package org.apache.maven.wagon.shared.http4;
   
   /*
    * Licensed to the Apache Software Foundation (ASF) under one
    * or more contributor license agreements.  See the NOTICE file
    * distributed with this work for additional information
    * regarding copyright ownership.  The ASF licenses this file
    * to you under the Apache License, Version 2.0 (the
    * "License"); you may not use this file except in compliance
   * with the License.  You may obtain a copy of the License at
   *
   *   http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an
   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
   * KIND, either express or implied.  See the License for the
   * specific language governing permissions and limitations
   * under the License.
   */
  
  import javax.net.ssl.SSLContext;
  import javax.net.ssl.TrustManager;
  import javax.net.ssl.TrustManagerFactory;
  import javax.net.ssl.X509TrustManager;
  import java.io.IOException;
  import java.security.KeyStore;
  import java.security.KeyStoreException;
  import java.security.NoSuchAlgorithmException;
  import java.security.cert.CertificateException;
  import java.security.cert.CertificateExpiredException;
  import java.security.cert.CertificateNotYetValidException;
  import java.security.cert.X509Certificate;
  
  /**
   * Relaxed X509 certificate trust manager: can ignore invalid certificate date.
   *
   * @author Olivier Lamy
   * @since 2.0
   * @see AbstractHttpClientWagon.IGNORE_SSL_VALIDITY_DATES
   */
  public class RelaxedX509TrustManager
      implements X509TrustManager
  {
      private X509TrustManager standardTrustManager = null;
  
      protected static SSLContext createRelaxedSSLContext()
          throws IOException
      {
          try
          {
              SSLContext context = SSLContext.getInstance( "SSL" );
              context.init( null, new TrustManager[]{ new RelaxedX509TrustManager( null ) }, null );
              return context;
          }
          catch ( Exception e )
          {
              IOException ioe = new IOException( e.getMessage() );
              ioe.initCause( e );
              throw ioe;
          }
      }
  
      /**
       * Constructor for EasyX509TrustManager.
       */
      public RelaxedX509TrustManager( KeyStore keystore )
          throws NoSuchAlgorithmException, KeyStoreException
      {
          super();
          TrustManagerFactory factory = TrustManagerFactory.getInstance( TrustManagerFactory.getDefaultAlgorithm() );
          factory.init( keystore );
          TrustManager[] trustmanagers = factory.getTrustManagers();
          if ( trustmanagers.length == 0 )
          {
              throw new NoSuchAlgorithmException( "no trust manager found" );
          }
          this.standardTrustManager = (X509TrustManager) trustmanagers[0];
      }
  
      /**
       * @see javax.net.ssl.X509TrustManager#checkClientTrusted(X509Certificate[], String authType)
       */
      public void checkClientTrusted( X509Certificate[] certificates, String authType )
          throws CertificateException
      {
          standardTrustManager.checkClientTrusted( certificates, authType );
      }
  
      /**
       * @see javax.net.ssl.X509TrustManager#checkServerTrusted(X509Certificate[], String authType)
       */
      public void checkServerTrusted( X509Certificate[] certificates, String authType )
          throws CertificateException
      {
  
          if ( ( certificates != null ) && ( certificates.length == 1 ) )
          {
              try
             {
                 certificates[0].checkValidity();
             }
             catch ( CertificateExpiredException e )
             {
                 if ( !AbstractHttpClientWagon.IGNORE_SSL_VALIDITY_DATES )
                 {
                     throw e;
                 }
             }
             catch ( CertificateNotYetValidException e )
             {
                 if ( !AbstractHttpClientWagon.IGNORE_SSL_VALIDITY_DATES )
                 {
                     throw e;
                 }
             }
         }
         else
         {
             standardTrustManager.checkServerTrusted( certificates, authType );
         }
     }
 
     /**
      * @see javax.net.ssl.X509TrustManager#getAcceptedIssuers()
      */
     public X509Certificate[] getAcceptedIssuers()
     {
         return this.standardTrustManager.getAcceptedIssuers();
     }
 }