okhttp3.internal.tls

Class BasicCertificateChainCleaner

java.lang.Object

okhttp3.internal.tls.CertificateChainCleaner

okhttp3.internal.tls.BasicCertificateChainCleaner

public final class BasicCertificateChainCleaner
extends CertificateChainCleaner

A certificate chain cleaner that uses a set of trusted root certificates to build the trusted chain. This class duplicates the clean chain building performed during the TLS handshake. We prefer other mechanisms where they exist, such as with okhttp3.internal.platform.AndroidPlatform.AndroidCertificateChainCleaner.

This class includes code from Conscrypt's TrustManagerImpl and TrustedCertificateIndex.

Constructor Summary

Constructors

Constructor and Description
BasicCertificateChainCleaner(TrustRootIndex trustRootIndex)

Method Summary

Modifier and Type	Method and Description
List<Certificate>	clean(List<Certificate> chain, String hostname) Returns a cleaned chain for chain.
boolean	equals(Object other)
int	hashCode()

Methods inherited from class okhttp3.internal.tls.CertificateChainCleaner

get, get

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BasicCertificateChainCleaner

public BasicCertificateChainCleaner(TrustRootIndex trustRootIndex)

Method Detail

clean

public List<Certificate> clean(List<Certificate> chain,
                               String hostname)
                        throws SSLPeerUnverifiedException

Returns a cleaned chain for chain.

This method throws if the complete chain to a trusted CA certificate cannot be constructed. This is unexpected unless the trust root index in this class has a different trust manager than what was used to establish chain.

Specified by:

clean in class CertificateChainCleaner

Throws:

SSLPeerUnverifiedException

hashCode

public int hashCode()

Overrides:

hashCode in class Object

equals

public boolean equals(Object other)

Overrides:

equals in class Object