com.couchbase.lite.internal.replicator

Class CBLTrustManager

java.lang.Object

com.couchbase.lite.internal.replicator.CBLTrustManager

All Implemented Interfaces:

TrustManager, X509TrustManager

public final class CBLTrustManager
extends Object
implements X509TrustManager

The trust manager that supports the followings: 1. Supports pinned server certificate. 2. Supports acceptOnlySelfSignedServerCertificate mode. 3. Supports default trust manager for validating certs when the pinned server certificate and acceptOnlySelfSignedServerCertificate are not used. 4. Allows to listen for the server certificates.

Constructor Summary

Constructors

Constructor and Description
CBLTrustManager(byte[] pinnedServerCert, boolean acceptOnlySelfSignedServerCertificate, Fn.Consumer<List<Certificate>> serverCertslistener)

Method Summary

Modifier and Type	Method and Description
void	checkClientTrusted(X509Certificate[] chain, String authType)
void	checkServerTrusted(X509Certificate[] chain, String authType)
X509Certificate[]	getAcceptedIssuers()

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CBLTrustManager

public CBLTrustManager(@Nullable
                       byte[] pinnedServerCert,
                       boolean acceptOnlySelfSignedServerCertificate,
                       @NonNull
                       Fn.Consumer<List<Certificate>> serverCertslistener)

Method Detail

checkClientTrusted

public void checkClientTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkClientTrusted in interface X509TrustManager

Throws:

CertificateException

checkServerTrusted

public void checkServerTrusted(X509Certificate[] chain,
                               String authType)
                        throws CertificateException

Specified by:

checkServerTrusted in interface X509TrustManager

Throws:

CertificateException

getAcceptedIssuers

public X509Certificate[] getAcceptedIssuers()

Specified by:

getAcceptedIssuers in interface X509TrustManager