me.sniggle.common.http

Class CertificateFingerprintHostnameVerifier

java.lang.Object

me.sniggle.common.http.CertificateFingerprintHostnameVerifier

All Implemented Interfaces:

HostnameVerifier

public class CertificateFingerprintHostnameVerifier
extends Object
implements HostnameVerifier

Created by iulius on 22/06/15. Copy of the Apache HTTPComponents DefaultHostnameVerifier with additional functionality in order to support Certificate Pinning

Constructor Summary

Constructors

Constructor and Description
CertificateFingerprintHostnameVerifier(Map<String,String> fingerprints)
CertificateFingerprintHostnameVerifier(Map<String,String> fingerprints, org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)

Method Summary

Modifier and Type	Method and Description
CertificateFingerprintHostnameVerifier	add(String hostname, String fingerprint)
protected Certificate	extractCertificate(SSLSession sslSession)
protected String	extractCN(String subjectPrincipal)
protected List<String>	extractSubjectAlts(X509Certificate cert, int subjectType)
protected void	matchCN(String host, String cn, org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)
protected void	matchDNSName(String host, List<String> subjectAlts, org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)
protected boolean	matchDomainRoot(String host, String domainRoot)
protected boolean	matchIdentity(String host, String identity)
protected boolean	matchIdentity(String host, String identity, org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)
protected boolean	matchIdentity(String host, String identity, org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher, boolean strict)
protected boolean	matchIdentityStrict(String host, String identity)
protected boolean	matchIdentityStrict(String host, String identity, org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)
protected void	matchIPAddress(String host, List<String> subjectAlts)
protected void	matchIPv6Address(String host, List<String> subjectAlts)
protected String	normaliseAddress(String hostname)
boolean	verify(String s, SSLSession sslSession)
protected void	verify(String host, X509Certificate cert)
protected boolean	verifyFingerprint(String hostname, Certificate c)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateFingerprintHostnameVerifier

public CertificateFingerprintHostnameVerifier(Map<String,String> fingerprints)

Parameters:

fingerprints - key: hostname, value: SHA256-Hex Hash

CertificateFingerprintHostnameVerifier

public CertificateFingerprintHostnameVerifier(Map<String,String> fingerprints,
                                              org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)

Parameters:

fingerprints - key: hostname, value: SHA256-Hex Hash

publicSuffixMatcher -

Method Detail

add

public CertificateFingerprintHostnameVerifier add(String hostname,
                                                  String fingerprint)

Parameters:

hostname - the host to add

fingerprint - the SHA256-Hex Hash

Returns:

the instance of the hostname verifier

extractCertificate

protected Certificate extractCertificate(SSLSession sslSession)

Parameters:

sslSession -

Returns:

verify

protected void verify(String host,
                      X509Certificate cert)
               throws SSLException

Parameters:

host -

cert -

Throws:

SSLException

matchIPAddress

protected void matchIPAddress(String host,
                              List<String> subjectAlts)
                       throws SSLException

Parameters:

host -

subjectAlts -

Throws:

SSLException

matchIPv6Address

protected void matchIPv6Address(String host,
                                List<String> subjectAlts)
                         throws SSLException

Parameters:

host -

subjectAlts -

Throws:

SSLException

matchDNSName

protected void matchDNSName(String host,
                            List<String> subjectAlts,
                            org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)
                     throws SSLException

Parameters:

host -

subjectAlts -

publicSuffixMatcher -

Throws:

SSLException

matchCN

protected void matchCN(String host,
                       String cn,
                       org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)
                throws SSLException

Parameters:

host -

cn -

publicSuffixMatcher -

Throws:

SSLException

extractCN

protected String extractCN(String subjectPrincipal)
                    throws SSLException

Parameters:

subjectPrincipal -

Returns:

Throws:

SSLException

extractSubjectAlts

protected List<String> extractSubjectAlts(X509Certificate cert,
                                          int subjectType)

Parameters:

cert -

subjectType -

Returns:

normaliseAddress

protected String normaliseAddress(String hostname)

Parameters:

hostname -

Returns:

matchDomainRoot

protected boolean matchDomainRoot(String host,
                                  String domainRoot)

Parameters:

host -

domainRoot -

Returns:

matchIdentity

protected boolean matchIdentity(String host,
                                String identity,
                                org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher,
                                boolean strict)

Parameters:

host -

identity -

publicSuffixMatcher -

strict -

Returns:

matchIdentity

protected boolean matchIdentity(String host,
                                String identity,
                                org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)

Parameters:

host -

identity -

publicSuffixMatcher -

Returns:

matchIdentity

protected boolean matchIdentity(String host,
                                String identity)

Parameters:

host -

identity -

Returns:

matchIdentityStrict

protected boolean matchIdentityStrict(String host,
                                      String identity,
                                      org.apache.http.conn.util.PublicSuffixMatcher publicSuffixMatcher)

Parameters:

host -

identity -

publicSuffixMatcher -

Returns:

matchIdentityStrict

protected boolean matchIdentityStrict(String host,
                                      String identity)

Parameters:

host -

identity -

Returns:

verifyFingerprint

protected boolean verifyFingerprint(String hostname,
                                    Certificate c)
                             throws CertificateEncodingException

Parameters:

hostname -

c -

Returns:

Throws:

CertificateEncodingException

verify

public boolean verify(String s,
                      SSLSession sslSession)

Specified by:

verify in interface HostnameVerifier