Class EnhancingX509ExtendedTrustManager

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

io.netty.handler.ssl.EnhancingX509ExtendedTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

final class EnhancingX509ExtendedTrustManager
extends X509ExtendedTrustManager

Wraps an existing X509ExtendedTrustManager and enhances the CertificateException that is thrown because of hostname validation.

Field Summary

Fields

Modifier and Type	Field	Description
(package private) static final int	ALTNAME_DNS
(package private) static final int	ALTNAME_IP
(package private) static final int	ALTNAME_URI
private static final String	SEPARATOR
private final X509ExtendedTrustManager	wrapped

Constructor Summary

Constructors

Constructor	Description
EnhancingX509ExtendedTrustManager(X509TrustManager wrapped)

Method Summary

Modifier and Type	Method	Description
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkClientTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine engine)
void	checkServerTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine engine)
X509Certificate[]	getAcceptedIssuers()
private static String	getCommonName(X509Certificate cert)
private static String	getSNIHostName(SSLSession session)
private static void	throwEnhancedCertificateException(CertificateException e, X509Certificate[] chain, SSLSession session)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ALTNAME_DNS

static final int ALTNAME_DNS

See Also:

• Constant Field Values

ALTNAME_URI

static final int ALTNAME_URI

See Also:

• Constant Field Values

ALTNAME_IP

static final int ALTNAME_IP

See Also:

• Constant Field Values

SEPARATOR

private static final String SEPARATOR

See Also:

• Constant Field Values

wrapped

private final X509ExtendedTrustManager wrapped

Constructor Details

EnhancingX509ExtendedTrustManager

EnhancingX509ExtendedTrustManager(X509TrustManager wrapped)

Method Details

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 Socket socket)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine engine)
                        throws CertificateException

Specified by:

checkClientTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType,
 SSLEngine engine)
                        throws CertificateException

Specified by:

checkServerTrusted in class X509ExtendedTrustManager

Throws:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
 String authType)
                        throws CertificateException

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

throwEnhancedCertificateException

private static void throwEnhancedCertificateException(CertificateException e,
 X509Certificate[] chain,
 SSLSession session)
                                               throws CertificateException

Throws:

CertificateException

getSNIHostName

private static String getSNIHostName(SSLSession session)

getCommonName

private static String getCommonName(X509Certificate cert)