A CertStore that retrieves Certificates or CRLs from a URI, for example, as specified in an X.509 AuthorityInformationAccess or CRLDistributionPoint extension.

For CRLs, this implementation retrieves a single DER encoded CRL per URI. For Certificates, this implementation retrieves a single DER encoded CRL or a collection of Certificates encoded as a PKCS#7 "certs-only" CMS message.

This CertStore also implements Certificate/CRL caching. Currently, the cache is shared between all applications in the VM and uses a hardcoded policy. The cache has a maximum size of 185 entries, which are held by SoftReferences. A request will be satisfied from the cache if we last checked for an update within CHECK_INTERVAL (last 30 seconds). Otherwise, we open an URLConnection to download the Certificate(s)/CRL using an If-Modified-Since request (HTTP) if possible. Note that both positive and negative responses are cached, i.e. if we are unable to open the connection or the Certificate(s)/CRL cannot be parsed, we remember this result and additional calls during the CHECK_INTERVAL period do not try to open another connection.

The URICertStore is not currently a standard CertStore type. We should consider adding a standard "URI" CertStore type.

Nested and Inner Type Summary

Modifier and Type	Class and Description
private static enum	URICertStore.AllowedScheme Enumeration for the allowed schemes we support when following a URI from an authorityInfoAccess extension on a certificate.
pack-priv static class	URICertStore.HttpFtpRuleMatcher
pack-priv static class	URICertStore.LdapRuleMatcher
private static class	URICertStore.SizeLimitedInputStream Stream wrapper used when an InputStream passed into a CertificateFactory needs to be size limited.
private static class	URICertStore.UCS This class allows the URICertStore to be accessed as a CertStore.
pack-priv abstract static class	URICertStore.URIRuleMatcher URIRuleMatcher - abstract base class for the rule sets used for various URI schemes.

Field Summary

Modifier and Type	Field and Description
private static final boolean	CA_ISS_ALLOW_ANY
private static Set<URI>	CA_ISS_URI_FILTERS
private static final int	CACERT_CONNECT_TIMEOUT Integer value indicating the connect timeout, in milliseconds, to be used for the CA certificate download.
private static final int	CACERT_READ_TIMEOUT Integer value indicating the read timeout, in milliseconds, to be used for the CA certificate download.
private static final int	CACHE_SIZE
private Collection<X509Certificate>	certs
private static final Cache<URICertStoreParameters, CertStore>	certStoreCache Returns a URI CertStore.
private static final int	CHECK_INTERVAL
private X509CRL	crl
private static final int	CRL_CONNECT_TIMEOUT Integer value indicating the connect timeout, in milliseconds, to be used for the CRL download.
private static final int	CRL_READ_TIMEOUT Integer value indicating the read timeout, in milliseconds, to be used for the CRL download.
private static final Debug	debug
private static final int	DEFAULT_CACERT_CONNECT_TIMEOUT
private static final int	DEFAULT_CACERT_READ_TIMEOUT
private static final int	DEFAULT_CRL_CONNECT_TIMEOUT
private static final int	DEFAULT_CRL_READ_TIMEOUT
private final CertificateFactory	factory
private long	lastChecked
private long	lastModified
private boolean	ldap
private CertStore	ldapCertStore
private static final long	MAX_CRL_DOWNLOAD_SIZE Maximum size for a CRL downloaded through a URICertStore in bytes.
private final URI	uri

Constructor Summary

Access	Constructor and Description
pack-priv	URICertStore(CertStoreParameters specifying the URI params) Creates a URICertStore.

Method Summary

Modifier and Type	Method and Description
private static void	addCaIssUriFilters(String[] array containing String URI filters aiaUriStrs) Populate the filter collection from the list of AIA CA issuer URIs found in the `com.sun.security.allowedAIALocations` security or system property.
public synchronized Collection<X509Certificate>	Returns: a `Collection` of `X509Certificate`s that match the specified selector engineGetCertificates(CertSelector a `CertSelector` used to select which `X509Certificate`s should be returned. Specify `null` to return all `X509Certificate`s. selector) Implements abstract java.security.cert.CertStoreSpi.engineGetCertificates. Returns a `Collection` of `X509Certificate`s that match the specified selector.
public synchronized Collection<X509CRL>	Returns: A `Collection` of `X509CRL`s that match the specified selector engineGetCRLs(CRLSelector A `CRLSelector` used to select which `X509CRL`s should be returned. Specify `null` to return all `X509CRL`s. selector) Implements abstract java.security.cert.CertStoreSpi.engineGetCRLs. Returns a `Collection` of `X509CRL`s that match the specified selector.
pack-priv static synchronized CertStore	getInstance(URICertStoreParameters params)
pack-priv static CertStore	getInstance(AccessDescription ad) Creates a CertStore from information included in the AccessDescription object of a certificate's Authority Information Access Extension.
private static Collection<X509Certificate>	getMatchingCerts(Collection<X509Certificate> certs, CertSelector selector) Iterates over the specified Collection of X509Certificates and returns only those that match the criteria specified in the CertSelector.
private static Collection<X509CRL>	getMatchingCRLs(X509CRL crl, CRLSelector selector) Checks if the specified X509CRL matches the criteria specified in the CRLSelector.
private static int	initializeTimeout(String prop, int def) Initialize the timeout length by getting the specified CRL timeout system property.

Field Detail

CA_ISS_ALLOW_ANY	back to summary
private static final boolean CA_ISS_ALLOW_ANY

CA_ISS_URI_FILTERS	back to summary
private static Set<URI> CA_ISS_URI_FILTERS

CACERT_CONNECT_TIMEOUT	back to summary
private static final int CACERT_CONNECT_TIMEOUT Integer value indicating the connect timeout, in milliseconds, to be used for the CA certificate download. A timeout of zero is interpreted as an infinite timeout.

CACERT_READ_TIMEOUT	back to summary
private static final int CACERT_READ_TIMEOUT Integer value indicating the read timeout, in milliseconds, to be used for the CA certificate download. A timeout of zero is interpreted as an infinite timeout.

CACHE_SIZE	back to summary
private static final int CACHE_SIZE

certs	back to summary
private Collection<X509Certificate> certs

certStoreCache	back to summary
private static final Cache<URICertStoreParameters, CertStore> certStoreCache Returns a URI CertStore. This method consults a cache of CertStores (shared per JVM) using the URI as a key.

CHECK_INTERVAL	back to summary
private static final int CHECK_INTERVAL

crl	back to summary
private X509CRL crl

CRL_CONNECT_TIMEOUT	back to summary
private static final int CRL_CONNECT_TIMEOUT Integer value indicating the connect timeout, in milliseconds, to be used for the CRL download. A timeout of zero is interpreted as an infinite timeout.

CRL_READ_TIMEOUT	back to summary
private static final int CRL_READ_TIMEOUT Integer value indicating the read timeout, in milliseconds, to be used for the CRL download. A timeout of zero is interpreted as an infinite timeout.

debug	back to summary
private static final Debug debug

DEFAULT_CACERT_CONNECT_TIMEOUT	back to summary
private static final int DEFAULT_CACERT_CONNECT_TIMEOUT

DEFAULT_CACERT_READ_TIMEOUT	back to summary
private static final int DEFAULT_CACERT_READ_TIMEOUT

DEFAULT_CRL_CONNECT_TIMEOUT	back to summary
private static final int DEFAULT_CRL_CONNECT_TIMEOUT

DEFAULT_CRL_READ_TIMEOUT	back to summary
private static final int DEFAULT_CRL_READ_TIMEOUT

factory	back to summary
private final CertificateFactory factory

lastChecked	back to summary
private long lastChecked

lastModified	back to summary
private long lastModified

ldap	back to summary
private boolean ldap

ldapCertStore	back to summary
private CertStore ldapCertStore

MAX_CRL_DOWNLOAD_SIZE	back to summary
private static final long MAX_CRL_DOWNLOAD_SIZE Maximum size for a CRL downloaded through a URICertStore in bytes. This can be controlled by the com.sun.security.crl.maxSize Security or System property. The System property, if set, overrides the Security property. The default size is 20MiB.

uri	back to summary
private final URI uri

Constructor Detail

URICertStore	back to summary
pack-priv URICertStore(CertStoreParameters params) throws InvalidAlgorithmParameterException, NoSuchAlgorithmException Creates a URICertStore. Parameters params:CertStoreParameters specifying the URI

URICertStore

back to summary

pack-priv URICertStore(CertStoreParameters params) throws InvalidAlgorithmParameterException, NoSuchAlgorithmException

Creates a URICertStore.

Parameters

params:CertStoreParameters: specifying the URI

Method Detail

addCaIssUriFilters back to summary

addCaIssUriFilters	back to summary
private static void addCaIssUriFilters(String[] aiaUriStrs) Populate the filter collection from the list of AIA CA issuer URIs found in the `com.sun.security.allowedAIALocations` security or system property. Parameters aiaUriStrs:String[] array containing String URI filters

private static void addCaIssUriFilters(String[] aiaUriStrs)

Populate the filter collection from the list of AIA CA issuer URIs found in the com.sun.security.allowedAIALocations security or system property.

Parameters

aiaUriStrs:String[]: array containing String URI filters

engineGetCertificates back to summary

engineGetCertificates	back to summary
public synchronized Collection<X509Certificate> engineGetCertificates(CertSelector selector) throws CertStoreException Implements abstract java.security.cert.CertStoreSpi.engineGetCertificates. Returns a `Collection` of `X509Certificate`s that match the specified selector. If no `X509Certificate`s match the selector, an empty `Collection` will be returned. Parameters selector:CertSelector a `CertSelector` used to select which `X509Certificate`s should be returned. Specify `null` to return all `X509Certificate`s. Returns:Collection<X509Certificate> a `Collection` of `X509Certificate`s that match the specified selector Annotations @Override @SuppressWarnings:unchecked Exceptions CertStoreException: if an exception occurs

public synchronized Collection<X509Certificate> engineGetCertificates(CertSelector selector) throws CertStoreException

Implements abstract java.security.cert.CertStoreSpi.engineGetCertificates.

Returns a Collection of X509Certificates that match the specified selector. If no X509Certificates match the selector, an empty Collection will be returned.

Parameters

selector:CertSelector: a CertSelector used to select which X509Certificates should be returned. Specify null to return all X509Certificates.

Returns:Collection<X509Certificate>

a Collection of X509Certificates that match the specified selector

Annotations

@Override
@SuppressWarnings:unchecked

Exceptions

CertStoreException:: if an exception occurs

engineGetCRLs back to summary

engineGetCRLs	back to summary
public synchronized Collection<X509CRL> engineGetCRLs(CRLSelector selector) throws CertStoreException Implements abstract java.security.cert.CertStoreSpi.engineGetCRLs. Returns a `Collection` of `X509CRL`s that match the specified selector. If no `X509CRL`s match the selector, an empty `Collection` will be returned. Parameters selector:CRLSelector A `CRLSelector` used to select which `X509CRL`s should be returned. Specify `null` to return all `X509CRL`s. Returns:Collection<X509CRL> A `Collection` of `X509CRL`s that match the specified selector Annotations @Override @SuppressWarnings:unchecked Exceptions CertStoreException: if an exception occurs

public synchronized Collection<X509CRL> engineGetCRLs(CRLSelector selector) throws CertStoreException

Implements abstract java.security.cert.CertStoreSpi.engineGetCRLs.

Returns a Collection of X509CRLs that match the specified selector. If no X509CRLs match the selector, an empty Collection will be returned.

Parameters

selector:CRLSelector: A CRLSelector used to select which X509CRLs should be returned. Specify null to return all X509CRLs.

Returns:Collection<X509CRL>

A Collection of X509CRLs that match the specified selector

Annotations

@Override
@SuppressWarnings:unchecked

Exceptions

CertStoreException:: if an exception occurs

getInstance	back to summary
pack-priv static synchronized CertStore getInstance(URICertStoreParameters params) throws NoSuchAlgorithmException, InvalidAlgorithmParameterException

getInstance	back to summary
pack-priv static CertStore getInstance(AccessDescription ad) Creates a CertStore from information included in the AccessDescription object of a certificate's Authority Information Access Extension.

getMatchingCerts	back to summary
private static Collection<X509Certificate> getMatchingCerts(Collection<X509Certificate> certs, CertSelector selector) Iterates over the specified Collection of X509Certificates and returns only those that match the criteria specified in the CertSelector.

getMatchingCRLs	back to summary
private static Collection<X509CRL> getMatchingCRLs(X509CRL crl, CRLSelector selector) Checks if the specified X509CRL matches the criteria specified in the CRLSelector.

initializeTimeout	back to summary
private static int initializeTimeout(String prop, int def) Initialize the timeout length by getting the specified CRL timeout system property. If the property has not been set, or if its value is negative, set the timeout length to the specified default.

sun.security.provider.certpath back to summary

private final Enum URICertStore.AllowedScheme

Class Inheritance

extends Enum<URICertStore.AllowedScheme>

java.lang.Object
java.lang.Enum
sun.security.provider.certpath.URICertStore.AllowedScheme

Enumeration for the allowed schemes we support when following a URI from an authorityInfoAccess extension on a certificate.

Field Summary

Modifier and Type	Field and Description
public static final URICertStore.AllowedScheme	FTP
public static final URICertStore.AllowedScheme	HTTP
public static final URICertStore.AllowedScheme	HTTPS
public static final URICertStore.AllowedScheme	LDAP
public static final URICertStore.AllowedScheme	LDAPS
pack-priv final URICertStore.URIRuleMatcher	ruleMatcher

Constructor Summary

Access	Constructor and Description
private	AllowedScheme(URICertStore.URIRuleMatcher matcher)

Method Summary

Modifier and Type	Method and Description
pack-priv static URICertStore.AllowedScheme	Returns: the `AllowedScheme` that corresponds to the `name` provided, or null if there is no match. nameOf(String the scheme name to be matched name) Return an `AllowedScheme` based on a case-insensitive match
public static URICertStore.AllowedScheme	valueOf(String name)
public static URICertStore.AllowedScheme[]	values()

Inherited from java.lang.Enum:: clone compareTo describeConstable equals finalize getDeclaringClass hashCode name ordinal toString valueOf

Field Detail

FTP	back to summary
public static final URICertStore.AllowedScheme FTP

HTTP	back to summary
public static final URICertStore.AllowedScheme HTTP

HTTPS	back to summary
public static final URICertStore.AllowedScheme HTTPS

LDAP	back to summary
public static final URICertStore.AllowedScheme LDAP

LDAPS	back to summary
public static final URICertStore.AllowedScheme LDAPS

ruleMatcher	back to summary
pack-priv final URICertStore.URIRuleMatcher ruleMatcher

Constructor Detail

AllowedScheme	back to summary
private AllowedScheme(URICertStore.URIRuleMatcher matcher)

Method Detail

nameOf back to summary

nameOf	back to summary
pack-priv static URICertStore.AllowedScheme nameOf(String name) Return an `AllowedScheme` based on a case-insensitive match Parameters name:String the scheme name to be matched Returns:URICertStore.AllowedScheme the `AllowedScheme` that corresponds to the `name` provided, or null if there is no match.

pack-priv static URICertStore.AllowedScheme nameOf(String name)

Return an AllowedScheme based on a case-insensitive match

Parameters

name:String: the scheme name to be matched

Returns:URICertStore.AllowedScheme

the AllowedScheme that corresponds to the name provided, or null if there is no match.

valueOf	back to summary
public static URICertStore.AllowedScheme valueOf(String name)

values	back to summary
public static URICertStore.AllowedScheme[] values()

sun.security.provider.certpath back to summary

pack-priv Class URICertStore.HttpFtpRuleMatcher

Class Inheritance

extends URIRuleMatcher

java.lang.Object
sun.security.provider.certpath.URICertStore.URIRuleMatcher
sun.security.provider.certpath.URICertStore.HttpFtpRuleMatcher

Field Summary

Modifier and Type	Field and Description
pack-priv static final URICertStore.HttpFtpRuleMatcher	FTP
pack-priv static final URICertStore.HttpFtpRuleMatcher	HTTP
pack-priv static final URICertStore.HttpFtpRuleMatcher	HTTPS

Inherited from sun.security.provider.certpath.URICertStore.URIRuleMatcher:: wellKnownPort

Constructor Summary

Access	Constructor and Description
private	HttpFtpRuleMatcher(int port)

Method Summary

Modifier and Type	Method and Description
private static boolean	Returns: true if `candidate` is a child path of `base`, false otherwise. isRootOf(URI the URI that contains the root path base, URI the URI that contains the path being evaluated candidate) Performs a hierarchical containment check, ensuring that the base URI's path is a root component of the candidate path.
pack-priv boolean	matchRule(URI filterRule, URI caIssuer) Implements abstract sun.security.provider.certpath.URICertStore.URIRuleMatcher.matchRule. Attempt to match an AIA URI against a specific filter rule.

Inherited from sun.security.provider.certpath.URICertStore.URIRuleMatcher:: schemeHostPortCheck

Field Detail

FTP	back to summary
pack-priv static final URICertStore.HttpFtpRuleMatcher FTP

HTTP	back to summary
pack-priv static final URICertStore.HttpFtpRuleMatcher HTTP

HTTPS	back to summary
pack-priv static final URICertStore.HttpFtpRuleMatcher HTTPS

Constructor Detail

HttpFtpRuleMatcher	back to summary
private HttpFtpRuleMatcher(int port)

Method Detail

isRootOf back to summary

private static boolean isRootOf(URI base, URI candidate)

Performs a hierarchical containment check, ensuring that the base URI's path is a root component of the candidate path. The path comparison is case-sensitive. If the base path ends in a slash (/) then all candidate paths that begin with the base path are allowed. If it does not end in a slash, then it is assumed that the leaf node in the base path is a file component and both paths must match exactly.

Parameters

base:URI: the URI that contains the root path
candidate:URI: the URI that contains the path being evaluated

Returns:boolean

true if candidate is a child path of base, false otherwise.

matchRule

back to summary

pack-priv boolean matchRule(URI filterRule, URI caIssuer)

Implements abstract sun.security.provider.certpath.URICertStore.URIRuleMatcher.matchRule.

Doc from sun.security.provider.certpath.URICertStore.URIRuleMatcher.matchRule.

Attempt to match an AIA URI against a specific filter rule. The specific rules to apply are implementation dependent.

Annotations

@Override

sun.security.provider.certpath back to summary

pack-priv Class URICertStore.LdapRuleMatcher

Class Inheritance

extends URIRuleMatcher

java.lang.Object
sun.security.provider.certpath.URICertStore.URIRuleMatcher
sun.security.provider.certpath.URICertStore.LdapRuleMatcher

Field Summary

Modifier and Type	Field and Description
pack-priv static final URICertStore.LdapRuleMatcher	LDAP
pack-priv static final URICertStore.LdapRuleMatcher	LDAPS

Inherited from sun.security.provider.certpath.URICertStore.URIRuleMatcher:: wellKnownPort

Constructor Summary

Access	Constructor and Description
private	LdapRuleMatcher(int port)

Method Summary

Modifier and Type	Method and Description
pack-priv boolean	matchRule(URI filterRule, URI caIssuer) Implements abstract sun.security.provider.certpath.URICertStore.URIRuleMatcher.matchRule. Attempt to match an AIA URI against a specific filter rule.

Inherited from sun.security.provider.certpath.URICertStore.URIRuleMatcher:: schemeHostPortCheck

Field Detail

LDAP	back to summary
pack-priv static final URICertStore.LdapRuleMatcher LDAP

LDAPS	back to summary
pack-priv static final URICertStore.LdapRuleMatcher LDAPS

Constructor Detail

LdapRuleMatcher	back to summary
private LdapRuleMatcher(int port)

Method Detail

matchRule

back to summary

pack-priv boolean matchRule(URI filterRule, URI caIssuer)

Implements abstract sun.security.provider.certpath.URICertStore.URIRuleMatcher.matchRule.

Doc from sun.security.provider.certpath.URICertStore.URIRuleMatcher.matchRule.

Attempt to match an AIA URI against a specific filter rule. The specific rules to apply are implementation dependent.

Annotations

@Override

sun.security.provider.certpath back to summary

private Class URICertStore.SizeLimitedInputStream

Class Inheritance

extends FilterInputStream

java.lang.Object
java.io.InputStream
java.io.FilterInputStream
sun.security.provider.certpath.URICertStore.SizeLimitedInputStream

Stream wrapper used when an InputStream passed into a CertificateFactory needs to be size limited. It will throw IllegalArgumentException when the downloaded resource via the underlying stream exceeds the maximum limit.

Field Summary

Modifier and Type	Field and Description
private long	bytesRead
private final long	maxBytes

Inherited from java.io.FilterInputStream:: in

Constructor Summary

Access	Constructor and Description
private	SizeLimitedInputStream(InputStream in, long maxBytes)

Method Summary

Modifier and Type	Method and Description
public int	read() Overrides java.io.FilterInputStream.read. Reads the next byte of data from the input stream.
public int	read(byte[] b, int off, int len) Overrides java.io.FilterInputStream.read. Reads up to `len` bytes of data from this input stream into an array of bytes.

Inherited from java.io.FilterInputStream:: available close mark markSupported read reset skip

Field Detail

bytesRead	back to summary
private long bytesRead

maxBytes	back to summary
private final long maxBytes

Constructor Detail

SizeLimitedInputStream	back to summary
private SizeLimitedInputStream(InputStream in, long maxBytes)

Method Detail

read back to summary

public int read() throws IOException

Overrides java.io.FilterInputStream.read.

Doc from java.io.FilterInputStream.read.

Reads the next byte of data from the input stream. The value byte is returned as an int in the range 0 to 255. If no byte is available because the end of the stream has been reached, the value -1 is returned. This method blocks until input data is available, the end of the stream is detected, or an exception is thrown.

Annotations

@Override

Exceptions

IOException:: if an I/O error occurs.

read back to summary

public int read(byte[] b, int off, int len) throws IOException

Overrides java.io.FilterInputStream.read.

Doc from java.io.FilterInputStream.read.

Reads up to len bytes of data from this input stream into an array of bytes. If len is not zero, the method blocks until some input is available; otherwise, no bytes are read and 0 is returned.

Annotations

@Override

Exceptions

IOException:: if an I/O error occurs.

sun.security.provider.certpath back to summary

private Class URICertStore.UCS

Class Inheritance

extends CertStore

java.lang.Object
java.security.cert.CertStore
sun.security.provider.certpath.URICertStore.UCS

This class allows the URICertStore to be accessed as a CertStore.

Constructor Summary

Access	Constructor and Description
protected	UCS(CertStoreSpi spi, Provider p, String type, CertStoreParameters params)

Method Summary

Inherited from java.security.cert.CertStore:: getCertificates getCertStoreParameters getCRLs getDefaultType getInstance getInstance getInstance getProvider getType

Constructor Detail

UCS	back to summary
protected UCS(CertStoreSpi spi, Provider p, String type, CertStoreParameters params)

sun.security.provider.certpath back to summary

pack-priv abstract Class URICertStore.URIRuleMatcher

Class Inheritance

extends Object

java.lang.Object
sun.security.provider.certpath.URICertStore.URIRuleMatcher

Known Direct Subclasses

sun.security.provider.certpath.URICertStore.HttpFtpRuleMatcher, sun.security.provider.certpath.URICertStore.LdapRuleMatcher

URIRuleMatcher - abstract base class for the rule sets used for various URI schemes.

Field Summary

Modifier and Type	Field and Description
protected final int	wellKnownPort

Constructor Summary

Access	Constructor and Description
protected	URIRuleMatcher(int port)

Method Summary

Modifier and Type

Method and Description

pack-priv abstract boolean

Returns:

true if all matching rules pass, false if any fail.

matchRule(URI

the filter rule to match against

filterRule, URI

the AIA URI being compared

caIssuer)

Attempt to match an AIA URI against a specific filter rule.

pack-priv boolean

Returns:

true if the scheme, host and port numbers match, false if any of the components do not match. If a port number is omitted in either the filter rule or AIA URI, the well-known port for that scheme is used in the comparison.

schemeHostPortCheck(URI

the filter rule to match against

filterRule, URI

the AIA URI being compared

caIssuer)

Attempt to match the scheme, host and port between a filter rule URI and a URI coming from an AIA extension.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

wellKnownPort	back to summary
protected final int wellKnownPort

Constructor Detail

URIRuleMatcher	back to summary
protected URIRuleMatcher(int port)

Method Detail

matchRule

back to summary

pack-priv abstract boolean matchRule(URI filterRule, URI caIssuer)

Attempt to match an AIA URI against a specific filter rule. The specific rules to apply are implementation dependent.

Parameters

filterRule:URI: the filter rule to match against
caIssuer:URI: the AIA URI being compared

Returns:boolean

true if all matching rules pass, false if any fail.

schemeHostPortCheck

back to summary

pack-priv boolean schemeHostPortCheck(URI filterRule, URI caIssuer)

Attempt to match the scheme, host and port between a filter rule URI and a URI coming from an AIA extension.

Parameters

filterRule:URI: the filter rule to match against
caIssuer:URI: the AIA URI being compared

Returns:boolean