The caller initiating the security context must determine the appropriate channel binding values to set in the GSSContext object. The acceptor must provide an identical binding in order to validate that received tokens possess correct channel-related characteristics.
Use of channel bindings is optional in GSS-API. ChannelBinding can be
set for the GSSContext using the setChannelBinding method
before the first call to initSecContext or acceptSecContext has been performed. Unless the setChannelBinding
method has been used to set the ChannelBinding for a GSSContext object,
null ChannelBinding will be assumed.
Conceptually, the GSS-API concatenates the initiator and acceptor
address information, and the application supplied byte array to form an
octet string. The mechanism calculates a MIC over this octet string and
binds the MIC to the context establishment token emitted by
initSecContext method of the GSSContext
interface. The same bindings are set by the context acceptor for its
GSSContext object and during processing of the
acceptSecContext method a MIC is calculated in the same
way. The calculated MIC is compared with that found in the token, and if
the MICs differ, accept will throw a GSSException with the
major code set to BAD_BINDINGS, and
the context will not be established. Some mechanisms may include the
actual channel binding data in the token (rather than just a MIC);
applications should therefore not use confidential data as
channel-binding components.
Individual mechanisms may impose additional constraints on addresses that may appear in channel bindings. For example, a mechanism may verify that the initiator address field of the channel binding contains the correct network address of the host system. Portable applications should therefore ensure that they either provide correct information for the address fields, or omit setting of the addressing information.
| Modifier and Type | Field and Description |
|---|---|
| private final InetAddress | |
| private byte[] | |
| private final InetAddress |
| Access | Constructor and Description |
|---|---|
| public | ChannelBinding(InetAddress
the address of the context initiator.
initAddr, InetAddress null value can be supplied to indicate that the
application does not want to set this value.the address of the context
acceptor. acceptAddr, byte[] null value can be supplied to indicate that
the application does not want to set this value.application supplied data to be used as part of the
channel bindings. appData)null value can be supplied to
indicate that the application does not want to set this value.Create a ChannelBinding object with user supplied address information and data. |
| public | ChannelBinding(byte[]
application supplied data to be used as part of the
channel bindings. appData)Creates a ChannelBinding object without any addressing information. |
| Modifier and Type | Method and Description |
|---|---|
| public boolean | Returns: true if the two ChannelBinding's contain the same values for the initiator and acceptor addresses and the application data.another ChannelBinding to compare this one with obj)Overrides java. Compares two instances of ChannelBinding. |
| public InetAddress | Returns: the acceptor's address. null is returned if the address has not been set.Get the acceptor's address for this channel binding. |
| public byte[] | Returns: the application data being used as part of the ChannelBinding.null is returned if no application data
has been specified for the channel binding.Get the application specified data for this channel binding. |
| public InetAddress | Returns: the initiator's address.null is returned if
the address has not been set.Get the initiator's address for this channel binding. |
| public int | Returns: a hashcode value for this ChannelBinding objectOverrides java. Returns a hashcode value for this ChannelBinding object. |
| acceptor | back to summary |
|---|---|
| private final InetAddress acceptor | |
| appData | back to summary |
|---|---|
| private byte[] appData | |
| initiator | back to summary |
|---|---|
| private final InetAddress initiator | |
| ChannelBinding | back to summary |
|---|---|
| public ChannelBinding(InetAddress initAddr, InetAddress acceptAddr, byte[] appData) Create a ChannelBinding object with user supplied address information
and data.
| |
| ChannelBinding | back to summary |
|---|---|
| public ChannelBinding(byte[] appData) Creates a ChannelBinding object without any addressing information.
| |
| equals | back to summary |
|---|---|
| public boolean equals(Object obj) Overrides java. Compares two instances of ChannelBinding. | |
| getAcceptorAddress | back to summary |
|---|---|
| public InetAddress getAcceptorAddress() Get the acceptor's address for this channel binding.
| |
| getApplicationData | back to summary |
|---|---|
| public byte[] getApplicationData() Get the application specified data for this channel binding.
| |
| getInitiatorAddress | back to summary |
|---|---|
| public InetAddress getInitiatorAddress() Get the initiator's address for this channel binding.
| |
| hashCode | back to summary |
|---|---|
| public int hashCode() Overrides java. Returns a hashcode value for this ChannelBinding object.
| |
