org.conscrypt:conscrypt-openjdk 2.5.2 · org.conscrypt.OkHostnameVerifier

Field Summary

Modifier and Type	Field and Description
private static final int	ALT_DNS_NAME
private static final int	ALT_IPA_NAME
public static final OkHostnameVerifier	INSTANCE
private final boolean	strictWildcardMode
private static final Pattern	VERIFY_AS_IP_ADDRESS Quick and dirty pattern to differentiate IP addresses from hostnames.

Constructor Summary

Access	Constructor and Description
private	OkHostnameVerifier(boolean strictWildcardMode)

Method Summary

Modifier and Type	Method and Description
public static List<String>	allSubjectAltNames(X509Certificate certificate)
private static List<String>	getSubjectAltNames(X509Certificate certificate, int type)
public static OkHostnameVerifier	strictInstance()
public boolean	verify(X509Certificate[] certs, String host, SSLSession session) Implements org.conscrypt.ConscryptHostnameVerifier.verify. Returns whether the given hostname is allowable given the peer's authentication information from the given session.
public boolean	verify(String host, X509Certificate certificate)
pack-priv static boolean	verifyAsIpAddress(String host)
private boolean	verifyHostName(String hostName, X509Certificate certificate) Returns true if `certificate` matches `hostName`.
private boolean	verifyHostName(String lower-case host name. hostName, String domain name pattern from certificate. May be a wildcard pattern such as `*.android.com`. pattern) Returns `true` iff `hostName` matches the domain name `pattern`.
private boolean	verifyIpAddress(String ipAddress, X509Certificate certificate) Returns true if `certificate` matches `ipAddress`.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

ALT_DNS_NAME	back to summary
private static final int ALT_DNS_NAME

ALT_IPA_NAME	back to summary
private static final int ALT_IPA_NAME

INSTANCE	back to summary
public static final OkHostnameVerifier INSTANCE

strictWildcardMode	back to summary
private final boolean strictWildcardMode

VERIFY_AS_IP_ADDRESS	back to summary
private static final Pattern VERIFY_AS_IP_ADDRESS Quick and dirty pattern to differentiate IP addresses from hostnames. This is an approximation of Android's private InetAddress#isNumeric API. This matches IPv6 addresses as a hex string containing at least one colon, and possibly including dots after the first colon. It matches IPv4 addresses as strings containing only decimal digits and dots. This pattern matches strings like "a:.23" and "54" that are neither IP addresses nor hostnames; they will be verified as IP addresses (which is a more strict verification).

VERIFY_AS_IP_ADDRESS

back to summary

private static final Pattern VERIFY_AS_IP_ADDRESS

Quick and dirty pattern to differentiate IP addresses from hostnames. This is an approximation of Android's private InetAddress#isNumeric API.

This matches IPv6 addresses as a hex string containing at least one colon, and possibly including dots after the first colon. It matches IPv4 addresses as strings containing only decimal digits and dots. This pattern matches strings like "a:.23" and "54" that are neither IP addresses nor hostnames; they will be verified as IP addresses (which is a more strict verification).

Constructor Detail

OkHostnameVerifier	back to summary
private OkHostnameVerifier(boolean strictWildcardMode)

Method Detail

allSubjectAltNames	back to summary
public static List<String> allSubjectAltNames(X509Certificate certificate)

getSubjectAltNames	back to summary
private static List<String> getSubjectAltNames(X509Certificate certificate, int type) Annotations @SuppressWarnings:MixedMutabilityReturnType

strictInstance	back to summary
public static OkHostnameVerifier strictInstance()

verify	back to summary
public boolean verify(X509Certificate[] certs, String host, SSLSession session) Implements org.conscrypt.ConscryptHostnameVerifier.verify. Doc from org.conscrypt.ConscryptHostnameVerifier.verify. Returns whether the given hostname is allowable given the peer's authentication information from the given session. Annotations @Override

verify

back to summary

public boolean verify(X509Certificate[] certs, String host, SSLSession session)

Implements org.conscrypt.ConscryptHostnameVerifier.verify.

Doc from org.conscrypt.ConscryptHostnameVerifier.verify.

Returns whether the given hostname is allowable given the peer's authentication information from the given session.

Annotations

@Override

verify	back to summary
public boolean verify(String host, X509Certificate certificate)

verifyAsIpAddress	back to summary
pack-priv static boolean verifyAsIpAddress(String host)

verifyHostName back to summary

verifyHostName	back to summary
private boolean verifyHostName(String hostName, X509Certificate certificate) Returns true if `certificate` matches `hostName`. Annotations @SuppressWarnings:UnusedVariable

private boolean verifyHostName(String hostName, X509Certificate certificate)

Returns true if certificate matches hostName.

Annotations

@SuppressWarnings:UnusedVariable

verifyHostName back to summary

verifyHostName	back to summary
private boolean verifyHostName(String hostName, String pattern) Returns `true` iff `hostName` matches the domain name `pattern`. Parameters hostName:String lower-case host name. pattern:String domain name pattern from certificate. May be a wildcard pattern such as `*.android.com`.

private boolean verifyHostName(String hostName, String pattern)

Returns true iff hostName matches the domain name pattern.

Parameters

hostName:String: lower-case host name.
pattern:String: domain name pattern from certificate. May be a wildcard pattern such as *.android.com.