com.amazonaws.http.conn.ssl

Class MasterSecretValidators

java.lang.Object

com.amazonaws.http.conn.ssl.MasterSecretValidators

public class MasterSecretValidators
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static interface	MasterSecretValidators.MasterSecretValidator Interface to validate the master secret of a SSL session
static class	MasterSecretValidators.NoOpMasterSecretValidator Dummy implementation of MasterSecretValidators.MasterSecretValidator that always returns true.

Constructor Summary

Constructors

Constructor and Description
MasterSecretValidators()

Method Summary

Methods

Modifier and Type	Method and Description
static MasterSecretValidators.MasterSecretValidator	getMasterSecretValidator() The implementation of MasterSecretValidators.MasterSecretValidator depends on the JVM version.
static MasterSecretValidators.MasterSecretValidator	getMasterSecretValidator(JavaVersionParser.JavaVersion javaVersion)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MasterSecretValidators

public MasterSecretValidators()

Method Detail

getMasterSecretValidator

public static MasterSecretValidators.MasterSecretValidator getMasterSecretValidator()

The implementation of MasterSecretValidators.MasterSecretValidator depends on the JVM version. Certain JVMs are affected by a serious bug that could allow a malicious MITM to negotiate a null master secret. Non-affected JVMs return a dummy implementation that always returns true

Returns:

The correct implementation of MasterSecretValidators.MasterSecretValidator

See Also:

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html, https://access.redhat.com/security/cve/CVE-2014-6593

getMasterSecretValidator

public static MasterSecretValidators.MasterSecretValidator getMasterSecretValidator(JavaVersionParser.JavaVersion javaVersion)

Parameters:

javaVersion - Current Java version

Returns:

An appropriate MasterSecretValidators.MasterSecretValidator per the Java version in use