jdk/src/share/classes/com/sun/net/ssl/X509TrustManager.java

/*
 * Copyright 2000-2004 Sun Microsystems, Inc.  All Rights Reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.  Sun designates this
 * particular file as subject to the "Classpath" exception as provided
 * by Sun in the LICENSE file that accompanied this code.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Sun Microsystems, Inc., 4150 Network Circle, Santa Clara,
 * CA 95054 USA or visit www.sun.com if you need additional information or
 * have any questions.
 */

/*
 * NOTE:  this file was copied from javax.net.ssl.X509TrustManager
 */

package com.sun.net.ssl;

import java.security.cert.X509Certificate;

/**
 * Instance of this interface manage which X509 certificates
 * may be used to authenticate the remote side of a secure
 * socket. Decisions may be based on trusted certificate
 * authorities, certificate revocation lists, online
 * status checking or other means.
 *
 * @deprecated As of JDK 1.4, this implementation-specific class was
 *      replaced by {@link javax.net.ssl.X509TrustManager}.
 */
@Deprecated
public interface X509TrustManager extends TrustManager {
    /**
     * Given the partial or complete certificate chain
     * provided by the peer, build a certificate path
     * to a trusted root and return true if it can be
     * validated and is trusted for client SSL authentication.
     *
     * @param chain the peer certificate chain
     */
    public boolean isClientTrusted(X509Certificate[] chain);

    /**
     * Given the partial or complete certificate chain
     * provided by the peer, build a certificate path
     * to a trusted root and return true if it can be
     * validated and is trusted for server SSL authentication.
     *
     * @param chain the peer certificate chain
     */
    public boolean isServerTrusted(X509Certificate[] chain);

    /**
     * Return an array of certificate authority certificates
     * which are trusted for authenticating peers.
     *
     * @return the acceptable CA issuer certificates
     */
    public X509Certificate[] getAcceptedIssuers();
}