blob: 547acc4c4f9edb2f86327761a3612c5b91d849a7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
// **********************************************************************
//
// Copyright (c) 2003-2009 ZeroC, Inc. All rights reserved.
//
// This copy of Ice is licensed to you under the terms described in the
// ICE_LICENSE file included in this distribution.
//
// **********************************************************************
public class CertificateVerifierI implements IceSSL.CertificateVerifier
{
public
CertificateVerifierI()
{
reset();
}
public boolean
verify(IceSSL.ConnectionInfo info)
{
if(info.certs != null)
{
try
{
java.util.Collection<java.util.List<?> > subjectAltNames =
((java.security.cert.X509Certificate)info.certs[0]).getSubjectAlternativeNames();
test(subjectAltNames != null);
java.util.List<String> ipAddresses = new java.util.ArrayList<String>();
java.util.List<String> dnsNames = new java.util.ArrayList<String>();
java.util.Iterator<java.util.List<?> > i = subjectAltNames.iterator();
while(i.hasNext())
{
java.util.List<?> l = i.next();
test(!l.isEmpty());
Integer n = (Integer)l.get(0);
if(n.intValue() == 7)
{
ipAddresses.add((String)l.get(1));
}
else if(n.intValue() == 2)
{
dnsNames.add((String)l.get(1));
}
}
test(dnsNames.contains("server"));
test(ipAddresses.contains("127.0.0.1"));
}
catch(java.security.cert.CertificateParsingException ex)
{
test(false);
}
}
_hadCert = info.certs != null;
_invoked = true;
return _returnValue;
}
void
reset()
{
_returnValue = true;
_invoked = false;
_hadCert = false;
}
void
returnValue(boolean b)
{
_returnValue = b;
}
boolean
invoked()
{
return _invoked;
}
boolean
hadCert()
{
return _hadCert;
}
private static void
test(boolean b)
{
if(!b)
{
throw new RuntimeException();
}
}
private boolean _returnValue;
private boolean _invoked;
private boolean _hadCert;
}
|
