View Javadoc

1   /*
2    * ====================================================================
3    * Licensed to the Apache Software Foundation (ASF) under one
4    * or more contributor license agreements.  See the NOTICE file
5    * distributed with this work for additional information
6    * regarding copyright ownership.  The ASF licenses this file
7    * to you under the Apache License, Version 2.0 (the
8    * "License"); you may not use this file except in compliance
9    * with the License.  You may obtain a copy of the License at
10   *
11   *   http://www.apache.org/licenses/LICENSE-2.0
12   *
13   * Unless required by applicable law or agreed to in writing,
14   * software distributed under the License is distributed on an
15   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
16   * KIND, either express or implied.  See the License for the
17   * specific language governing permissions and limitations
18   * under the License.
19   * ====================================================================
20   *
21   * This software consists of voluntary contributions made by many
22   * individuals on behalf of the Apache Software Foundation.  For more
23   * information on the Apache Software Foundation, please see
24   * <http://www.apache.org/>.
25   *
26   */
27  
28  package org.apache.http.conn.ssl;
29  
30  import javax.net.ssl.SSLException;
31  
32  import org.apache.http.annotation.Immutable;
33  
34  /**
35   * The HostnameVerifier that works the same way as Curl and Firefox.
36   * <p/>
37   * The hostname must match either the first CN, or any of the subject-alts.
38   * A wildcard can occur in the CN, and in any of the subject-alts.
39   * <p/>
40   * The only difference between BROWSER_COMPATIBLE and STRICT is that a wildcard
41   * (such as "*.foo.com") with BROWSER_COMPATIBLE matches all subdomains,
42   * including "a.b.foo.com".
43   *
44   *
45   * @since 4.0
46   */
47  @Immutable
48  public class BrowserCompatHostnameVerifier extends AbstractVerifier {
49  
50      public static final BrowserCompatHostnameVerifier INSTANCE = new BrowserCompatHostnameVerifier();
51  
52      @Override
53      public final void verify(
54              final String host,
55              final String[] cns,
56              final String[] subjectAlts) throws SSLException {
57          verify(host, cns, subjectAlts, false);
58      }
59  
60      @Override
61      boolean validCountryWildcard(final String cn) {
62          return true;
63      }
64  
65      @Override
66      public final String toString() {
67          return "BROWSER_COMPATIBLE";
68      }
69  
70  }