org.apache.http.conn.ssl.X509HostnameVerifier
Interface for checking if a hostname matches the names stored inside the
server's X.509 certificate. Implements javax.net.ssl.HostnameVerifier, but
we don't actually use that interface. Instead we added some methods that
take String parameters (instead of javax.net.ssl.HostnameVerifier's
SSLSession). JUnit is a lot easier this way! :-)
We provide the HostnameVerifier.DEFAULT, HostnameVerifier.STRICT, and
HostnameVerifier.ALLOW_ALL implementations. But feel free to define
your own implementation!
Inspired by Sebastian Hauer's original StrictSSLProtocolSocketFactory in the
HttpClient "contrib" repository.
Known Indirect Subclasses
Summary
Details
Public Methods
public
void
verify(String host, String[] cns, String[] subjectAlts)
Checks to see if the supplied hostname matches any of the supplied CNs
or "DNS" Subject-Alts. Most implementations only look at the first CN,
and ignore any additional CNs. Most implementations do look at all of
the "DNS" Subject-Alts. The CNs or Subject-Alts may contain wildcards
according to RFC 2818.
Parameters
host
| The hostname to verify. |
cns
| CN fields, in order, as extracted from the X.509
certificate. |
subjectAlts
| Subject-Alt fields of type 2 ("DNS"), as extracted
from the X.509 certificate. |