Package org.mozilla.jss.nss
Class CertAuthHandler
- java.lang.Object
-
- org.mozilla.jss.nss.CertAuthHandler
-
- All Implemented Interfaces:
java.lang.Runnable
public abstract class CertAuthHandler extends java.lang.Object implements java.lang.Runnable
CertAuthHandler interface enables arbitrary certificate authentication from a NSS cert auth hook. Notably, the return code from check should be a PRErrorCode, else 0. This will be used by NSS to determine the alert to send when closing the connection (in the event of an error). The concern here is that, when this is invoked synchronously, we're called from NSS as called by Java. Certain operations may or may not succeed or work as expected (such as raising an exception, acquiring locks already held, etc.).
-
-
Constructor Summary
Constructors Constructor Description CertAuthHandler(SSLFDProxy fd)
Constructor to store SSLFDProxy information.
-
Method Summary
All Methods Instance Methods Abstract Methods Concrete Methods Modifier and Type Method Description abstract int
check(SSLFDProxy fd)
Returns the PRErrorCode the error validating certificate auth, else 0.void
run()
-
-
-
Constructor Detail
-
CertAuthHandler
public CertAuthHandler(SSLFDProxy fd)
Constructor to store SSLFDProxy information. This is useful for implementations which expect to be used via the Runnable interface, instead of called via the synchronous certificate authentication hook in NSS.
-
-
Method Detail
-
check
public abstract int check(SSLFDProxy fd)
Returns the PRErrorCode the error validating certificate auth, else 0. Note that it is up to the implementer to fetch the certificates (via SSL.PeerCertificateChain(ssl_fd)) and validate them properly.
-
run
public void run()
- Specified by:
run
in interfacejava.lang.Runnable
-
-