Enum DaneVerificationResult

java.lang.Object
java.lang.Enum<DaneVerificationResult>
org.minidns.dane.DaneVerificationResult
All Implemented Interfaces:
Serializable, Comparable<DaneVerificationResult>
public enum DaneVerificationResult extends Enum<DaneVerificationResult>
The result of a DANE verification performed by DaneVerifier.

Note that a TLSA record set which contains usable records, none of which matches the certificate, does not result in a DaneVerificationResult, but in a DaneCertificateException being thrown.

  • Enum Constant Details

    • notAuthenticated

      public static final DaneVerificationResult notAuthenticated
      The TLSA response was not DNSSEC authenticated. DANE does not apply and PKIX validation is required.

    • noUsableTlsaRecords

      public static final DaneVerificationResult noUsableTlsaRecords
      The TLSA response was DNSSEC authenticated, but contained no usable TLSA records, that is, it either contained no TLSA records at all or only TLSA records with unsupported parameters. DANE does not apply and PKIX validation is required.

    • matchedPkixRequired

      public static final DaneVerificationResult matchedPkixRequired
      A TLSA record with the certificate usage PKIX-EE (1) matched the certificate. The DANE verification was successful, but PKIX validation is still required.

    • verified

      public static final DaneVerificationResult verified
      A TLSA record with the certificate usage DANE-EE (3) matched the certificate. The certificate is verified and no further validation is required.

  • Method Details

    • values

      public static DaneVerificationResult[] values()
      Returns an array containing the constants of this enum type, in the order they are declared.
      Returns:
      an array containing the constants of this enum type, in the order they are declared

    • valueOf

      public static DaneVerificationResult valueOf(String name)
      Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)
      Parameters:
      name - the name of the enum constant to be returned.
      Returns:
      the enum constant with the specified name
      Throws:
      IllegalArgumentException - if this enum type has no constant with the specified name
      NullPointerException - if the argument is null

    • isFullyVerified

      public boolean isFullyVerified()
      Check if the DANE verification alone is sufficient to verify the certificate.
      Returns:
      true if no further PKIX validation is required.

    • isDaneMatch

      public boolean isDaneMatch()
      Check if a TLSA record matched the certificate.
      Returns:
      true if a TLSA record matched the certificate.