org.openeuler.sun.security.ssl

类 X509TrustManagerImpl

java.lang.Object

javax.net.ssl.X509ExtendedTrustManager

org.openeuler.sun.security.ssl.X509TrustManagerImpl

所有已实现的接口:

TrustManager, X509TrustManager

final class X509TrustManagerImpl
extends X509ExtendedTrustManager
implements X509TrustManager

This class implements the SunJSSE X.509 trust manager using the internal validator API in J2SE core. The logic in this class is minimal.

This class supports both the Simple validation algorithm from previous JSSE versions and PKIX validation. Currently, it is not possible for the application to specify PKIX parameters other than trust anchors. This will be fixed in a future release using new APIs. When that happens, it may also make sense to separate the Simple and PKIX trust managers into separate classes.

作者:

Andreas Sterbenz

字段概要

字段

限定符和类型	字段和说明
private Validator	clientValidator
private PKIXBuilderParameters	pkixParams
private Validator	serverValidator
private Collection<X509Certificate>	trustedCerts The Set of trusted X509Certificates.
private String	validatorType

构造器概要

构造器

构造器和说明
X509TrustManagerImpl(String validatorType, Collection<X509Certificate> trustedCerts)
X509TrustManagerImpl(String validatorType, PKIXBuilderParameters params)

方法概要

限定符和类型	方法和说明
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkClientTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine engine)
(专用程序包) static void	checkIdentity(SSLSession session, X509Certificate[] trustedChain, String algorithm, boolean checkClientTrusted)
(专用程序包) static void	checkIdentity(String hostname, X509Certificate cert, String algorithm)
private static void	checkIdentity(String hostname, X509Certificate cert, String algorithm, boolean chainsToPublicCA)
void	checkServerTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType, Socket socket)
void	checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine engine)
private void	checkTrusted(X509Certificate[] chain, String authType, Socket socket, boolean checkClientTrusted)
private void	checkTrusted(X509Certificate[] chain, String authType, SSLEngine engine, boolean checkClientTrusted)
private Validator	checkTrustedInit(X509Certificate[] chain, String authType, boolean checkClientTrusted)
X509Certificate[]	getAcceptedIssuers()
private static String	getHostNameInSNI(List<SNIServerName> sniNames)
(专用程序包) static List<SNIServerName>	getRequestedServerNames(Socket socket)
(专用程序包) static List<SNIServerName>	getRequestedServerNames(SSLEngine engine)
private static List<SNIServerName>	getRequestedServerNames(SSLSession session)
private Validator	getValidator(String variant)
private static X509Certificate[]	validate(Validator v, X509Certificate[] chain, List<byte[]> responseList, AlgorithmConstraints constraints, String authType)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

validatorType

private final String validatorType

trustedCerts

private final Collection<X509Certificate> trustedCerts

The Set of trusted X509Certificates.

pkixParams

private final PKIXBuilderParameters pkixParams

clientValidator

private volatile Validator clientValidator

serverValidator

private volatile Validator serverValidator

构造器详细资料

X509TrustManagerImpl

X509TrustManagerImpl(String validatorType,
                     Collection<X509Certificate> trustedCerts)

X509TrustManagerImpl

X509TrustManagerImpl(String validatorType,
                     PKIXBuilderParameters params)

方法详细资料

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

指定者:

checkClientTrusted 在接口中 X509TrustManager

抛出:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

指定者:

checkServerTrusted 在接口中 X509TrustManager

抛出:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

指定者:

getAcceptedIssuers 在接口中 X509TrustManager

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType,
                               Socket socket)
                        throws CertificateException

指定者:

checkClientTrusted 在类中 X509ExtendedTrustManager

抛出:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType,
                               Socket socket)
                        throws CertificateException

指定者:

checkServerTrusted 在类中 X509ExtendedTrustManager

抛出:

CertificateException

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType,
                               SSLEngine engine)
                        throws CertificateException

指定者:

checkClientTrusted 在类中 X509ExtendedTrustManager

抛出:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType,
                               SSLEngine engine)
                        throws CertificateException

指定者:

checkServerTrusted 在类中 X509ExtendedTrustManager

抛出:

CertificateException

checkTrustedInit

private Validator checkTrustedInit(X509Certificate[] chain,
                                   String authType,
                                   boolean checkClientTrusted)

checkTrusted

private void checkTrusted(X509Certificate[] chain,
                          String authType,
                          Socket socket,
                          boolean checkClientTrusted)
                   throws CertificateException

抛出:

CertificateException

checkTrusted

private void checkTrusted(X509Certificate[] chain,
                          String authType,
                          SSLEngine engine,
                          boolean checkClientTrusted)
                   throws CertificateException

抛出:

CertificateException

getValidator

private Validator getValidator(String variant)

validate

private static X509Certificate[] validate(Validator v,
                                          X509Certificate[] chain,
                                          List<byte[]> responseList,
                                          AlgorithmConstraints constraints,
                                          String authType)
                                   throws CertificateException

抛出:

CertificateException

getHostNameInSNI

private static String getHostNameInSNI(List<SNIServerName> sniNames)

getRequestedServerNames

static List<SNIServerName> getRequestedServerNames(Socket socket)

getRequestedServerNames

static List<SNIServerName> getRequestedServerNames(SSLEngine engine)

getRequestedServerNames

private static List<SNIServerName> getRequestedServerNames(SSLSession session)

checkIdentity

static void checkIdentity(SSLSession session,
                          X509Certificate[] trustedChain,
                          String algorithm,
                          boolean checkClientTrusted)
                   throws CertificateException

抛出:

CertificateException

checkIdentity

static void checkIdentity(String hostname,
                          X509Certificate cert,
                          String algorithm)
                   throws CertificateException

抛出:

CertificateException

checkIdentity

private static void checkIdentity(String hostname,
                                  X509Certificate cert,
                                  String algorithm,
                                  boolean chainsToPublicCA)
                           throws CertificateException

抛出:

CertificateException