Package com.sshtools.common.knownhosts

Class X509HostKeyVerification

java.lang.Object

com.sshtools.common.knownhosts.X509HostKeyVerification

All Implemented Interfaces:

HostKeyVerification

public class X509HostKeyVerification
extends Object
implements HostKeyVerification

This is a HostKeyVerification implementation that will validate an X509 public key.

Author:

lee

Constructor Summary

Constructors

Constructor	Description
X509HostKeyVerification(boolean enableRevocation)	This creates a verification instance that will check the validation of a certificate against the Java runtime's trusted CA certs keystore.
X509HostKeyVerification(Set<TrustAnchor> trustAnchors, boolean enableRevocation)	This creates a verification instance against a specific set of TrustAnchors

Method Summary

Modifier and Type	Method	Description
boolean	verifyHost(String host, SshPublicKey pk)	Verify that the public key is acceptable for the host.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

X509HostKeyVerification

public X509HostKeyVerification(boolean enableRevocation)
                        throws IOException,
KeyStoreException,
NoSuchAlgorithmException,
CertificateException,
InvalidAlgorithmParameterException

This creates a verification instance that will check the validation of a certificate against the Java runtime's trusted CA certs keystore.

Parameters:

enableRevocation -

Throws:

IOException

KeyStoreException

NoSuchAlgorithmException

CertificateException

InvalidAlgorithmParameterException

X509HostKeyVerification

public X509HostKeyVerification(Set<TrustAnchor> trustAnchors,
 boolean enableRevocation)
                        throws InvalidAlgorithmParameterException

This creates a verification instance against a specific set of TrustAnchors

Parameters:

trustAnchors -

enableRevocation -

Throws:

InvalidAlgorithmParameterException

Method Details

verifyHost

public boolean verifyHost(String host,
 SshPublicKey pk)
                   throws SshException

Description copied from interface: HostKeyVerification

Verify that the public key is acceptable for the host.

Specified by:

verifyHost in interface HostKeyVerification

Parameters:

host - the name of the connected host

pk - the public key supplied by the host

Returns:

true if the host key is acceptable otherwise false

Throws:

SshException