Package com.amazonaws.http.conn.ssl

Class MasterSecretValidators

java.lang.Object

com.amazonaws.http.conn.ssl.MasterSecretValidators

public class MasterSecretValidators
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static interface	MasterSecretValidators.MasterSecretValidator	Interface to validate the master secret of a SSL session
static class	MasterSecretValidators.NoOpMasterSecretValidator	Dummy implementation of MasterSecretValidators.MasterSecretValidator that always returns true.

Constructor Summary

Constructors

Constructor	Description
MasterSecretValidators()

Method Summary

Modifier and Type	Method	Description
static MasterSecretValidators.MasterSecretValidator	getMasterSecretValidator()	The implementation of MasterSecretValidators.MasterSecretValidator depends on the JVM version.
static MasterSecretValidators.MasterSecretValidator	getMasterSecretValidator(JavaVersionParser.JavaVersion javaVersion)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MasterSecretValidators

public MasterSecretValidators()

Method Detail

getMasterSecretValidator

public static MasterSecretValidators.MasterSecretValidator getMasterSecretValidator()

The implementation of MasterSecretValidators.MasterSecretValidator depends on the JVM version. Certain JVMs are affected by a serious bug that could allow a malicious MITM to negotiate a null master secret. Non-affected JVMs return a dummy implementation that always returns true

Returns:

The correct implementation of MasterSecretValidators.MasterSecretValidator

getMasterSecretValidator

public static MasterSecretValidators.MasterSecretValidator getMasterSecretValidator(JavaVersionParser.JavaVersion javaVersion)

Parameters:

javaVersion - Current Java version

Returns:

An appropriate MasterSecretValidators.MasterSecretValidator per the Java version in use