org.eclipse.californium.scandium.dtls

Class CertificateVerify

java.lang.Object

org.eclipse.californium.scandium.dtls.AbstractMessage

org.eclipse.californium.scandium.dtls.HandshakeMessage

org.eclipse.californium.scandium.dtls.CertificateVerify

All Implemented Interfaces:

DTLSMessage

public final class CertificateVerify
extends HandshakeMessage

This message is used to provide explicit verification of a client certificate. This message is only sent following a client certificate that has signing capability (i.e., all certificates except those containing fixed Diffie-Hellman parameters). When sent, it MUST immediately follow the ClientKeyExchange message. For further details see RFC 5246.

Field Summary

Fields inherited from class org.eclipse.californium.scandium.dtls.HandshakeMessage

FRAGMENT_LENGTH_BITS, FRAGMENT_OFFSET_BITS, MESSAGE_HEADER_LENGTH_BYTES, MESSAGE_LENGTH_BITS, MESSAGE_SEQ_BITS, MESSAGE_TYPE_BITS

Constructor Summary

Constructors

Constructor and Description
CertificateVerify(SignatureAndHashAlgorithm signatureAndHashAlgorithm, PrivateKey clientPrivateKey, List<HandshakeMessage> handshakeMessages, InetSocketAddress peerAddress) Called by client to create its CertificateVerify message.

Method Summary

Methods

Modifier and Type	Method and Description
byte[]	fragmentToByteArray() The serialization of the handshake body (without the handshake header).
static HandshakeMessage	fromReader(org.eclipse.californium.elements.util.DatagramReader reader, InetSocketAddress peerAddress)
int	getMessageLength() Must be implemented by each subclass.
HandshakeType	getMessageType() Returns the type of the handshake message.
void	verifySignature(PublicKey clientPublicKey, List<HandshakeMessage> handshakeMessages) Tries to verify the client's signature contained in the CertificateVerify message.

Methods inherited from class org.eclipse.californium.scandium.dtls.HandshakeMessage

fragmentChanged, fromByteArray, fromGenericHandshakeMessage, getContentType, getFragmentLength, getFragmentOffset, getMessageSeq, getNextHandshakeMessage, getRawMessage, setMessageSeq, setNextHandshakeMessage, size, toByteArray, toString, writeTo

Methods inherited from class org.eclipse.californium.scandium.dtls.AbstractMessage

getPeer

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

CertificateVerify

public CertificateVerify(SignatureAndHashAlgorithm signatureAndHashAlgorithm,
                 PrivateKey clientPrivateKey,
                 List<HandshakeMessage> handshakeMessages,
                 InetSocketAddress peerAddress)

Called by client to create its CertificateVerify message.

Parameters:

signatureAndHashAlgorithm - the signature and hash algorithm used to create the signature.

clientPrivateKey - the client's private key to sign the signature.

handshakeMessages - the handshake messages which are signed.

peerAddress - the IP address and port of the peer this message has been received from or should be sent to

Method Detail

getMessageType

public HandshakeType getMessageType()

Description copied from class: HandshakeMessage

Returns the type of the handshake message. See HandshakeType.

Specified by:

getMessageType in class HandshakeMessage

Returns:

the HandshakeType.

getMessageLength

public int getMessageLength()

Description copied from class: HandshakeMessage

Must be implemented by each subclass. The length is given in bytes and only includes the length of the subclass' specific fields (not the handshake message header).

Specified by:

getMessageLength in class HandshakeMessage

Returns:

the length of the message in bytes.

fragmentToByteArray

public byte[] fragmentToByteArray()

Description copied from class: HandshakeMessage

The serialization of the handshake body (without the handshake header). Must be implemented by each subclass. Except the ClientHello, the fragments are considered to be not modified. If a modification is required, call HandshakeMessage.fragmentChanged().

Specified by:

fragmentToByteArray in class HandshakeMessage

Returns:

the raw byte representation of the handshake body.

fromReader

public static HandshakeMessage fromReader(org.eclipse.californium.elements.util.DatagramReader reader,
                          InetSocketAddress peerAddress)

verifySignature

public void verifySignature(PublicKey clientPublicKey,
                   List<HandshakeMessage> handshakeMessages)
                     throws HandshakeException

Tries to verify the client's signature contained in the CertificateVerify message.

Parameters:

clientPublicKey - the client's public key.

handshakeMessages - the handshake messages exchanged so far.

Throws:

HandshakeException - if the signature could not be verified.