org.mozilla.jss.nss

Class CertAuthHandler

java.lang.Object

org.mozilla.jss.nss.CertAuthHandler

All Implemented Interfaces:

java.lang.Runnable

public abstract class CertAuthHandler
extends java.lang.Object
implements java.lang.Runnable

CertAuthHandler interface enables arbitrary certificate authentication from a NSS cert auth hook. Notably, the return code from check should be a PRErrorCode, else 0. This will be used by NSS to determine the alert to send when closing the connection (in the event of an error). The concern here is that, when this is invoked synchronously, we're called from NSS as called by Java. Certain operations may or may not succeed or work as expected (such as raising an exception, acquiring locks already held, etc.).

Field Summary

Fields

Modifier and Type	Field and Description
boolean	finished Whether or not the check operation has been executed yet, when invoked via run().
int	result When invoked via run(), the result of the check operation.

Constructor Summary

Constructors

Constructor and Description
CertAuthHandler(SSLFDProxy fd) Constructor to store SSLFDProxy information.

Method Summary

Modifier and Type	Method and Description
abstract int	check(SSLFDProxy fd) Returns the PRErrorCode the error validating certificate auth, else 0.
void	run()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

result

public int result

When invoked via run(), the result of the check operation.

finished

public boolean finished

Whether or not the check operation has been executed yet, when invoked via run().

Constructor Detail

CertAuthHandler

public CertAuthHandler(SSLFDProxy fd)

Constructor to store SSLFDProxy information. This is useful for implementations which expect to be used via the Runnable interface, instead of called via the synchronous certificate authentication hook in NSS.

Method Detail

check

public abstract int check(SSLFDProxy fd)

Returns the PRErrorCode the error validating certificate auth, else 0. Note that it is up to the implementer to fetch the certificates (via SSL.PeerCertificateChain(ssl_fd)) and validate them properly.

run

public void run()

Specified by:

run in interface java.lang.Runnable