Field Detail

• DNS_NAME_TYPE

  static final int DNS_NAME_TYPE

  DNS name type constant

  See Also:

  Constant Field Values

• IP_ADDRESS_TYPE

  static final int IP_ADDRESS_TYPE

  IP address type constant

  See Also:

  Constant Field Values

Constructor Detail

• DefaultHostnameVerifier

  public DefaultHostnameVerifier()

  Create hostname verifier with default settings.

• DefaultHostnameVerifier

  public DefaultHostnameVerifier(PublicSuffixMatcher publicSuffixMatcher)

  Create hostname verifier with public suffix matcher.

  Parameters:

  publicSuffixMatcher - public suffix matcher

Method Detail

• extractCN

  static String extractCN(String subjectPrincipal)
                   throws SSLException

  Extract the Common Name from the subject principal.

  Parameters:

  subjectPrincipal - the X500 principal name

  Returns:

  the CN, or null if not found

  Throws:

  SSLException - if the name is invalid

• extractSubjectAlts

  static List<String> extractSubjectAlts(X509Certificate cert,
                                         int subjectType)

  Extract subject alternative names from the certificate.

  Parameters:

  cert - the certificate

  subjectType - the subject type (DNS or IP)

  Returns:

  the list of subject alternative names, or null

• matchCN

  static void matchCN(String host,
                      String cn,
                      PublicSuffixMatcher publicSuffixMatcher)
               throws SSLException

  Match the common name against the hostname.

  Throws:

  SSLException

• matchDNSName

  static void matchDNSName(String host,
                           List<String> subjectAlts,
                           PublicSuffixMatcher publicSuffixMatcher)
                    throws SSLException

  Match the DNS name against subject alternative names.

  Throws:

  SSLException

• matchDomainRoot

  static boolean matchDomainRoot(String host,
                                 String domainRoot)

  Match the host against a domain root.

• matchIdentity

  static boolean matchIdentity(String host,
                               String identity)

  Match the host against the identity.

• matchIdentity

  static boolean matchIdentity(String host,
                               String identity,
                               PublicSuffixMatcher publicSuffixMatcher)

  Match the host against the identity with public suffix matching.

• matchIdentityStrict

  static boolean matchIdentityStrict(String host,
                                     String identity)

  Strictly match the host against the identity.

• matchIdentityStrict

  static boolean matchIdentityStrict(String host,
                                     String identity,
                                     PublicSuffixMatcher publicSuffixMatcher)

  Strictly match the host against the identity with public suffix matching.

• matchIPAddress

  static void matchIPAddress(String host,
                             List<String> subjectAlts)
                      throws SSLException

  Match the IP address against subject alternative names.

  Throws:

  SSLException

• matchIPv6Address

  static void matchIPv6Address(String host,
                               List<String> subjectAlts)
                        throws SSLException

  Match the IPv6 address against subject alternative names.

  Throws:

  SSLException

• normaliseAddress

  static String normaliseAddress(String hostname)

  Normalize an IPv6 or DNS name.

  Parameters:

  hostname - the hostname to normalize

  Returns:

  the normalized address

• verify

  public final boolean verify(String host,
                              SSLSession session)

  Specified by:

  verify in interface HostnameVerifier

• verify

  public final void verify(String host,
                           X509Certificate cert)
                    throws SSLException

  Verify the hostname against the certificate.

  Parameters:

  host - the hostname

  cert - the certificate

  Throws:

  SSLException - if verification fails