Package com.neovisionaries.ws.client

Class OkHostnameVerifier

java.lang.Object

com.neovisionaries.ws.client.OkHostnameVerifier

All Implemented Interfaces:

javax.net.ssl.HostnameVerifier

final class OkHostnameVerifier
extends java.lang.Object
implements javax.net.ssl.HostnameVerifier

A HostnameVerifier consistent with RFC 2818.

Field Summary

Fields

Modifier and Type	Field	Description
private static int	ALT_DNS_NAME
private static int	ALT_IPA_NAME
static OkHostnameVerifier	INSTANCE
private static java.util.regex.Pattern	VERIFY_AS_IP_ADDRESS	Quick and dirty pattern to differentiate IP addresses from hostnames.

Constructor Summary

Constructors

Modifier	Constructor	Description
private	OkHostnameVerifier()

Method Summary

Modifier and Type	Method	Description
static java.util.List<java.lang.String>	allSubjectAltNames(java.security.cert.X509Certificate certificate)
private static java.util.List<java.lang.String>	getSubjectAltNames(java.security.cert.X509Certificate certificate, int type)
boolean	verify(java.lang.String host, java.security.cert.X509Certificate certificate)
boolean	verify(java.lang.String host, javax.net.ssl.SSLSession session)
(package private) static boolean	verifyAsIpAddress(java.lang.String host)
private boolean	verifyHostName(java.lang.String hostName, java.lang.String pattern)	Returns true iff hostName matches the domain name pattern.
private boolean	verifyHostName(java.lang.String hostName, java.security.cert.X509Certificate certificate)	Returns true if certificate matches hostName.
private boolean	verifyIpAddress(java.lang.String ipAddress, java.security.cert.X509Certificate certificate)	Returns true if certificate matches ipAddress.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

INSTANCE

public static final OkHostnameVerifier INSTANCE

VERIFY_AS_IP_ADDRESS

private static final java.util.regex.Pattern VERIFY_AS_IP_ADDRESS

Quick and dirty pattern to differentiate IP addresses from hostnames. This is an approximation of Android's private InetAddress#isNumeric API.

This matches IPv6 addresses as a hex string containing at least one colon, and possibly including dots after the first colon. It matches IPv4 addresses as strings containing only decimal digits and dots. This pattern matches strings like "a:.23" and "54" that are neither IP addresses nor hostnames; they will be verified as IP addresses (which is a more strict verification).

ALT_DNS_NAME

private static final int ALT_DNS_NAME

See Also:

Constant Field Values

ALT_IPA_NAME

private static final int ALT_IPA_NAME

See Also:

Constant Field Values

Constructor Detail

OkHostnameVerifier

private OkHostnameVerifier()

Method Detail

verify

public boolean verify(java.lang.String host,
                      javax.net.ssl.SSLSession session)

Specified by:

verify in interface javax.net.ssl.HostnameVerifier

verify

public boolean verify(java.lang.String host,
                      java.security.cert.X509Certificate certificate)

verifyAsIpAddress

static boolean verifyAsIpAddress(java.lang.String host)

verifyIpAddress

private boolean verifyIpAddress(java.lang.String ipAddress,
                                java.security.cert.X509Certificate certificate)

Returns true if certificate matches ipAddress.

verifyHostName

private boolean verifyHostName(java.lang.String hostName,
                               java.security.cert.X509Certificate certificate)

Returns true if certificate matches hostName.

allSubjectAltNames

public static java.util.List<java.lang.String> allSubjectAltNames(java.security.cert.X509Certificate certificate)

getSubjectAltNames

private static java.util.List<java.lang.String> getSubjectAltNames(java.security.cert.X509Certificate certificate,
                                                                   int type)

verifyHostName

private boolean verifyHostName(java.lang.String hostName,
                               java.lang.String pattern)

Returns true iff hostName matches the domain name pattern.

Parameters:

hostName - lower-case host name.

pattern - domain name pattern from certificate. May be a wildcard pattern such as *.android.com.