org.ldaptive.ssl

Class HostnameVerifyingTrustManager

java.lang.Object

org.ldaptive.ssl.HostnameVerifyingTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public class HostnameVerifyingTrustManager
extends Object
implements X509TrustManager

Trust manager that delegates to CertificateHostnameVerifier. Any name that verifies passes this trust manager check.

Field Summary

Fields

Modifier and Type	Field and Description
private String[]	hostnames Hostnames to allow.
private CertificateHostnameVerifier	hostnameVerifier Hostname verifier to use for trust.
protected Logger	logger Logger for this class.

Constructor Summary

Constructors

Constructor and Description
HostnameVerifyingTrustManager(CertificateHostnameVerifier verifier, String... names) Creates a new hostname verifying trust manager.

Method Summary

Modifier and Type	Method and Description
private void	checkCertificateTrusted(X509Certificate cert) Verifies the supplied certificate using the hostname verifier with each hostname.
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType)
X509Certificate[]	getAcceptedIssuers()
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

logger

protected final Logger logger

Logger for this class.

hostnames

private final String[] hostnames

Hostnames to allow.

hostnameVerifier

private final CertificateHostnameVerifier hostnameVerifier

Hostname verifier to use for trust.

Constructor Detail

HostnameVerifyingTrustManager

public HostnameVerifyingTrustManager(CertificateHostnameVerifier verifier,
                                     String... names)

Creates a new hostname verifying trust manager.

Parameters:

verifier - that establishes trust

names - to match against a certificate

Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

checkCertificateTrusted

private void checkCertificateTrusted(X509Certificate cert)
                              throws CertificateException

Verifies the supplied certificate using the hostname verifier with each hostname.

Parameters:

cert - to verify

Throws:

CertificateException - if none of the hostnames verify

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager

toString

public String toString()

Overrides:

toString in class Object