|
20 | 20 | import org.elasticsearch.logging.Logger; |
21 | 21 | import org.elasticsearch.xpack.core.ssl.SslSettingsLoader; |
22 | 22 |
|
23 | | -import javax.net.ssl.X509ExtendedTrustManager; |
24 | | -import javax.net.ssl.X509KeyManager; |
25 | | -import javax.net.ssl.X509TrustManager; |
26 | | -import javax.security.auth.x500.X500Principal; |
27 | 23 | import java.nio.charset.StandardCharsets; |
28 | 24 | import java.nio.file.Files; |
29 | 25 | import java.nio.file.Path; |
|
43 | 39 | import java.util.concurrent.atomic.AtomicReference; |
44 | 40 | import java.util.stream.Collectors; |
45 | 41 |
|
| 42 | +import javax.net.ssl.X509ExtendedTrustManager; |
| 43 | +import javax.net.ssl.X509KeyManager; |
| 44 | +import javax.net.ssl.X509TrustManager; |
| 45 | +import javax.security.auth.x500.X500Principal; |
| 46 | + |
46 | 47 | import static org.elasticsearch.xpack.security.transport.CrossClusterApiKeySigningSettings.KEYSTORE_ALIAS_SUFFIX; |
47 | 48 | import static org.elasticsearch.xpack.security.transport.CrossClusterApiKeySigningSettings.SETTINGS_PART_DIAGNOSE_TRUST; |
48 | 49 | import static org.elasticsearch.xpack.security.transport.CrossClusterApiKeySigningSettings.SETTINGS_PART_SIGNING; |
@@ -209,7 +210,7 @@ public boolean verify(X509CertificateSignature signature, String... headers) thr |
209 | 210 | /** |
210 | 211 | * Find the certificate that issued the certificate at the top of the current chain. A certificate chain is a list of |
211 | 212 | * certificates followed by one or more CA certificates (usually the last one being a self-signed certificate), with the |
212 | | - * following properties: |
| 213 | + * following properties: |
213 | 214 | * <br> |
214 | 215 | * 1. The Issuer of each certificate (except the last one) matches the Subject of the next certificate in the list. |
215 | 216 | * 2. Each certificate (except the last one) is signed by the secret key corresponding to the next certificate in the chain (i.e. |
|
0 commit comments