C
- The certificate type supported by this callback.public interface TlsTmSecurityCallback<C extends Certificate>
TlsTmSecurityCallback
is implemented by the SnmpTlsMib (of SNMP4J-Agent), for example, to resolve
(lookup) the tmSecurityName
for incoming requests.Modifier and Type | Method and Description |
---|---|
String |
getLocalCertificateAlias(Address targetAddress)
Gets the local certificate alias to be used for the supplied target address.
|
OctetString |
getSecurityName(C[] peerCertificateChain)
Gets the tmSecurityName (see RFC 5953) from the certificate chain of the communication peer that needs to be
authenticated.
|
boolean |
isAcceptedIssuer(C issuerCertificate)
Check if the supplied issuer certificate is accepted as server.
|
boolean |
isClientCertificateAccepted(C peerEndCertificate)
Check if the supplied peer end certificate is accepted as client.
|
boolean |
isServerCertificateAccepted(C[] peerCertificateChain)
Check if the supplied peer certificate chain is accepted as server.
|
OctetString getSecurityName(C[] peerCertificateChain)
peerCertificateChain
- an array of Certificate
s with the peer's own certificate first followed by any CA authorities.boolean isClientCertificateAccepted(C peerEndCertificate) throws CertificateException
peerEndCertificate
- a client Certificate instance to check acceptance for.true
if the certificate is accepted, false
otherwise, i.e. if verification could not
performed, i.e. because it was not configured sufficiently.CertificateException
- if the certificate is rejected.boolean isServerCertificateAccepted(C[] peerCertificateChain) throws CertificateException
peerCertificateChain
- a server Certificate chain to check acceptance for.true
if the certificate is accepted, false
otherwise, i.e. if verification could not
performed, i.e. because it was not configured sufficiently.CertificateException
- if the certificate is rejected.boolean isAcceptedIssuer(C issuerCertificate) throws CertificateException
issuerCertificate
- an issuer Certificate instance to check acceptance for.true
if the certificate is accepted, false
otherwise, i.e. if verification could not
performed, i.e. because it was not configured sufficiently.CertificateException
- if the certificate is rejected.String getLocalCertificateAlias(Address targetAddress)
targetAddress
- a target address or null
if the default local certificate alias needs to be retrieved.null
is returned which could cause a
protocol violation if the local key store contains more than one certificate.Copyright © 2019 SNMP4J.org. All rights reserved.