Package org.conscrypt.ct

Class CTVerifier

java.lang.Object

org.conscrypt.ct.CTVerifier

@Internal
public class CTVerifier
extends Object

Constructor Summary

Constructors

Constructor	Description
CTVerifier(CTLogStore store)

Method Summary

Modifier and Type	Method	Description
CTVerificationResult	verifySignedCertificateTimestamps(List<X509Certificate> chain, byte[] tlsData, byte[] ocspData)
CTVerificationResult	verifySignedCertificateTimestamps(OpenSSLX509Certificate[] chain, byte[] tlsData, byte[] ocspData)	Verify a certificate chain for transparency.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CTVerifier

public CTVerifier(CTLogStore store)

Method Detail

verifySignedCertificateTimestamps

public CTVerificationResult verifySignedCertificateTimestamps(List<X509Certificate> chain,
                                                              byte[] tlsData,
                                                              byte[] ocspData)
                                                       throws CertificateEncodingException

Throws:

CertificateEncodingException

verifySignedCertificateTimestamps

public CTVerificationResult verifySignedCertificateTimestamps(OpenSSLX509Certificate[] chain,
                                                              byte[] tlsData,
                                                              byte[] ocspData)
                                                       throws CertificateEncodingException

Verify a certificate chain for transparency. Signed timestamps are extracted from the leaf certificate, TLS extension, and stapled ocsp response, and verified against the list of known logs.

Throws:

IllegalArgumentException - if the chain is empty

CertificateEncodingException