80 lines
9.7 KiB
Plaintext
80 lines
9.7 KiB
Plaintext
|
Êþº¾ 4™
|
|||
|
|
java/lang/Object <init> ()V
|
|||
|
|
|
|||
|
|
,org/mariadb/jdbc/client/tls/HostnameVerifier isIPv4 (Ljava/lang/String;)Z
|
|||
|
|
isIPv6 java/util/StringTokenizer java/util/Locale ROOT Ljava/util/Locale;
|
|||
|
|
java/lang/String toLowerCase &(Ljava/util/Locale;)Ljava/lang/String; .
|
|||
|
|
! " '(Ljava/lang/String;Ljava/lang/String;)V
|
|||
|
|
$ % & countTokens ()I
|
|||
|
|
( ) *
|
|||
|
|
hasMoreTokens ()Z
|
|||
|
|
, - . nextToken ()Ljava/lang/String;
|
|||
|
|
0 1 2 matchWildCards ((ZLjava/lang/String;Ljava/lang/String;)Z 4 javax/net/ssl/SSLException 6 java/lang/StringBuilder
|
|||
|
|
5
|
|||
|
|
9 : ; normalizedHostMsg &(Ljava/lang/String;)Ljava/lang/String;
|
|||
|
|
5 = > ? append -(Ljava/lang/String;)Ljava/lang/StringBuilder; A ' doesn't correspond to certificate CN " C "" : wildcards not possible for IPs
|
|||
|
|
5 E F . toString
|
|||
|
|
3 H I (Ljava/lang/String;)V K *
|
|||
|
|
M N O indexOf (Ljava/lang/String;)I Q &WildCards not possible when using IP's
|
|||
|
|
S T U substring (II)Ljava/lang/String;
|
|||
|
|
W T X (I)Ljava/lang/String;
|
|||
|
|
Z [ & length
|
|||
|
|
] ^ endsWith
|
|||
|
|
` a b equals (Ljava/lang/Object;)Z d javax/naming/ldap/LdapName
|
|||
|
|
c H
|
|||
|
|
c g h i getRdns ()Ljava/util/List; k l m n o java/util/List iterator ()Ljava/util/Iterator; q r s t * java/util/Iterator hasNext q v w x next ()Ljava/lang/Object; z javax/naming/ldap/Rdn
|
|||
|
|
y | } . getType CN
|
|||
|
|
� ‚ equalsIgnoreCase
|
|||
|
|
y „ … x getValue
|
|||
|
|
E ˆ !javax/naming/InvalidNameException Š
|
|||
|
|
DN value " Π" is invalid
|
|||
|
|
Ž � � ‘ ’ java/net/InetAddress getByName *(Ljava/lang/String;)Ljava/net/InetAddress;
|
|||
|
|
Ž ” • . getHostAddress — java/net/UnknownHostException ™ IPv4 host " › IPv6 host " �
|
|||
|
|
DNS host " Ÿ " ¡ ¢ £ IP_V4 Ljava/util/regex/Pattern;
|
|||
|
|
¥ ¦ § ¨ © java/util/regex/Pattern matcher 3(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
|
|||
|
|
« ¬ ® * java/util/regex/Matcher matches ° ± £ IP_V6 ³ ´ £ IP_V6_COMPRESSED
|
|||
|
|
¶ · ¸ ¹ º "java/security/cert/X509Certificate getSubjectAlternativeNames ()Ljava/util/Collection; ¼ <org/mariadb/jdbc/client/tls/HostnameVerifier$SubjectAltNames
|
|||
|
|
» ¾ ¿ 3(Lorg/mariadb/jdbc/client/tls/HostnameVerifier$1;)V Á l  java/util/Collection k Ä Å & size k Ç È É get (I)Ljava/lang/Object; Ë java/lang/Integer
|
|||
|
|
Ê Í Î & intValue Ð 8org/mariadb/jdbc/client/tls/HostnameVerifier$GeneralName Ò Ó Ô Õ Ö 6org/mariadb/jdbc/client/tls/HostnameVerifier$Extension DNS 8Lorg/mariadb/jdbc/client/tls/HostnameVerifier$Extension;
|
|||
|
|
Ï Ø Ù M(Ljava/lang/String;Lorg/mariadb/jdbc/client/tls/HostnameVerifier$Extension;)V
|
|||
|
|
» Û Ü Ý add =(Lorg/mariadb/jdbc/client/tls/HostnameVerifier$GeneralName;)V Ò ß à Ö IP
|
|||
|
|
â ã ä getSubjectAltNames d(Ljava/security/cert/X509Certificate;)Lorg/mariadb/jdbc/client/tls/HostnameVerifier$SubjectAltNames;
|
|||
|
|
» æ ç * isEmpty
|
|||
|
|
» é ê i getGeneralNames ì í î logger "Lorg/mariadb/jdbc/util/log/Logger; ð ñ ò ó * org/mariadb/jdbc/util/log/Logger isTraceEnabled õ ?Conn={}. IPv4 verification of hostname : type={} value={} to {}
|
|||
|
|
÷ ø ù ú û java/lang/Long valueOf (J)Ljava/lang/Long;
|
|||
|
|
Ï ý þ ÿ
|
|||
|
|
access$100 t(Lorg/mariadb/jdbc/client/tls/HostnameVerifier$GeneralName;)Lorg/mariadb/jdbc/client/tls/HostnameVerifier$Extension;
|
|||
|
|
Ï
|
|||
|
|
access$200 N(Lorg/mariadb/jdbc/client/tls/HostnameVerifier$GeneralName;)Ljava/lang/String; ð trace ((Ljava/lang/String;[Ljava/lang/Object;)V
|
|||
|
|
|
|||
|
|
; normaliseAddress ?Conn={}. IPv6 verification of hostname : type={} value={} to {} >Conn={}. DNS verification of hostname : type={} value={} to {}
|
|||
|
|
matchDns '(Ljava/lang/String;Ljava/lang/String;)Z
|
|||
|
|
¶ getSubjectX500Principal *()Ljavax/security/auth/x500/X500Principal; &javax/security/auth/x500/X500Principal RFC2253
|
|||
|
|
; getName
|
|||
|
|
; extractCommonName" 'CN not found in certificate principal "
|
|||
|
|
5$ >% -(Ljava/lang/Object;)Ljava/lang/StringBuilder;' %" and certificate doesn't contain SAN) " and + doesn't correspond to - 3Conn={}. DNS verification of hostname : CN={} to {}/ and 1 .java/security/cert/CertificateParsingException3 certificate parsing error :
|
|||
|
|
05 6 .
|
|||
|
|
getMessage
|
|||
|
|
89: ;< !org/mariadb/jdbc/util/log/Loggers getLogger 5(Ljava/lang/Class;)Lorg/mariadb/jdbc/util/log/Logger;> �^(([1-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.)(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){2}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$
|
|||
|
|
¥@ AB compile -(Ljava/lang/String;)Ljava/util/regex/Pattern;D (^[0-9a-fA-F]{1,4}(:[0-9a-fA-F]{1,4}){7}$F ^^(([0-9A-Fa-f]{1,4}(:[0-9A-Fa-f]{1,4}){0,5})?)::(([0-9A-Fa-f]{1,4}(:[0-9A-Fa-f]{1,4}){0,5})?)$ Code LineNumberTable LocalVariableTable this .Lorg/mariadb/jdbc/client/tls/HostnameVerifier; exception Ljavax/net/ssl/SSLException; hostname Ljava/lang/String;
|
|||
|
|
tlsDnsPattern hostIsIp Z
|
|||
|
|
hostnameSt Ljava/util/StringTokenizer;
|
|||
|
|
templateSt
|
|||
|
|
StackMapTable
|
|||
|
|
Exceptions beforeStartIdx I beforeWildcard first
|
|||
|
|
afterWildcard
|
|||
|
|
hostnameToken tlsDnsToken
|
|||
|
|
wildcardIndex token obj Ljava/lang/Object; rdn Ljavax/naming/ldap/Rdn; ldapName Ljavax/naming/ldap/LdapName; e #Ljavax/naming/InvalidNameException; principal inetAddress Ljava/net/InetAddress;
|
|||
|
|
unexpected Ljava/net/UnknownHostException; normalizedHost msg Ljava/lang/StringBuilder; ip normalizedSubjectAlt
|
|||
|
|
altNameDns altNameIp type entry Ljava/util/List; cert $Ljava/security/cert/X509Certificate; entries Ljava/util/Collection; subjectAltNames >Lorg/mariadb/jdbc/client/tls/HostnameVerifier$SubjectAltNames; LocalVariableTypeTable Ljava/util/List<*>; +Ljava/util/Collection<Ljava/util/List<*>;>; verify :(Ljava/lang/String;Ljava/security/cert/X509Certificate;J)V :Lorg/mariadb/jdbc/client/tls/HostnameVerifier$GeneralName; normalisedHost errorMsg subjectPrincipal (Ljavax/security/auth/x500/X500Principal; cn normalizedCn cpe 0Ljava/security/cert/CertificateParsingException; host serverThreadId J
|
|||
|
|
lowerCaseHost <clinit>
|
|||
|
|
SourceFile HostnameVerifier.java InnerClasses SubjectAltNames– .org/mariadb/jdbc/client/tls/HostnameVerifier$1 GeneralName Extension ! í î ¢ £ ± £ ´ £ G / *· ± H I JK
|
|||
|
|
G < Œ*¸ š
|
|||
|
|
*¸
|
|||
|
|
™ § =» Y*² ¶ · N» Y+² ¶ · :-¶ #¶ #Ÿ ¬-¶ '™ -¶ +¶ +¸ /šÿ쬧 ,:» 3Y» 5Y· 7*¸ 8¶ <@¶ <+¶ <B¶ <¶ D· G¿¬ E ] a 3 H 6
|
|||
|
|
0 1 % 2 7 3 C 4 E 8 L 9 \ : ^ C a = c > o ? Š DI > c 'LM ŒNO ŒPO xQR % gST 7 UUT V @þ 1 B 3(W 3
|
|||
|
|
1 2 G � ‚,J¶ L>+: Ÿ o™
|
|||
|
|
» 3YP· G¿6,: Ÿ N ¶ R: `¶ V:¶ L6Ÿ
|
|||
|
|
™
|
|||
|
|
™ ¬6¶ Y`¶ V:J¶ L>§ÿ³¶ \¬,¶ _¬ H N I J
|
|||
|
|
K L M O Q # S ( T 1 U ; W D X T Y V \ Y ^ h _ p ` s a { eI \ D ,XY 1 BZO [[R # X\O ‚QR ‚]O ‚^O {_Y
|