blob: 115e972fa2072c4b3fbb5688dafe1370ffa4d959 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
/*
* Copyright (C) 2012 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package android.net.http;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.security.KeyManagementException;
import java.util.List;
import javax.net.ssl.X509TrustManager;
import org.apache.harmony.xnet.provider.jsse.TrustManagerImpl;
/**
* X509TrustManager wrapper exposing Android-added features.
*
* <p> The checkServerTrusted method allows callers to perform additional
* verification of certificate chains after they have been successfully
* verified by the platform.</p>
*/
public class X509TrustManagerExtensions {
TrustManagerImpl mDelegate;
/**
* Constructs a new X509TrustManagerExtensions wrapper.
*
* @param tm A {@link X509TrustManager} as returned by TrustManagerFactory.getInstance();
* @throws IllegalArgumentException If tm is an unsupported TrustManager type.
*/
public X509TrustManagerExtensions(X509TrustManager tm) throws IllegalArgumentException {
if (tm instanceof TrustManagerImpl) {
mDelegate = (TrustManagerImpl) tm;
} else {
throw new IllegalArgumentException("tm is not a supported type of X509TrustManager");
}
}
/**
* Verifies the given certificate chain.
*
* <p>See {@link X509TrustManager#checkServerTrusted(X509Certificate[], String)} for a
* description of the chain and authType parameters. The final parameter, host, should be the
* hostname of the server.</p>
*
* @throws CertificateException if the chain does not verify correctly.
* @return the properly ordered chain used for verification as a list of X509Certificates.
*/
public List<X509Certificate> checkServerTrusted(X509Certificate[] chain, String authType,
String host) throws CertificateException {
return mDelegate.checkServerTrusted(chain, authType, host);
}
}
|
