com.sleepycat.je.rep.utilint.net

Class SSLMirrorHostVerifier

java.lang.Object

com.sleepycat.je.rep.utilint.net.SSLMirrorHostVerifier

All Implemented Interfaces:

HostnameVerifier

public class SSLMirrorHostVerifier
extends Object
implements HostnameVerifier

This is an implementation of HostnameVerifier, which is intended to verify that the host to which we are connected is valid. This implementation authenticates based on the Distinguished Name (DN) in the certificate of the server matching the DN in the certificate that we would use when operating as a server. This is useful if deploying with a common SSL key for all hosts.

Constructor Summary

Constructors

Constructor and Description
SSLMirrorHostVerifier(InstanceParams params) Construct an SSLMirrorHostVerifier

Method Summary

Modifier and Type	Method and Description
boolean	peerMatches(SSLSession sslSession) Checks whether the SSL session peer's certificate DN matches our own.
boolean	verify(String targetHost, SSLSession sslSession) Checks whether an SSL connection has been made to the intended target.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SSLMirrorHostVerifier

public SSLMirrorHostVerifier(InstanceParams params)
                      throws IllegalArgumentException

Construct an SSLMirrorHostVerifier

Parameters:

params - the instantiation parameters.

Throws:

IllegalArgumentException - if the instance cannot be created due to a problem related to the input parameters

Method Detail

verify

public boolean verify(String targetHost,
                      SSLSession sslSession)

Checks whether an SSL connection has been made to the intended target. This should be called only after the SSL handshake has completed.

Specified by:

verify in interface HostnameVerifier

Parameters:

targetHost - the host to which a connection is being established. This parameter is not used by this implementation.

sslSession - the established SSL session

Returns:

true if the sslSession is set up with the correct host

peerMatches

public boolean peerMatches(SSLSession sslSession)

Checks whether the SSL session peer's certificate DN matches our own.

Parameters:

sslSession - the SSL session that has been established with a peer

Returns:

true if the peer's certificate DN matches ours