Add root/intermediate CA to vault about vault-java-driver

[steve-perkins]

Sorry for the delayed response. Today is my first day back from vacation. It may be another day or two before I get caught on regular job stuff, and work through the current issues.

[lingesh-happiestminds]

Hello @steve-perkins,
is this enhancement prioritized ?.
thanks

[lingesh-happiestminds]

Hello @steve-perkins ,

I have overridden SSL CONTEXT to have ROOT CA as trusted Assure. this will be return during SslConfig.build(). Please suggest you have any other thoughts on the same.

private static SSLContext ROOT_CA_SSL_CONTEXT;
static {
    try {
    	ROOT_CA_SSL_CONTEXT = SSLContext.getInstance("TLS");
    	ROOT_CA_SSL_CONTEXT.init(null, new TrustManager[]{new X509TrustManager() {
            @Override
            public void checkClientTrusted(final X509Certificate[] x509Certificates, final String s) throws CertificateException {
            }

            @Override
            public void checkServerTrusted(final X509Certificate[] x509Certificates, final String s) throws CertificateException {
            }

            @Override
            public X509Certificate[] getAcceptedIssuers() {
            	X509Certificate[] x509Certificate = new X509Certificate[1];
            	InputStream inputStream = null;
            	try {
            	CertificateFactory fac = CertificateFactory.getInstance("X509");
        		inputStream = this.getClass().getResourceAsStream(ROOT_CA_PEM);
        		X509Certificate certificate = (X509Certificate) fac.generateCertificate(inputStream);
        		certificate.checkValidity();
        		x509Certificate[0]= certificate;
        		return x509Certificate;
        		} catch (Exception e) {
        			e.printStackTrace();
        		}finally {
        			try {
        				inputStream.close();
					} catch (IOException e) {
						e.printStackTrace();
					}
        		}
                return x509Certificate;
            }
        }}, new java.security.SecureRandom());
    } catch (NoSuchAlgorithmException | KeyManagementException e) {
        e.printStackTrace();
    }
}