TrustManagerCommands

Use the Jython or Jacl scripting languages to configure security with the wsadmin tool. The commands in the TrustManagerCommands group can be used to create, delete, and query trust manager settings in the configuration. We can also use these commands to create a custom trust manager for a pure client.

The TrustManagerCommands command group for the AdminTask objectcommands include:

• createTrustManager
• deleteTrustManager
• getTrustManager
• listTrustManagers
• modifyTrustManager

createTrustManager

The createTrustManager command creates a trust manager in the configuration.

Target object: None

Parameters and return values

-name

The name that uniquely identifies the trust manager. (String, required)

-scopeName

The name of the scope. (String, optional)

-provider

Provider. (String, optional)

-algorithm

Algorithm name of the trust manager or key manager. (String, optional)

-trustManagerClass

Custom class that implements the javax.net.s sl.TrustManager interface. (String, optional)

Examples

Batch mode example usage:

• Jacl:
  $AdminTask createTrustManager {-name testTM}

• Jython string:
  AdminTask.createTrustManager ('[-name testTM]')

• Jython list:
  AdminTask.createTrustManager (['-name', 'testTM'])

Interactive mode example usage:

• Jacl:
  $AdminTask createTrustManager {-interactive}

• Jython string:
  AdminTask.deleteTrustManager ('[-interactive]')

• Jython list:
  AdminTask.createTrustManager (['-interactive'])

deleteTrustManager

The deleteTrustManager command deletes the trust manager settings from the configuration.

Target object: None.

Required parameters:

-name

Name that uniquely identifies the trust manager. (String, required)

Optional parameters:

-scopeName

Name of the scope. (String, optional)

Examples

Batch mode example usage:

• Jacl:
  $AdminTask deleteTrustManager {-name testTM}

• Jython string:
  AdminTask.deleteTrustManager('[-name testTM]')

• Jython list:
  AdminTask.deleteTrustManager(['-name', 'testTM'])

Interactive mode example usage:

• Jacl:
  $AdminTask deleteTrustManager {-interactive}

• Jython:
  AdminTask.deleteTrustManager('-interactive')

getTrustManager

The getTrustManager command obtains the setting of a trust manager.

Target object: None.

Required parameters:

-name

Name that uniquely identifies the trust manager. (String, required)

Optional parameters:

-scopeName

Unique name that identifies the management scope. (String, optional)

Examples

Batch mode example usage:

• Jacl:
  $AdminTask getTrustManager {-name testTM}

• Jython string:
  AdminTask.getTrustManager('[-name testTM]')

• Jython list:
  AdminTask.getTrustManager(['-name', 'testTM'])

Interactive mode example usage:

• Jacl:
  $AdminTask getTrustManager {-interactive}

• Jython:
  AdminTask.getTrustManager('-interactive')

listTrustManagers

The listTrustManagers command lists the trust managers within a particular management scope.

Target object: None.

Required parameters: None.

Optional parameters:

-scopeName

Unique name that identifies the management scope. (String, optional)

-displayObjectName

Set value to true to list the trust manager objects within a scope. Set value to false to list the strings that contain the trust manager name and management scope. (Boolean, optional)

-all

Specify the value of this parameter as true to list all trust managers. This parameter overrides the scopeName parameter. The default is false. (Boolean, optional)

Examples

Batch mode example usage:

• Jacl:
  $AdminTask listTrustManagers {-displayObjectName true}

• Jython string:
  AdminTask.listTrustManagers('[-displayObjectName true]')

• Jython list:
  AdminTask.listTrustManagers(['-displayObjectName', 'true'])

Interactive mode example usage:

• Jacl:
  $AdminTask listTrustManagers {-interactive}

• Jython:
  AdminTask.listTrustManagers('-interactive')

modifyTrustManager

The modifyTrustManager command changes existing trust manager settings.

Target object: None.

Required parameters:

-name

Name that uniquely identifies the trust manager. (String, required)

Optional parameters:

-scopeName

Unique name that identifies the management scope. (String, optional)

-provider

Provider name of the trust manager. (String, optional)

-algorithm

Algorithm name of the trust manager. (String, optional)

-trustManagerClass

Class that implements the javax.net.sslX509TrustManager interface. We cannot use this parameter with the provider or algorithm parameters. (String, optional)

Examples

Batch mode example usage:

• Jacl:
  $AdminTask modifyTrustManager {-name testTM -trustManagerClass test.trust.manager}

• Jython string:
  AdminTask.modifyTrustManager('[-name testTM -trustManagerClass test.trust.manager]')

• Jython list:
  AdminTask.modifyTrustManager(['-name', 'testTM', '-trustManagerClass', 'test.trust.manager'])

Interactive mode example usage:

• Jacl:
  $AdminTask modifyTrustManager {-interactive}

• Jython:
  AdminTask.modifyTrustManager('-interactive')

Related:

Key management for cryptographic uses

wsadmin AdminTask

Automating SSL configurations using scripting

Create a custom trust manager configuration for SSL