Home | History | Annotate | Download | only in conscrypt
      1 /*
      2  * Copyright (C) 2012 The Android Open Source Project
      3  *
      4  * Licensed under the Apache License, Version 2.0 (the "License");
      5  * you may not use this file except in compliance with the License.
      6  * You may obtain a copy of the License at
      7  *
      8  *      http://www.apache.org/licenses/LICENSE-2.0
      9  *
     10  * Unless required by applicable law or agreed to in writing, software
     11  * distributed under the License is distributed on an "AS IS" BASIS,
     12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     13  * See the License for the specific language governing permissions and
     14  * limitations under the License.
     15  */
     16 
     17 package org.conscrypt;
     18 
     19 import java.security.cert.CertificateException;
     20 import java.security.cert.X509Certificate;
     21 import java.util.List;
     22 
     23 /**
     24  * Interface for classes that implement certificate pinning for use in {@link TrustManagerImpl}.
     25  *
     26  * @hide
     27  */
     28 @Internal
     29 public interface CertPinManager {
     30     /**
     31      * Given a {@code hostname} and a {@code chain} this verifies that the
     32      * certificate chain includes pinned certificates if pinning is requested
     33      * for {@code hostname}.
     34      */
     35     void checkChainPinning(String hostname, List<X509Certificate> chain)
     36             throws CertificateException;
     37 }
     38