mirror of
https://github.com/fofolee/uTools-Manuals.git
synced 2025-07-05 08:12:43 +08:00
341 lines
24 KiB
HTML
341 lines
24 KiB
HTML
<div class="header">
|
||
<div class="subTitle">
|
||
compact1, compact2, compact3
|
||
</div>
|
||
<div class="subTitle">
|
||
javax.net.ssl
|
||
</div>
|
||
<h2 class="title" title="Class X509ExtendedTrustManager">Class X509ExtendedTrustManager</h2>
|
||
</div><div class="contentContainer">
|
||
<ul class="inheritance">
|
||
<li><a href="../../../java/lang/Object.html" title="class in java.lang">java.lang.Object</a></li>
|
||
<li>
|
||
<ul class="inheritance">
|
||
<li>javax.net.ssl.X509ExtendedTrustManager</li>
|
||
</ul> </li>
|
||
</ul>
|
||
<div class="description">
|
||
<ul class="blockList">
|
||
<li class="blockList">
|
||
<dl>
|
||
<dt>
|
||
All Implemented Interfaces:
|
||
</dt>
|
||
<dd>
|
||
<span><a href="../../../javax/net/ssl/TrustManager.html" title="javax.net.ssl中的接口">TrustManager</a> ， <a href="../../../javax/net/ssl/X509TrustManager.html" title="javax.net.ssl中的接口">X509TrustManager</a></span>
|
||
</dd>
|
||
</dl>
|
||
<hr/> <br/> <pre>public abstract class <span class="typeNameLabel">X509ExtendedTrustManager</span>
|
||
extends <a href="../../../java/lang/Object.html" title="class in java.lang">Object</a>
|
||
implements <a href="../../../javax/net/ssl/X509TrustManager.html" title="interface in javax.net.ssl">X509TrustManager</a></pre>
|
||
<div class="block">
|
||
<span>扩展到<code>X509TrustManager</code>接口，支持SSL / TLS连接敏感信任管理。</span>
|
||
<p> <span>为了防止中间人攻击，可以进行主机名检查，以验证终端实体证书中的主机名是否与目标主机名匹配。</span> <span>TLS不需要这样的检查，但是一些TLS协议（如HTTPS）。</span> <span>在早期版本的JDK中，证书链检查是在SSL / TLS层完成的，主机名验证检查是通过TLS完成的。</span> <span>此类允许在单次调用此类时进行检查。</span> </p>
|
||
<p> <span>RFC 2830定义了“LDAPS”算法的服务器标识规范。</span> <span>RFC 2818定义了“HTTPS”算法的服务器标识和客户端标识规范。</span> </p>
|
||
</div>
|
||
<dl>
|
||
<dt>
|
||
<span class="simpleTagLabel">从以下版本开始：</span>
|
||
</dt>
|
||
<dd>
|
||
1.7
|
||
</dd>
|
||
<dt>
|
||
<span class="seeLabel">另请参见：</span>
|
||
</dt>
|
||
<dd>
|
||
<span><a href="../../../javax/net/ssl/X509TrustManager.html" title="javax.net.ssl中的接口"><code>X509TrustManager</code></a> ， <a href="../../../javax/net/ssl/HostnameVerifier.html" title="javax.net.ssl中的接口"><code>HostnameVerifier</code></a></span>
|
||
</dd>
|
||
</dl> </li>
|
||
</ul>
|
||
</div>
|
||
<div class="summary">
|
||
<ul class="blockList">
|
||
<li class="blockList">
|
||
<!-- ======== CONSTRUCTOR SUMMARY ======== -->
|
||
<ul class="blockList">
|
||
<li class="blockList"><a name="constructor.summary">
|
||
<!-- --> </a> <h3>构造方法摘要</h3>
|
||
<table border="0" cellpadding="3" cellspacing="0" class="memberSummary" summary="Constructor Summary table, listing constructors, and an explanation">
|
||
<caption>
|
||
<span>构造方法</span>
|
||
<span class="tabEnd"> </span>
|
||
</caption>
|
||
<tbody>
|
||
<tr>
|
||
<th class="colOne" scope="col">Constructor and Description</th>
|
||
</tr>
|
||
<tr class="altColor">
|
||
<td class="colOne"><code><span class="memberNameLink"><a href="../../../javax/net/ssl/X509ExtendedTrustManager.html#X509ExtendedTrustManager--">X509ExtendedTrustManager</a></span>()</code> </td>
|
||
</tr>
|
||
</tbody>
|
||
</table> </li>
|
||
</ul>
|
||
<!-- ========== METHOD SUMMARY =========== -->
|
||
<ul class="blockList">
|
||
<li class="blockList"><a name="method.summary">
|
||
<!-- --> </a> <h3>方法摘要</h3>
|
||
<table border="0" cellpadding="3" cellspacing="0" class="memberSummary" summary="Method Summary table, listing methods, and an explanation">
|
||
<caption>
|
||
<span class="activeTableTab" id="t0"><span>所有方法</span><span class="tabEnd"> </span></span>
|
||
<span class="tableTab" id="t2"><span><a href="javascript:show(2);">接口方法</a></span><span class="tabEnd"> </span></span>
|
||
<span class="tableTab" id="t3"><span><a href="javascript:show(4);">抽象方法</a></span><span class="tabEnd"> </span></span>
|
||
</caption>
|
||
<tbody>
|
||
<tr>
|
||
<th class="colFirst" scope="col">Modifier and Type</th>
|
||
<th class="colLast" scope="col">Method and Description</th>
|
||
</tr>
|
||
<tr class="altColor" id="i0">
|
||
<td class="colFirst"><code>abstract void</code></td>
|
||
<td class="colLast"><code><span class="memberNameLink"><a href="../../../javax/net/ssl/X509ExtendedTrustManager.html#checkClientTrusted-java.security.cert.X509Certificate:A-java.lang.String-java.net.Socket-">checkClientTrusted</a></span>(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain, <a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType, <a href="../../../java/net/Socket.html" title="class in java.net">Socket</a> socket)</code>
|
||
<div class="block">
|
||
给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。
|
||
</div> </td>
|
||
</tr>
|
||
<tr class="rowColor" id="i1">
|
||
<td class="colFirst"><code>abstract void</code></td>
|
||
<td class="colLast"><code><span class="memberNameLink"><a href="../../../javax/net/ssl/X509ExtendedTrustManager.html#checkClientTrusted-java.security.cert.X509Certificate:A-java.lang.String-javax.net.ssl.SSLEngine-">checkClientTrusted</a></span>(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain, <a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType, <a href="../../../javax/net/ssl/SSLEngine.html" title="class in javax.net.ssl">SSLEngine</a> engine)</code>
|
||
<div class="block">
|
||
给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。
|
||
</div> </td>
|
||
</tr>
|
||
<tr class="altColor" id="i2">
|
||
<td class="colFirst"><code>abstract void</code></td>
|
||
<td class="colLast"><code><span class="memberNameLink"><a href="../../../javax/net/ssl/X509ExtendedTrustManager.html#checkServerTrusted-java.security.cert.X509Certificate:A-java.lang.String-java.net.Socket-">checkServerTrusted</a></span>(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain, <a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType, <a href="../../../java/net/Socket.html" title="class in java.net">Socket</a> socket)</code>
|
||
<div class="block">
|
||
给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。
|
||
</div> </td>
|
||
</tr>
|
||
<tr class="rowColor" id="i3">
|
||
<td class="colFirst"><code>abstract void</code></td>
|
||
<td class="colLast"><code><span class="memberNameLink"><a href="../../../javax/net/ssl/X509ExtendedTrustManager.html#checkServerTrusted-java.security.cert.X509Certificate:A-java.lang.String-javax.net.ssl.SSLEngine-">checkServerTrusted</a></span>(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain, <a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType, <a href="../../../javax/net/ssl/SSLEngine.html" title="class in javax.net.ssl">SSLEngine</a> engine)</code>
|
||
<div class="block">
|
||
给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。
|
||
</div> </td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
<ul class="blockList">
|
||
<li class="blockList"><a name="methods.inherited.from.class.java.lang.Object">
|
||
<!-- --> </a> <h3>Methods inherited from class java.lang.<a href="../../../java/lang/Object.html" title="class in java.lang">Object</a></h3> <code><a href="../../../java/lang/Object.html#clone--">clone</a>, <a href="../../../java/lang/Object.html#equals-java.lang.Object-">equals</a>, <a href="../../../java/lang/Object.html#finalize--">finalize</a>, <a href="../../../java/lang/Object.html#getClass--">getClass</a>, <a href="../../../java/lang/Object.html#hashCode--">hashCode</a>, <a href="../../../java/lang/Object.html#notify--">notify</a>, <a href="../../../java/lang/Object.html#notifyAll--">notifyAll</a>, <a href="../../../java/lang/Object.html#toString--">toString</a>, <a href="../../../java/lang/Object.html#wait--">wait</a>, <a href="../../../java/lang/Object.html#wait-long-">wait</a>, <a href="../../../java/lang/Object.html#wait-long-int-">wait</a></code></li>
|
||
</ul>
|
||
<ul class="blockList">
|
||
<li class="blockList"><a name="methods.inherited.from.class.javax.net.ssl.X509TrustManager">
|
||
<!-- --> </a> <h3>Methods inherited from interface javax.net.ssl.<a href="../../../javax/net/ssl/X509TrustManager.html" title="interface in javax.net.ssl">X509TrustManager</a></h3> <code><a href="../../../javax/net/ssl/X509TrustManager.html#checkClientTrusted-java.security.cert.X509Certificate:A-java.lang.String-">checkClientTrusted</a>, <a href="../../../javax/net/ssl/X509TrustManager.html#checkServerTrusted-java.security.cert.X509Certificate:A-java.lang.String-">checkServerTrusted</a>, <a href="../../../javax/net/ssl/X509TrustManager.html#getAcceptedIssuers--">getAcceptedIssuers</a></code></li>
|
||
</ul> </li>
|
||
</ul> </li>
|
||
</ul>
|
||
</div>
|
||
<div class="details">
|
||
<ul class="blockList">
|
||
<li class="blockList">
|
||
<!-- ========= CONSTRUCTOR DETAIL ======== -->
|
||
<ul class="blockList">
|
||
<li class="blockList"><a name="constructor.detail">
|
||
<!-- --> </a> <h3>构造方法详细信息</h3> <a name="X509ExtendedTrustManager--">
|
||
<!-- --> </a>
|
||
<ul class="blockListLast">
|
||
<li class="blockList"> <h4>X509ExtendedTrustManager</h4> <pre>public X509ExtendedTrustManager()</pre> </li>
|
||
</ul> </li>
|
||
</ul>
|
||
<!-- ============ METHOD DETAIL ========== -->
|
||
<ul class="blockList">
|
||
<li class="blockList"><a name="method.detail">
|
||
<!-- --> </a> <h3>方法详细信息</h3> <a name="checkClientTrusted-java.security.cert.X509Certificate:A-java.lang.String-java.net.Socket-">
|
||
<!-- --> </a>
|
||
<ul class="blockList">
|
||
<li class="blockList"> <h4>checkClientTrusted</h4> <pre>public abstract void checkClientTrusted(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain,
|
||
<a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType,
|
||
<a href="../../../java/net/Socket.html" title="class in java.net">Socket</a> socket)
|
||
throws <a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></pre>
|
||
<div class="block">
|
||
<span>给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。</span>
|
||
<p> <span>验证类型由所使用的实际证书确定。</span> <span>例如，如果使用RSAPublicKey，则authType应为“RSA”。</span> <span>检查区分大小写。</span> </p>
|
||
<p> <span>如果<code>socket</code>参数的实例<a href="../../../javax/net/ssl/SSLSocket.html" title="javax.net.ssl中的类"><code>SSLSocket</code></a> ，和的端点识别算法<code>SSLParameters</code>非空，以防止人在这方面的中间人攻击，该地址<code>socket</code>连接到应该针对提出的同行的身份进行检查端终端识别算法中指定的终端实体X509证书。</span> </p>
|
||
<p> <span>如果<code>socket</code>参数的实例<a href="../../../javax/net/ssl/SSLSocket.html" title="javax.net.ssl中的类"><code>SSLSocket</code></a> ，和的算法约束<code>SSLParameters</code>非空，在认证路径中的每个证书，领域，如主体公钥，签名算法，密钥使用，扩展密钥用法等。需要符合该套接字上的算法约束。</span> </p>
|
||
</div>
|
||
<dl>
|
||
<dt>
|
||
<span class="paramLabel">参数</span>
|
||
</dt>
|
||
<dd>
|
||
<code>chain</code> - 对等证书链
|
||
</dd>
|
||
<dd>
|
||
<code>authType</code> - 使用密钥交换算法
|
||
</dd>
|
||
<dd>
|
||
<span><code>socket</code> - 用于此连接的套接字。</span>
|
||
<span>此参数可以为null，这表示实现不需要检查ssl参数</span>
|
||
</dd>
|
||
<dt>
|
||
<span class="throwsLabel">异常</span>
|
||
</dt>
|
||
<dd>
|
||
<code><a href="../../../java/lang/IllegalArgumentException.html" title="class in java.lang">IllegalArgumentException</a></code> -如果null或零长度的数组被传递在用于
|
||
<code>chain</code>参数，或者如果空或零长度字符串被传递在用于
|
||
<code>authType</code>参数
|
||
</dd>
|
||
<dd>
|
||
<code><a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></code> - 如果证书链不被该TrustManager信任
|
||
</dd>
|
||
<dt>
|
||
<span class="seeLabel">另请参见：</span>
|
||
</dt>
|
||
<dd>
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getEndpointIdentificationAlgorithm--"><code>SSLParameters.getEndpointIdentificationAlgorithm()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setEndpointIdentificationAlgorithm-java.lang.String-"><code>SSLParameters.setEndpointIdentificationAlgorithm(String)</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getAlgorithmConstraints--"><code>SSLParameters.getAlgorithmConstraints()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setAlgorithmConstraints-java.security.AlgorithmConstraints-"><code>SSLParameters.setAlgorithmConstraints(AlgorithmConstraints)</code></a>
|
||
</dd>
|
||
</dl> </li>
|
||
</ul> <a name="checkServerTrusted-java.security.cert.X509Certificate:A-java.lang.String-java.net.Socket-">
|
||
<!-- --> </a>
|
||
<ul class="blockList">
|
||
<li class="blockList"> <h4>checkServerTrusted</h4> <pre>public abstract void checkServerTrusted(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain,
|
||
<a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType,
|
||
<a href="../../../java/net/Socket.html" title="class in java.net">Socket</a> socket)
|
||
throws <a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></pre>
|
||
<div class="block">
|
||
<span>给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。</span>
|
||
<p> <span>认证类型是表示为字符串的密码套件的密钥交换算法部分，例如“RSA”，“DHE_DSS”。</span> <span>注意：对于某些可导出的密码套件，密钥交换算法在握手期间在运行时确定。</span> <span>例如，对于TLS_RSA_EXPORT_WITH_RC4_40_MD5，当使用短暂RSA密钥进行密钥交换时，authType应为RSA_EXPORT，当使用来自服务器证书的密钥时，authType应为RSA_EXPORT。</span> <span>检查区分大小写。</span> </p>
|
||
<p> <span>如果<code>socket</code>参数的实例<a href="../../../javax/net/ssl/SSLSocket.html" title="javax.net.ssl中的类"><code>SSLSocket</code></a> ，和的端点识别算法<code>SSLParameters</code>非空，以防止人在这方面的中间人攻击，该地址<code>socket</code>连接到应该针对提出的同行的身份进行检查终端实体X509证书，如端点识别算法中指定的。</span> </p>
|
||
<p> <span>如果<code>socket</code>参数的实例<a href="../../../javax/net/ssl/SSLSocket.html" title="javax.net.ssl中的类"><code>SSLSocket</code></a> ，和的算法约束<code>SSLParameters</code>非空，在认证路径中的每个证书，领域，如主体公钥，签名算法，密钥使用，扩展密钥用法等。需要符合该套接字上的算法约束。</span> </p>
|
||
</div>
|
||
<dl>
|
||
<dt>
|
||
<span class="paramLabel">参数</span>
|
||
</dt>
|
||
<dd>
|
||
<code>chain</code> - 对等证书链
|
||
</dd>
|
||
<dd>
|
||
<code>authType</code> - 使用密钥交换算法
|
||
</dd>
|
||
<dd>
|
||
<span><code>socket</code> - 用于此连接的套接字。</span>
|
||
<span>此参数可以为null，这表示实现不需要检查ssl参数</span>
|
||
</dd>
|
||
<dt>
|
||
<span class="throwsLabel">异常</span>
|
||
</dt>
|
||
<dd>
|
||
<code><a href="../../../java/lang/IllegalArgumentException.html" title="class in java.lang">IllegalArgumentException</a></code> -如果null或零长度的数组被传递在用于
|
||
<code>chain</code>参数，或者如果空或零长度字符串被传递在用于
|
||
<code>authType</code>参数
|
||
</dd>
|
||
<dd>
|
||
<code><a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></code> - 如果证书链不被该TrustManager信任
|
||
</dd>
|
||
<dt>
|
||
<span class="seeLabel">另请参见：</span>
|
||
</dt>
|
||
<dd>
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getEndpointIdentificationAlgorithm--"><code>SSLParameters.getEndpointIdentificationAlgorithm()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setEndpointIdentificationAlgorithm-java.lang.String-"><code>SSLParameters.setEndpointIdentificationAlgorithm(String)</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getAlgorithmConstraints--"><code>SSLParameters.getAlgorithmConstraints()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setAlgorithmConstraints-java.security.AlgorithmConstraints-"><code>SSLParameters.setAlgorithmConstraints(AlgorithmConstraints)</code></a>
|
||
</dd>
|
||
</dl> </li>
|
||
</ul> <a name="checkClientTrusted-java.security.cert.X509Certificate:A-java.lang.String-javax.net.ssl.SSLEngine-">
|
||
<!-- --> </a>
|
||
<ul class="blockList">
|
||
<li class="blockList"> <h4>checkClientTrusted</h4> <pre>public abstract void checkClientTrusted(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain,
|
||
<a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType,
|
||
<a href="../../../javax/net/ssl/SSLEngine.html" title="class in javax.net.ssl">SSLEngine</a> engine)
|
||
throws <a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></pre>
|
||
<div class="block">
|
||
<span>给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。</span>
|
||
<p> <span>验证类型由所使用的实际证书确定。</span> <span>例如，如果使用RSAPublicKey，则authType应为“RSA”。</span> <span>检查区分大小写。</span> </p>
|
||
<p> <span>如果<code>engine</code>参数是可用的，和的端点识别算法<code>SSLParameters</code>非空，以防止人在这方面的中间人攻击，该地址<code>engine</code>连接到要反对在最终呈现体的身份进行检查实体X509证书，如端点识别算法中规定的。</span> </p>
|
||
<p> <span>如果<code>engine</code>参数可用，并且SSLParameters的算法<code>SSLParameters</code>是非空的，对于认证路径中的每个证书，诸如主题公钥，签名算法，密钥使用，扩展密钥使用等领域需要符合到这个引擎上的算法约束。</span> </p>
|
||
</div>
|
||
<dl>
|
||
<dt>
|
||
<span class="paramLabel">参数</span>
|
||
</dt>
|
||
<dd>
|
||
<code>chain</code> - 对等证书链
|
||
</dd>
|
||
<dd>
|
||
<code>authType</code> - 使用密钥交换算法
|
||
</dd>
|
||
<dd>
|
||
<span><code>engine</code> - 用于此连接的引擎。</span>
|
||
<span>此参数可以为null，这表示实现不需要检查ssl参数</span>
|
||
</dd>
|
||
<dt>
|
||
<span class="throwsLabel">异常</span>
|
||
</dt>
|
||
<dd>
|
||
<code><a href="../../../java/lang/IllegalArgumentException.html" title="class in java.lang">IllegalArgumentException</a></code> -如果null或零长度的数组被传递在用于
|
||
<code>chain</code>参数，或者如果空或零长度字符串被传递在用于
|
||
<code>authType</code>参数
|
||
</dd>
|
||
<dd>
|
||
<code><a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></code> - 如果证书链不被该TrustManager信任
|
||
</dd>
|
||
<dt>
|
||
<span class="seeLabel">另请参见：</span>
|
||
</dt>
|
||
<dd>
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getEndpointIdentificationAlgorithm--"><code>SSLParameters.getEndpointIdentificationAlgorithm()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setEndpointIdentificationAlgorithm-java.lang.String-"><code>SSLParameters.setEndpointIdentificationAlgorithm(String)</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getAlgorithmConstraints--"><code>SSLParameters.getAlgorithmConstraints()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setAlgorithmConstraints-java.security.AlgorithmConstraints-"><code>SSLParameters.setAlgorithmConstraints(AlgorithmConstraints)</code></a>
|
||
</dd>
|
||
</dl> </li>
|
||
</ul> <a name="checkServerTrusted-java.security.cert.X509Certificate:A-java.lang.String-javax.net.ssl.SSLEngine-">
|
||
<!-- --> </a>
|
||
<ul class="blockListLast">
|
||
<li class="blockList"> <h4>checkServerTrusted</h4> <pre>public abstract void checkServerTrusted(<a href="../../../java/security/cert/X509Certificate.html" title="class in java.security.cert">X509Certificate</a>[] chain,
|
||
<a href="../../../java/lang/String.html" title="class in java.lang">String</a> authType,
|
||
<a href="../../../javax/net/ssl/SSLEngine.html" title="class in javax.net.ssl">SSLEngine</a> engine)
|
||
throws <a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></pre>
|
||
<div class="block">
|
||
<span>给定对等体提供的部分或完整证书链，根据认证类型和ssl参数构建和验证证书路径。</span>
|
||
<p> <span>认证类型是表示为字符串的密码套件的密钥交换算法部分，例如“RSA”，“DHE_DSS”。</span> <span>注意：对于某些可导出的密码套件，密钥交换算法在握手期间在运行时确定。</span> <span>例如，对于TLS_RSA_EXPORT_WITH_RC4_40_MD5，当使用短暂RSA密钥进行密钥交换时，authType应为RSA_EXPORT，当使用来自服务器证书的密钥时，authType应为RSA_EXPORT。</span> <span>检查区分大小写。</span> </p>
|
||
<p> <span>如果<code>engine</code>参数是可用的，和的端点识别算法<code>SSLParameters</code>非空，以防止人在这方面的中间人攻击，该地址<code>engine</code>连接到要反对在最终呈现体的身份进行检查实体X509证书，如端点识别算法中规定的。</span> </p>
|
||
<p> <span>如果<code>engine</code>参数可用，并且SSLParameters的算法<code>SSLParameters</code>是非空的，对于认证路径中的每个证书，主题公钥，签名算法，密钥使用，扩展密钥使用等领域需要符合到这个引擎上的算法约束。</span> </p>
|
||
</div>
|
||
<dl>
|
||
<dt>
|
||
<span class="paramLabel">参数</span>
|
||
</dt>
|
||
<dd>
|
||
<code>chain</code> - 对等证书链
|
||
</dd>
|
||
<dd>
|
||
<code>authType</code> - 使用密钥交换算法
|
||
</dd>
|
||
<dd>
|
||
<span><code>engine</code> - 用于此连接的引擎。</span>
|
||
<span>此参数可以为null，这表示实现不需要检查ssl参数</span>
|
||
</dd>
|
||
<dt>
|
||
<span class="throwsLabel">异常</span>
|
||
</dt>
|
||
<dd>
|
||
<code><a href="../../../java/lang/IllegalArgumentException.html" title="class in java.lang">IllegalArgumentException</a></code> -如果null或零长度的数组被传递在用于
|
||
<code>chain</code>参数，或者如果空或零长度字符串被传递在用于
|
||
<code>authType</code>参数
|
||
</dd>
|
||
<dd>
|
||
<code><a href="../../../java/security/cert/CertificateException.html" title="class in java.security.cert">CertificateException</a></code> - 如果证书链不被该TrustManager信任
|
||
</dd>
|
||
<dt>
|
||
<span class="seeLabel">另请参见：</span>
|
||
</dt>
|
||
<dd>
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getEndpointIdentificationAlgorithm--"><code>SSLParameters.getEndpointIdentificationAlgorithm()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setEndpointIdentificationAlgorithm-java.lang.String-"><code>SSLParameters.setEndpointIdentificationAlgorithm(String)</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#getAlgorithmConstraints--"><code>SSLParameters.getAlgorithmConstraints()</code></a> ，
|
||
<a href="../../../javax/net/ssl/SSLParameters.html#setAlgorithmConstraints-java.security.AlgorithmConstraints-"><code>SSLParameters.setAlgorithmConstraints(AlgorithmConstraints)</code></a>
|
||
</dd>
|
||
</dl> </li>
|
||
</ul> </li>
|
||
</ul> </li>
|
||
</ul>
|
||
</div>
|
||
</div> |