Package org.conscrypt.ct

Class Verifier

java.lang.Object

org.conscrypt.ct.Verifier

@Internal
public class Verifier
extends Object

Constructor Summary

Constructors

Constructor	Description
Verifier(LogStore store)

Method Summary

Modifier and Type	Method	Description
VerificationResult	verifySignedCertificateTimestamps(List<X509Certificate> chain, byte[] tlsData, byte[] ocspData)
VerificationResult	verifySignedCertificateTimestamps(OpenSSLX509Certificate[] chain, byte[] tlsData, byte[] ocspData)	Verify a certificate chain for transparency.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Verifier

public Verifier(LogStore store)

Method Details

verifySignedCertificateTimestamps

public VerificationResult verifySignedCertificateTimestamps(List<X509Certificate> chain,
 byte[] tlsData,
 byte[] ocspData)
                                                     throws CertificateEncodingException

Throws:

CertificateEncodingException

verifySignedCertificateTimestamps

public VerificationResult verifySignedCertificateTimestamps(OpenSSLX509Certificate[] chain,
 byte[] tlsData,
 byte[] ocspData)
                                                     throws CertificateEncodingException

Verify a certificate chain for transparency. Signed timestamps are extracted from the leaf certificate, TLS extension, and stapled ocsp response, and verified against the list of known logs.

Throws:

IllegalArgumentException - if the chain is empty

CertificateEncodingException