Package org.apache.hc.client5.http.ssl

Class DefaultHostnameVerifier

java.lang.Object

org.apache.hc.client5.http.ssl.DefaultHostnameVerifier

All Implemented Interfaces:

javax.net.ssl.HostnameVerifier, HttpClientHostnameVerifier

@Contract(threading=STATELESS)
public final class DefaultHostnameVerifier
extends java.lang.Object
implements HttpClientHostnameVerifier

Default HostnameVerifier implementation.

Since:

4.4

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) static class	DefaultHostnameVerifier.HostNameType

Field Summary

Fields

Modifier and Type	Field	Description
private static org.slf4j.Logger	LOG
private PublicSuffixMatcher	publicSuffixMatcher

Constructor Summary

Constructors

Constructor	Description
DefaultHostnameVerifier()	Constructs new instance without a PublicSuffixMatcher.
DefaultHostnameVerifier(PublicSuffixMatcher publicSuffixMatcher)	Constructs new instance with a PublicSuffixMatcher.

Method Summary

Modifier and Type	Method	Description
private static java.lang.String	byteArrayToIp(byte[] bytes)
private static java.lang.String	byteArrayToIPv6(byte[] bytes)
(package private) static DefaultHostnameVerifier.HostNameType	determineHostFormat(java.lang.String host)
(package private) static java.lang.String	extractCN(java.lang.String subjectPrincipal)
(package private) static java.util.List<SubjectName>	getSubjectAltNames(java.security.cert.X509Certificate cert)
(package private) static java.util.List<SubjectName>	getSubjectAltNames(java.security.cert.X509Certificate cert, int subjectName)
(package private) static void	matchCN(java.lang.String host, java.security.cert.X509Certificate cert, PublicSuffixMatcher publicSuffixMatcher)
(package private) static void	matchDNSName(java.lang.String host, java.util.List<SubjectName> subjectAlts, PublicSuffixMatcher publicSuffixMatcher)
(package private) static boolean	matchDomainRoot(java.lang.String host, java.lang.String domainRoot)
(package private) static boolean	matchIdentity(java.lang.String host, java.lang.String identity, PublicSuffixMatcher publicSuffixMatcher, boolean strict)
(package private) static void	matchIPAddress(java.lang.String host, java.util.List<SubjectName> subjectAlts)
(package private) static void	matchIPv6Address(java.lang.String host, java.util.List<SubjectName> subjectAlts)
(package private) static java.lang.String	normaliseAddress(java.lang.String hostname)
(package private) static java.util.List<java.lang.CharSequence>	parseFQDN(java.lang.CharSequence s)
void	verify(java.lang.String host, java.security.cert.X509Certificate cert)	Verifies the supplied server X509Certificate and ensures it matches the original host name.
boolean	verify(java.lang.String host, javax.net.ssl.SSLSession session)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final org.slf4j.Logger LOG

publicSuffixMatcher

private final PublicSuffixMatcher publicSuffixMatcher

Constructor Detail

DefaultHostnameVerifier

public DefaultHostnameVerifier(PublicSuffixMatcher publicSuffixMatcher)

Constructs new instance with a PublicSuffixMatcher.

Parameters:

publicSuffixMatcher - a PublicSuffixMatcher.

DefaultHostnameVerifier

public DefaultHostnameVerifier()

Constructs new instance without a PublicSuffixMatcher.

Method Detail

verify

public boolean verify(java.lang.String host,
                      javax.net.ssl.SSLSession session)

Specified by:

verify in interface javax.net.ssl.HostnameVerifier

verify

public void verify(java.lang.String host,
                   java.security.cert.X509Certificate cert)
            throws javax.net.ssl.SSLException

Description copied from interface: HttpClientHostnameVerifier

Verifies the supplied server X509Certificate and ensures it matches the original host name.

Specified by:

verify in interface HttpClientHostnameVerifier

Parameters:

host - the original host name.

cert - the server certificate;

Throws:

javax.net.ssl.SSLException

matchIPAddress

static void matchIPAddress(java.lang.String host,
                           java.util.List<SubjectName> subjectAlts)
                    throws javax.net.ssl.SSLPeerUnverifiedException

Throws:

javax.net.ssl.SSLPeerUnverifiedException

matchIPv6Address

static void matchIPv6Address(java.lang.String host,
                             java.util.List<SubjectName> subjectAlts)
                      throws javax.net.ssl.SSLPeerUnverifiedException

Throws:

javax.net.ssl.SSLPeerUnverifiedException

matchDNSName

static void matchDNSName(java.lang.String host,
                         java.util.List<SubjectName> subjectAlts,
                         PublicSuffixMatcher publicSuffixMatcher)
                  throws javax.net.ssl.SSLPeerUnverifiedException

Throws:

javax.net.ssl.SSLPeerUnverifiedException

matchCN

static void matchCN(java.lang.String host,
                    java.security.cert.X509Certificate cert,
                    PublicSuffixMatcher publicSuffixMatcher)
             throws javax.net.ssl.SSLException

Throws:

javax.net.ssl.SSLException

parseFQDN

static java.util.List<java.lang.CharSequence> parseFQDN(java.lang.CharSequence s)

matchDomainRoot

static boolean matchDomainRoot(java.lang.String host,
                               java.lang.String domainRoot)

matchIdentity

static boolean matchIdentity(java.lang.String host,
                             java.lang.String identity,
                             PublicSuffixMatcher publicSuffixMatcher,
                             boolean strict)

extractCN

static java.lang.String extractCN(java.lang.String subjectPrincipal)
                           throws javax.net.ssl.SSLException

Throws:

javax.net.ssl.SSLException

determineHostFormat

static DefaultHostnameVerifier.HostNameType determineHostFormat(java.lang.String host)

getSubjectAltNames

static java.util.List<SubjectName> getSubjectAltNames(java.security.cert.X509Certificate cert)

getSubjectAltNames

static java.util.List<SubjectName> getSubjectAltNames(java.security.cert.X509Certificate cert,
                                                      int subjectName)

normaliseAddress

static java.lang.String normaliseAddress(java.lang.String hostname)

byteArrayToIp

private static java.lang.String byteArrayToIp(byte[] bytes)

byteArrayToIPv6

private static java.lang.String byteArrayToIPv6(byte[] bytes)