| OLD | NEW |
| (Empty) |
| 1 /* | |
| 2 * Copyright 2014 The Netty Project | |
| 3 * | |
| 4 * The Netty Project licenses this file to you under the Apache License, | |
| 5 * version 2.0 (the "License"); you may not use this file except in compliance | |
| 6 * with the License. You may obtain a copy of the License at: | |
| 7 * | |
| 8 * http://www.apache.org/licenses/LICENSE-2.0 | |
| 9 * | |
| 10 * Unless required by applicable law or agreed to in writing, software | |
| 11 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | |
| 12 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the | |
| 13 * License for the specific language governing permissions and limitations | |
| 14 * under the License. | |
| 15 */ | |
| 16 package org.apache.tomcat.jni; | |
| 17 | |
| 18 /** | |
| 19 * Is called during handshake and hooked into openssl via {@code SSL_CTX_set_cer
t_verify_callback}. | |
| 20 */ | |
| 21 public interface CertificateVerifier { | |
| 22 | |
| 23 /** | |
| 24 * Returns {@code true} if the passed in certificate chain could be verified
and so the handshake | |
| 25 * should be successful, {@code false} otherwise. | |
| 26 * | |
| 27 * @param ssl the SSL instance | |
| 28 * @param x509 the {@code X509} certificate chain | |
| 29 * @param authAlgorithm the auth algorithm | |
| 30 * @return verified {@code true} if verified successful, {@code fals
e} otherwise | |
| 31 */ | |
| 32 boolean verify(long ssl, byte[][] x509, String authAlgorithm); | |
| 33 } | |
| OLD | NEW |