org.apache.hc.core5.ssl

接口 TrustStrategy

所有已知实现类:

TrustAllStrategy, TrustSelfSignedStrategy

public interface TrustStrategy

A strategy to establish trustworthiness of certificates without consulting the trust manager configured in the actual SSL context. This interface can be used to override the standard JSSE certificate verification process.

从以下版本开始:

4.4

方法概要

限定符和类型	方法和说明
boolean	isTrusted(X509Certificate[] chain, String authType) Determines whether the certificate chain can be trusted without consulting the trust manager configured in the actual SSL context.

方法详细资料

isTrusted

boolean isTrusted(X509Certificate[] chain,
                  String authType)
           throws CertificateException

Determines whether the certificate chain can be trusted without consulting the trust manager configured in the actual SSL context. This method can be used to override the standard JSSE certificate verification process.

Please note that, if this method returns false, the trust manager configured in the actual SSL context can still clear the certificate as trusted.

参数:

chain - the peer certificate chain

authType - the authentication type based on the client certificate

返回:

true if the certificate can be trusted without verification by the trust manager, false otherwise.

抛出:

CertificateException - thrown if the certificate is not trusted or invalid.