com.sshtools.common.knownhosts

Class X509HostKeyVerification

java.lang.Object

com.sshtools.common.knownhosts.X509HostKeyVerification

All Implemented Interfaces:

HostKeyVerification

public class X509HostKeyVerification
extends java.lang.Object
implements HostKeyVerification

This is a HostKeyVerification implementation that will validate an X509 public key.

Author:

lee

Constructor Summary

Constructors

Constructor and Description
X509HostKeyVerification(boolean enableRevocation) This creates a verification instance that will check the validation of a certificate against the Java runtime's trusted CA certs keystore.
X509HostKeyVerification(java.util.Set<java.security.cert.TrustAnchor> trustAnchors, boolean enableRevocation) This creates a verification instance against a specific set of TrustAnchors

Method Summary

Modifier and Type	Method and Description
boolean	verifyHost(java.lang.String host, SshPublicKey pk) Verify that the public key is acceptable for the host.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509HostKeyVerification

public X509HostKeyVerification(boolean enableRevocation)
                        throws java.io.IOException,
                               java.security.KeyStoreException,
                               java.security.NoSuchAlgorithmException,
                               java.security.cert.CertificateException,
                               java.security.InvalidAlgorithmParameterException

This creates a verification instance that will check the validation of a certificate against the Java runtime's trusted CA certs keystore.

Parameters:

enableRevocation -

Throws:

java.io.IOException

java.security.KeyStoreException

java.security.NoSuchAlgorithmException

java.security.cert.CertificateException

java.security.InvalidAlgorithmParameterException

X509HostKeyVerification

public X509HostKeyVerification(java.util.Set<java.security.cert.TrustAnchor> trustAnchors,
                               boolean enableRevocation)
                        throws java.security.InvalidAlgorithmParameterException

This creates a verification instance against a specific set of TrustAnchors

Parameters:

trustAnchors -

enableRevocation -

Throws:

java.security.InvalidAlgorithmParameterException

Method Detail

verifyHost

public boolean verifyHost(java.lang.String host,
                          SshPublicKey pk)
                   throws SshException

Description copied from interface: HostKeyVerification

Verify that the public key is acceptable for the host.

Specified by:

verifyHost in interface HostKeyVerification

Parameters:

host - the name of the connected host

pk - the public key supplied by the host

Returns:

true if the host key is acceptable otherwise false

Throws:

SshException