| A configurable trust manager built on X509TrustManager.
If set to 'open' trust, the default, will get us into sites for whom we do
not have the CA or any of intermediary CAs that go to make up the cert chain
of trust. Will also get us past selfsigned and expired certs. 'loose'
trust will get us into sites w/ valid certs even if they are just
selfsigned. 'normal' is any valid cert not including selfsigned. 'strict'
means cert must be valid and the cert DN must match server name.
Based on pointers in
SSL
Guide,
and readings done in JSSE
Guide.
TODO: Move to an ssl subpackage when we have other classes other than
just this one.
author:
stack
version:
$Id: ConfigurableX509TrustManager.java 4232 2006-05-15 21:52:30Z stack-sf $ |
