org.eclipse.californium.scandium.dtls.x509

Interface CertificateVerifier

All Known Subinterfaces:

AdvancedCertificateVerifier

All Known Implementing Classes:

StaticCertificateVerifier

Deprecated.

use NewAdvancedCertificateVerifier instead, or BridgeCertificateVerifier until migrated.

@Deprecated
public interface CertificateVerifier

A class in charge of verifying a X.509 certificate chain provided by a peer.

See Also:

StaticCertificateVerifier

Method Summary

Methods

Modifier and Type	Method and Description
X509Certificate[]	getAcceptedIssuers() Deprecated. Return an array of certificate authority certificates which are trusted for authenticating peers.
void	verifyCertificate(CertificateMessage message, DTLSSession session) Deprecated. Validates the X.509 certificate chain provided by the the peer as part of this message.

Method Detail

verifyCertificate

void verifyCertificate(CertificateMessage message,
                     DTLSSession session)
                       throws HandshakeException

Deprecated.

Validates the X.509 certificate chain provided by the the peer as part of this message.

Parameters:

message - certificate message to be verified

session - dtls session to verify

Throws:

HandshakeException - if verification fails

getAcceptedIssuers

X509Certificate[] getAcceptedIssuers()

Deprecated.

Return an array of certificate authority certificates which are trusted for authenticating peers. The javadoc of previous versions (2.1.0 and before) permits to use null. This causes a failure, please adapt to use an empty array.

Returns:

a non-null (possibly empty) array of acceptable CA issuer certificates.