no.digipost.signature.client.core.internal.http

Class PostenEnterpriseCertificateStrategy

java.lang.Object

no.digipost.signature.client.core.internal.http.PostenEnterpriseCertificateStrategy

All Implemented Interfaces:

org.apache.http.ssl.TrustStrategy

public class PostenEnterpriseCertificateStrategy
extends Object
implements org.apache.http.conn.ssl.TrustStrategy

Constructor Summary

Constructors

Constructor and Description
PostenEnterpriseCertificateStrategy()

Method Summary

Modifier and Type	Method and Description
boolean	isTrusted(X509Certificate[] chain, String authType) Verify that the server certificate is issued to Posten Norge AS.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PostenEnterpriseCertificateStrategy

public PostenEnterpriseCertificateStrategy()

Method Detail

isTrusted

public boolean isTrusted(X509Certificate[] chain,
                         String authType)
                  throws CertificateException

Verify that the server certificate is issued to Posten Norge AS. Note that we have to throw an Exception to make sure that invalid certificates will be denied. The http client TrustStrategy can only be used to used to state that a server certificate is to be trusted without consulting the standard Java certificate verification process. Always returns false to make sure http client will run the Java certificate verification process, which will verify the certificate against the trust store, making sure that it's actually issued by a trusted CA.

Specified by:

isTrusted in interface org.apache.http.ssl.TrustStrategy

Throws:

CertificateException

See Also:

SSLContextBuilder.TrustManagerDelegate.checkServerTrusted(X509Certificate[], String)