Class KeyStoreHelper.KeyStoreOptions

java.lang.Object
io.spiffe.helper.keystore.KeyStoreHelper.KeyStoreOptions
Enclosing class:
KeyStoreHelper

public static class KeyStoreHelper.KeyStoreOptions extends Object
Options for creating a KeyStoreHelper.

keyStorePath Absolute path to File storing the Key Store. Cannot be null.

trustStorePath Absolute path to File storing the Trust Store. Cannot be null.

keyStoreType The type of keystore. Only JKS and PKCS12 are supported. If it's not provided, PKCS12 is used See the KeyStore section in the Java Cryptography Architecture Standard Algorithm Name Documentation for information about standard keystore types.

The same type is used for both the KeyStore and the TrustStore.

Optional. Default is PKCS12.

keyStorePass The password to generate the keystore integrity check.

trustStorePass The password to generate the truststore integrity check.

keyPass The password to protect the key.

keyAlias Alias of the keyEntry. Default: spiffe Note: java keystore aliases are case-insensitive.

spiffeSocketPath Optional SPIFFE Endpoint Socket address, if absent, SPIFFE_ENDPOINT_SOCKET env variable is used.

client Optional. The a WorkloadApiClient to fetch the X.509 materials from the Workload API.

  • Constructor Details

    • KeyStoreOptions

      public KeyStoreOptions(@NonNull @NonNull Path keyStorePath, @NonNull @NonNull Path trustStorePath, @NonNull @NonNull String keyStorePass, @NonNull @NonNull String trustStorePass, @NonNull @NonNull String keyPass, KeyStoreType keyStoreType, String keyAlias, io.spiffe.workloadapi.WorkloadApiClient workloadApiClient, String spiffeSocketPath)