| Modifier and Type | Class and Description |
|---|---|
class |
UaServiceFaultException |
| Modifier and Type | Method and Description |
|---|---|
static Optional<UaException> |
UaException.extract(Throwable ex)
If
ex is a UaException, or if a UaException can be found by walking up the exception
cause chain, return it. |
| Modifier and Type | Method and Description |
|---|---|
default ByteString |
SecureChannel.getLocalCertificateBytes() |
default ByteString |
SecureChannel.getLocalCertificateChainBytes() |
default ByteString |
SecureChannel.getLocalCertificateThumbprint() |
default ByteString |
SecureChannel.getRemoteCertificateBytes() |
default ByteString |
SecureChannel.getRemoteCertificateChainBytes() |
default ByteString |
SecureChannel.getRemoteCertificateThumbprint() |
void |
ServerSecureChannel.setRemoteCertificate(byte[] certificateBytes) |
| Constructor and Description |
|---|
MessageDecodeException(UaException cause) |
MessageEncodeException(UaException cause) |
| Modifier and Type | Method and Description |
|---|---|
static SecureMessageHeader |
SecureMessageHeader.decode(io.netty.buffer.ByteBuf buffer) |
static void |
SecureMessageHeader.encode(SecureMessageHeader header,
io.netty.buffer.ByteBuf buffer) |
default int |
HeaderDecoder.getMessageLength(io.netty.buffer.ByteBuf buffer,
int maxMessageLength)
Get the message length from a
ByteBuf containing a TcpMessageEncoder. |
| Modifier and Type | Method and Description |
|---|---|
static HelloMessage |
HelloMessage.decode(io.netty.buffer.ByteBuf buffer) |
static AcknowledgeMessage |
TcpMessageDecoder.decodeAcknowledge(io.netty.buffer.ByteBuf buffer) |
static ErrorMessage |
TcpMessageDecoder.decodeError(io.netty.buffer.ByteBuf buffer) |
static HelloMessage |
TcpMessageDecoder.decodeHello(io.netty.buffer.ByteBuf buffer) |
static io.netty.buffer.ByteBuf |
TcpMessageEncoder.encode(AcknowledgeMessage acknowledgeMessage) |
static io.netty.buffer.ByteBuf |
TcpMessageEncoder.encode(ErrorMessage errorMessage) |
static io.netty.buffer.ByteBuf |
TcpMessageEncoder.encode(HelloMessage helloMessage) |
static MessageType |
MessageType.fromMediumInt(int messageType) |
static int |
MessageType.toMediumInt(MessageType messageType) |
| Modifier and Type | Method and Description |
|---|---|
static SecurityPolicy |
SecurityPolicy.fromUri(String securityPolicyUri) |
static SecurityAlgorithm |
SecurityAlgorithm.fromUri(String securityAlgorithmUri) |
void |
CertificateValidator.validateCertificateChain(List<X509Certificate> certificateChain)
Check that trust can be established using the provided certificate chain and then validate every certificate
in the chain.
|
| Modifier and Type | Method and Description |
|---|---|
static X509Certificate |
CertificateUtil.decodeCertificate(byte[] certificateBytes)
Decode a DER-encoded X.509 certificate.
|
static X509Certificate |
CertificateUtil.decodeCertificate(InputStream inputStream)
Decode a DER-encoded X.509 certificate.
|
static List<X509Certificate> |
CertificateUtil.decodeCertificates(byte[] certificateBytes)
Decode either a sequence of DER-encoded X.509 certificates or a PKCS#7 certificate chain.
|
static List<X509Certificate> |
CertificateUtil.decodeCertificates(InputStream inputStream)
Decode either a sequence of DER-encoded X.509 certificates or a PKCS#7 certificate chain.
|
static ByteString |
CertificateUtil.getCertificateChainBytes(List<X509Certificate> certificateChain) |
static byte[] |
SignatureUtil.hmac(SecurityAlgorithm securityAlgorithm,
byte[] secretKey,
ByteBuffer... buffers)
Compute the HMAC of the provided buffers.
|
static byte[] |
SignatureUtil.sign(SecurityAlgorithm securityAlgorithm,
PrivateKey privateKey,
ByteBuffer... buffers)
Sign the contents of the provided buffers using the provided
SecurityAlgorithm. |
static ByteString |
CertificateUtil.thumbprint(X509Certificate certificate) |
static void |
NonceUtil.validateNonce(ByteString nonce)
Validate that
nonce is at least NonceUtil.MINIMUM_NONCE_LENGTH and is non-zeroes. |
static void |
NonceUtil.validateNonce(ByteString nonce,
int minimumLength)
Validate that
nonce is at least minimumLength and is non-zeroes. |
static void |
NonceUtil.validateNonce(ByteString nonce,
SecurityPolicy securityPolicy)
Validate that
nonce meets the minimum length requirement for securityPolicy and is non-zeroes. |
static void |
SignatureUtil.verify(SecurityAlgorithm algorithm,
X509Certificate certificate,
byte[] dataBytes,
byte[] signatureBytes)
Verify that
signatureBytes is a valid signature produced by the private key of certificate
having signed dataBytes using algorithm. |
| Modifier and Type | Method and Description |
|---|---|
static PKIXCertPathBuilderResult |
CertificateValidationUtil.buildTrustedCertPath(List<X509Certificate> certificateChain,
Collection<X509Certificate> trustedCertificates,
Collection<X509Certificate> issuerCertificates)
Given a possibly partial certificate chain with at least one certificate in it, builds a path to a trust anchor
using a collection of trusted and issuer certificates as possible intermediate and root CAs, and then ensures
that at least one certificate in the resulting path is in the trusted collection.
|
static void |
CertificateValidationUtil.checkApplicationUri(X509Certificate certificate,
String applicationUri)
Validate that the application URI matches the SubjectAltName URI in the given certificate.
|
static void |
CertificateValidationUtil.checkEndEntityExtendedKeyUsage(X509Certificate certificate,
boolean endEntityIsClient) |
static void |
CertificateValidationUtil.checkEndEntityKeyUsage(X509Certificate certificate) |
static void |
CertificateValidationUtil.checkHostnameOrIpAddress(X509Certificate certificate,
String... hostNames)
Validate that one of
hostNames matches a SubjectAltName DNSName or IPAddress entry in the certificate. |
static void |
CertificateValidationUtil.checkValidity(X509Certificate certificate,
boolean endEntity)
Check that
certificate is valid (the current date and time are within the validity period). |
static String |
CertificateValidationUtil.getSubjectAltNameUri(X509Certificate certificate) |
static void |
CertificateValidationUtil.validateTrustedCertPath(CertPath certPath,
TrustAnchor trustAnchor,
Collection<X509CRL> crls,
Set<ValidationCheck> validationChecks,
boolean endEntityIsClient)
Validates the trusted certificate path represented by a
TrustAnchor and a CertPath that may or
may not be empty, depending on the length of the path. |
Copyright © 2025. All rights reserved.