org.eclipse.californium.scandium.dtls

Class CertificateVerify

java.lang.Object

org.eclipse.californium.scandium.dtls.HandshakeMessage

org.eclipse.californium.scandium.dtls.CertificateVerify

All Implemented Interfaces:

DTLSMessage

public final class CertificateVerify
extends HandshakeMessage

This message is used to provide explicit verification of a client certificate. This message is only sent following a client certificate that has signing capability (i.e., all certificates except those containing fixed Diffie-Hellman parameters). When sent, it MUST immediately follow the ClientKeyExchange message. For further details see RFC 5246.

Field Summary

Fields inherited from class org.eclipse.californium.scandium.dtls.HandshakeMessage

FRAGMENT_LENGTH_BITS, FRAGMENT_OFFSET_BITS, MESSAGE_HEADER_LENGTH_BYTES, MESSAGE_LENGTH_BITS, MESSAGE_SEQ_BITS, MESSAGE_TYPE_BITS

Constructor Summary

Constructors

Constructor and Description
CertificateVerify(SignatureAndHashAlgorithm signatureAndHashAlgorithm, PrivateKey clientPrivateKey, List<HandshakeMessage> handshakeMessages) Called by client to create its CertificateVerify message.

Method Summary

Methods

Modifier and Type	Method and Description
byte[]	fragmentToByteArray() The serialization of the handshake body (without the handshake header).
static HandshakeMessage	fromReader(org.eclipse.californium.elements.util.DatagramReader reader)
int	getMessageLength() Must be implemented by each subclass.
HandshakeType	getMessageType() Returns the type of the handshake message.
void	verifySignature(PublicKey clientPublicKey, List<HandshakeMessage> handshakeMessages) Tries to verify the client's signature contained in the CertificateVerify message.

Methods inherited from class org.eclipse.californium.scandium.dtls.HandshakeMessage

fragmentChanged, fromByteArray, fromGenericHandshakeMessage, getContentType, getFragmentLength, getFragmentOffset, getMessageSeq, getNextHandshakeMessage, getRawMessage, setMessageSeq, setNextHandshakeMessage, size, toByteArray, toString, writeTo

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

CertificateVerify

public CertificateVerify(SignatureAndHashAlgorithm signatureAndHashAlgorithm,
                 PrivateKey clientPrivateKey,
                 List<HandshakeMessage> handshakeMessages)

Called by client to create its CertificateVerify message.

Parameters:

signatureAndHashAlgorithm - the signature and hash algorithm used to create the signature.

clientPrivateKey - the client's private key to sign the signature.

handshakeMessages - the handshake messages which are signed.

Method Detail

getMessageType

public HandshakeType getMessageType()

Description copied from class: HandshakeMessage

Returns the type of the handshake message. See HandshakeType.

Specified by:

getMessageType in class HandshakeMessage

Returns:

the HandshakeType.

getMessageLength

public int getMessageLength()

Description copied from class: HandshakeMessage

Must be implemented by each subclass. The length is given in bytes and only includes the length of the subclass' specific fields (not the handshake message header).

Specified by:

getMessageLength in class HandshakeMessage

Returns:

the length of the message in bytes.

fragmentToByteArray

public byte[] fragmentToByteArray()

Description copied from class: HandshakeMessage

The serialization of the handshake body (without the handshake header). Must be implemented by each subclass. Except the ClientHello, the fragments are considered to be not modified. If a modification is required, call HandshakeMessage.fragmentChanged().

Specified by:

fragmentToByteArray in class HandshakeMessage

Returns:

the raw byte representation of the handshake body.

fromReader

public static HandshakeMessage fromReader(org.eclipse.californium.elements.util.DatagramReader reader)

verifySignature

public void verifySignature(PublicKey clientPublicKey,
                   List<HandshakeMessage> handshakeMessages)
                     throws HandshakeException

Tries to verify the client's signature contained in the CertificateVerify message.

Parameters:

clientPublicKey - the client's public key.

handshakeMessages - the handshake messages exchanged so far.

Throws:

HandshakeException - if the signature could not be verified.