public abstract class CertificateChainCleaner extends Object
chain[0], each
certificate is signed by the certificate that follows, and the last certificate is a trusted CA
certificate.
Use of the chain cleaner is necessary to omit unexpected certificates that aren't relevant to the TLS handshake and to extract the trusted CA certificate for the benefit of certificate pinning.
| 构造器和说明 |
|---|
CertificateChainCleaner() |
| 限定符和类型 | 方法和说明 |
|---|---|
abstract List<Certificate> |
clean(List<Certificate> chain,
String hostname) |
static CertificateChainCleaner |
get(X509Certificate... caCerts) |
static CertificateChainCleaner |
get(X509TrustManager trustManager) |
public static CertificateChainCleaner get(X509TrustManager trustManager)
public static CertificateChainCleaner get(X509Certificate... caCerts)
public abstract List<Certificate> clean(List<Certificate> chain, String hostname) throws SSLPeerUnverifiedException
Copyright © 2025. All rights reserved.