Module org.eclipse.milo.opcua.stack.core

Package org.eclipse.milo.opcua.stack.core.security

Class DefaultClientCertificateValidator

java.lang.Object

org.eclipse.milo.opcua.stack.core.security.DefaultClientCertificateValidator

All Implemented Interfaces:

CertificateValidator

public class DefaultClientCertificateValidator
extends Object
implements CertificateValidator

Nested Class Summary

Nested classes/interfaces inherited from interface org.eclipse.milo.opcua.stack.core.security.CertificateValidator

CertificateValidator.InsecureCertificateValidator

Constructor Summary

Constructors

Constructor	Description
DefaultClientCertificateValidator(TrustListManager trustListManager, Set<ValidationCheck> validationChecks, CertificateQuarantine certificateQuarantine)	Create a CertificateValidator that performs a given set of optional validation checks.
DefaultClientCertificateValidator(TrustListManager trustListManager, CertificateQuarantine certificateQuarantine)	Create a CertificateValidator that performs no optional validation checks.

Method Summary

Modifier and Type	Method	Description
void	validateCertificateChain(List<X509Certificate> certificateChain, String applicationUri, String[] validHostNames)	Check that trust can be established using the provided certificate chain and then validate every certificate in the chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DefaultClientCertificateValidator

public DefaultClientCertificateValidator(TrustListManager trustListManager,
 CertificateQuarantine certificateQuarantine)

Create a CertificateValidator that performs no optional validation checks.

Parameters:

trustListManager - the configured TrustListManager.

certificateQuarantine - the CertificateQuarantine to use.

DefaultClientCertificateValidator

public DefaultClientCertificateValidator(TrustListManager trustListManager,
 Set<ValidationCheck> validationChecks,
 CertificateQuarantine certificateQuarantine)

Create a CertificateValidator that performs a given set of optional validation checks.

Parameters:

trustListManager - the configured TrustListManager.

validationChecks - the set of optional ValidationChecks to perform.

certificateQuarantine - the CertificateQuarantine to use.

Method Details

validateCertificateChain

public void validateCertificateChain(List<X509Certificate> certificateChain,
 String applicationUri,
 String[] validHostNames)
                              throws UaException

Description copied from interface: CertificateValidator

Check that trust can be established using the provided certificate chain and then validate every certificate in the chain.

The chain must begin with the end-entity certificate at index 0 followed by the remaining certificates in the chain, if any, in the correct order.

Specified by:

validateCertificateChain in interface CertificateValidator

Parameters:

certificateChain - the certificate chain to validate.

applicationUri - the applicationUri of the remote endpoint. Ignored if null.

validHostNames - the valid hostnames for the remote endpoint. Ignored if null.

Throws:

UaException - if certificateChain is not trusted or validation fails.