michael@0: /*
michael@0:  * ====================================================================
michael@0:  * Licensed to the Apache Software Foundation (ASF) under one
michael@0:  * or more contributor license agreements.  See the NOTICE file
michael@0:  * distributed with this work for additional information
michael@0:  * regarding copyright ownership.  The ASF licenses this file
michael@0:  * to you under the Apache License, Version 2.0 (the
michael@0:  * "License"); you may not use this file except in compliance
michael@0:  * with the License.  You may obtain a copy of the License at
michael@0:  *
michael@0:  *   http://www.apache.org/licenses/LICENSE-2.0
michael@0:  *
michael@0:  * Unless required by applicable law or agreed to in writing,
michael@0:  * software distributed under the License is distributed on an
michael@0:  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
michael@0:  * KIND, either express or implied.  See the License for the
michael@0:  * specific language governing permissions and limitations
michael@0:  * under the License.
michael@0:  * ====================================================================
michael@0:  *
michael@0:  * This software consists of voluntary contributions made by many
michael@0:  * individuals on behalf of the Apache Software Foundation.  For more
michael@0:  * information on the Apache Software Foundation, please see
michael@0:  * <http://www.apache.org/>.
michael@0:  *
michael@0:  */
michael@0: 
michael@0: package ch.boye.httpclientandroidlib.conn.ssl;
michael@0: 
michael@0: import javax.net.ssl.SSLException;
michael@0: 
michael@0: import ch.boye.httpclientandroidlib.annotation.Immutable;
michael@0: 
michael@0: /**
michael@0:  * The Strict HostnameVerifier works the same way as Sun Java 1.4, Sun
michael@0:  * Java 5, Sun Java 6-rc.  It's also pretty close to IE6.  This
michael@0:  * implementation appears to be compliant with RFC 2818 for dealing with
michael@0:  * wildcards.
michael@0:  * <p/>
michael@0:  * The hostname must match either the first CN, or any of the subject-alts.
michael@0:  * A wildcard can occur in the CN, and in any of the subject-alts.  The
michael@0:  * one divergence from IE6 is how we only check the first CN.  IE6 allows
michael@0:  * a match against any of the CNs present.  We decided to follow in
michael@0:  * Sun Java 1.4's footsteps and only check the first CN.  (If you need
michael@0:  * to check all the CN's, feel free to write your own implementation!).
michael@0:  * <p/>
michael@0:  * A wildcard such as "*.foo.com" matches only subdomains in the same
michael@0:  * level, for example "a.foo.com".  It does not match deeper subdomains
michael@0:  * such as "a.b.foo.com".
michael@0:  *
michael@0:  *
michael@0:  * @since 4.0
michael@0:  */
michael@0: @Immutable
michael@0: public class StrictHostnameVerifier extends AbstractVerifier {
michael@0: 
michael@0:     public final void verify(
michael@0:             final String host,
michael@0:             final String[] cns,
michael@0:             final String[] subjectAlts) throws SSLException {
michael@0:         verify(host, cns, subjectAlts, true);
michael@0:     }
michael@0: 
michael@0:     @Override
michael@0:     public final String toString() {
michael@0:         return "STRICT";
michael@0:     }
michael@0: 
michael@0: }