Module org.eclipse.milo.opcua.stack.core

Package org.eclipse.milo.opcua.stack.core.security

Class DefaultServerCertificateValidator

java.lang.Object

org.eclipse.milo.opcua.stack.core.security.DefaultServerCertificateValidator

All Implemented Interfaces:

CertificateValidator

public class DefaultServerCertificateValidator
extends Object
implements CertificateValidator

Nested Class Summary

Nested classes/interfaces inherited from interface org.eclipse.milo.opcua.stack.core.security.CertificateValidator

CertificateValidator.InsecureCertificateValidator

Constructor Summary

Constructors

Constructor	Description
DefaultServerCertificateValidator(TrustListManager trustListManager, Set<ValidationCheck> validationChecks, CertificateQuarantine certificateQuarantine)	Create a DefaultServerCertificateValidator that performs a given set of optional validation checks.
DefaultServerCertificateValidator(TrustListManager trustListManager, CertificateQuarantine certificateQuarantine)	Create a DefaultServerCertificateValidator that performs no optional validation checks.

Method Summary

Modifier and Type	Method	Description
void	validateCertificateChain(List<X509Certificate> certificateChain, @Nullable String applicationUri, @Nullable String[] validHostnames)	Check that trust can be established using the provided certificate chain and then validate every certificate in the chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DefaultServerCertificateValidator

public DefaultServerCertificateValidator(TrustListManager trustListManager,
 CertificateQuarantine certificateQuarantine)

Create a DefaultServerCertificateValidator that performs no optional validation checks.

Parameters:

trustListManager - the configured TrustListManager.

certificateQuarantine - the CertificateQuarantine to use.

DefaultServerCertificateValidator

public DefaultServerCertificateValidator(TrustListManager trustListManager,
 Set<ValidationCheck> validationChecks,
 CertificateQuarantine certificateQuarantine)

Create a DefaultServerCertificateValidator that performs a given set of optional validation checks.

Parameters:

trustListManager - the configured TrustListManager.

validationChecks - the set of optional ValidationChecks to perform.

certificateQuarantine - the CertificateQuarantine to use.

Method Details

validateCertificateChain

public void validateCertificateChain(List<X509Certificate> certificateChain,
 @Nullable String applicationUri,
 @Nullable String[] validHostnames)
                              throws UaException

Description copied from interface: CertificateValidator

Check that trust can be established using the provided certificate chain and then validate every certificate in the chain.

The chain must begin with the end-entity certificate at index 0 followed by the remaining certificates in the chain, if any, in the correct order.

Specified by:

validateCertificateChain in interface CertificateValidator

Parameters:

certificateChain - the certificate chain to validate.

applicationUri - the applicationUri of the remote endpoint. Ignored if null.

validHostnames - the valid hostnames for the remote endpoint. Ignored if null.

Throws:

UaException - if certificateChain is not trusted or validation fails.