Class CertificateValidatorApp

java.lang.Object
org.eblocker.certificate.validator.squid.CertificateValidatorApp

public class CertificateValidatorApp extends Object
This class implements a SSL / TLS validator, which communicates via stdin and stdout with squid (compiled with SSL features). This external validator is called by squid with the whole certificate chain, AFTER it did a validation with OpenSSL.

For the specifications of the protocol, that is spoken with squid take a look here: http://wiki.squid-cache.org/Features/SslServerCertValidator Note: Please take a look at the class 'CertificateValidationRequestReader', to get an idea of how the protocol really works (and not how it should work).

This standalone program (which is launched by squid) can have one argument: CertificateValidatorApp [useConcurrency: true or false]

To really understand the protocol (wiki is wrong), take a look into squid's sourcecode: cert_validate_message.cc, cert_validate_message.h, ResultCode.h, ErrorDetail.h

http://www.squid-cache.org/Doc/config/sslcrtvalidator_program/ http://www.squid-cache.org/Doc/config/sslcrtvalidator_children/

  • Constructor Details

    • CertificateValidatorApp

      public CertificateValidatorApp(Properties properties)
  • Method Details

    • main

      public static void main(String[] args)