will be loaded into the KeyStore.

:trust-managers - [optional] A seq of javax.net.ssl.X509TrustManager objects. These are used to verify the certificates sent by the remote host. If you don't specify this option, the connection will use an instance of BlindTrustManager, which blindly trusts all certificates. This is handy, but it's not particularly safe.