net.lightbody.bmp.mitm

Class HostnameCertificateInfoGenerator

java.lang.Object

net.lightbody.bmp.mitm.HostnameCertificateInfoGenerator

All Implemented Interfaces:

CertificateInfoGenerator

public class HostnameCertificateInfoGenerator
extends Object
implements CertificateInfoGenerator

A CertificateInfoGenerator that uses only a hostname to populate a new CertificateInfo. The values in the upstream server's original X.509 certificate will be ignored.

Constructor Summary

Constructors

Constructor and Description
HostnameCertificateInfoGenerator()

Method Summary

Modifier and Type	Method and Description
CertificateInfo	generate(List<String> hostnames, X509Certificate originalCertificate) Generate a certificate for the specified hostnames, optionally using parameters from the originalCertificate.
protected Date	getNotAfter() Returns the default Not After date for impersonated certificates.
protected Date	getNotBefore() Returns the default Not Before date for impersonated certificates.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HostnameCertificateInfoGenerator

public HostnameCertificateInfoGenerator()

Method Detail

generate

public CertificateInfo generate(List<String> hostnames,
                                X509Certificate originalCertificate)

Description copied from interface: CertificateInfoGenerator

Generate a certificate for the specified hostnames, optionally using parameters from the originalCertificate.

Specified by:

generate in interface CertificateInfoGenerator

Parameters:

hostnames - the hostnames to generate the certificate for, which may include wildcards

originalCertificate - original X.509 certificate sent by the upstream server, which may be null

Returns:

CertificateInfo to be used to create an X509Certificate for the specified hostnames

getNotBefore

protected Date getNotBefore()

Returns the default Not Before date for impersonated certificates. Defaults to the current date minus 1 year.

getNotAfter

protected Date getNotAfter()

Returns the default Not After date for impersonated certificates. Defaults to the current date plus 1 year.