Class DefaultHostnameVerifier

java.lang.Object

org.apache.hc.client5.http.ssl.DefaultHostnameVerifier

All Implemented Interfaces:

HostnameVerifier, HttpClientHostnameVerifier

@Contract(threading=STATELESS)
public final class DefaultHostnameVerifier
extends Object
implements HttpClientHostnameVerifier

Default HostnameVerifier implementation.

Since:

4.4

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) static enum	DefaultHostnameVerifier.HostNameType

Field Summary

Fields

Modifier and Type	Field	Description
private static final org.slf4j.Logger	LOG
private final PublicSuffixMatcher	publicSuffixMatcher

Constructor Summary

Constructors

Constructor	Description
DefaultHostnameVerifier()	Constructs new instance without a PublicSuffixMatcher.
DefaultHostnameVerifier(PublicSuffixMatcher publicSuffixMatcher)	Constructs new instance with a PublicSuffixMatcher.

Method Summary

Modifier and Type	Method	Description
private static String	byteArrayToIp(byte[] bytes)
private static String	byteArrayToIPv6(byte[] bytes)
(package private) static DefaultHostnameVerifier.HostNameType	determineHostFormat(String host)
(package private) static String	extractCN(String subjectPrincipal)
(package private) static List<SubjectName>	getSubjectAltNames(X509Certificate cert)
(package private) static List<SubjectName>	getSubjectAltNames(X509Certificate cert, int subjectName)
(package private) static void	matchCN(String host, X509Certificate cert, PublicSuffixMatcher publicSuffixMatcher)
(package private) static void	matchDNSName(String host, List<SubjectName> subjectAlts, PublicSuffixMatcher publicSuffixMatcher)
(package private) static boolean	matchDomainRoot(String host, String domainRoot)
(package private) static boolean	matchIdentity(String host, String identity, PublicSuffixMatcher publicSuffixMatcher, boolean strict)
(package private) static void	matchIPAddress(String host, List<SubjectName> subjectAlts)
(package private) static void	matchIPv6Address(String host, List<SubjectName> subjectAlts)
(package private) static String	normaliseAddress(String hostname)
(package private) static List<CharSequence>	parseFQDN(CharSequence s)
void	verify(String host, X509Certificate cert)	Verifies the supplied server X509Certificate and ensures it matches the original host name.
boolean	verify(String host, SSLSession session)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOG

private static final org.slf4j.Logger LOG

publicSuffixMatcher

private final PublicSuffixMatcher publicSuffixMatcher

Constructor Details

DefaultHostnameVerifier

public DefaultHostnameVerifier(PublicSuffixMatcher publicSuffixMatcher)

Constructs new instance with a PublicSuffixMatcher.

Parameters:

publicSuffixMatcher - a PublicSuffixMatcher.

DefaultHostnameVerifier

public DefaultHostnameVerifier()

Constructs new instance without a PublicSuffixMatcher.

Method Details

verify

public boolean verify(String host,
 SSLSession session)

Specified by:

verify in interface HostnameVerifier

verify

public void verify(String host,
 X509Certificate cert)
            throws SSLException

Description copied from interface: HttpClientHostnameVerifier

Verifies the supplied server X509Certificate and ensures it matches the original host name.

Specified by:

verify in interface HttpClientHostnameVerifier

Parameters:

host - the original host name.

cert - the server certificate;

Throws:

SSLException

matchIPAddress

static void matchIPAddress(String host,
 List<SubjectName> subjectAlts)
                    throws SSLPeerUnverifiedException

Throws:

SSLPeerUnverifiedException

matchIPv6Address

static void matchIPv6Address(String host,
 List<SubjectName> subjectAlts)
                      throws SSLPeerUnverifiedException

Throws:

SSLPeerUnverifiedException

matchDNSName

static void matchDNSName(String host,
 List<SubjectName> subjectAlts,
 PublicSuffixMatcher publicSuffixMatcher)
                  throws SSLPeerUnverifiedException

Throws:

SSLPeerUnverifiedException

matchCN

static void matchCN(String host,
 X509Certificate cert,
 PublicSuffixMatcher publicSuffixMatcher)
             throws SSLException

Throws:

SSLException

parseFQDN

static List<CharSequence> parseFQDN(CharSequence s)

matchDomainRoot

static boolean matchDomainRoot(String host,
 String domainRoot)

matchIdentity

static boolean matchIdentity(String host,
 String identity,
 PublicSuffixMatcher publicSuffixMatcher,
 boolean strict)

extractCN

static String extractCN(String subjectPrincipal)
                 throws SSLException

Throws:

SSLException

determineHostFormat

static DefaultHostnameVerifier.HostNameType determineHostFormat(String host)

getSubjectAltNames

static List<SubjectName> getSubjectAltNames(X509Certificate cert)

getSubjectAltNames

static List<SubjectName> getSubjectAltNames(X509Certificate cert,
 int subjectName)

normaliseAddress

static String normaliseAddress(String hostname)

byteArrayToIp

private static String byteArrayToIp(byte[] bytes)

byteArrayToIPv6

private static String byteArrayToIPv6(byte[] bytes)