6

How can I write a X509TrustManager in Java that used DANE (DNS-based Authentication of Named Entities)?

Are there any samples or a library? Or has Java build in support for DANE?

Horcrux7
  • 21,867
  • 21
  • 85
  • 134
  • 1
    You might want to rephrase... it sounds a lot like your asking for a resource. – jww May 15 '14 at 18:32
  • ... and you wouldn't like us when we see you're asking for libraries or off-site resources. – Charles May 16 '14 at 01:17
  • @jww and Charles I does not understand your comments. It seems my English is to bad. A resource is for me some things like a file. Can be that you means another thing. --- I search for a solution of my problem. I am open for every possible solution. Sample code, a library, a build in solution or some thing else. Currently I have no idea where I should start. The validating of a certificate via DANE seems me a standard operation. Of course it is very new. – Horcrux7 May 17 '14 at 08:26

1 Answers1

1

BouncyCastle cryptographic library provides DANE support. You can find dane package documentation here.

zacheusz
  • 8,415
  • 3
  • 32
  • 57
  • This sounds great. Do you know a sample for it. A look on the API doc does not give a hint for beginning,. – Horcrux7 Aug 25 '15 at 13:55
  • 1
    Look at this test sources: https://github.com/bcgit/bc-java/blob/master/pkix/src/test/java/org/bouncycastle/cert/test/DANETest.java – zacheusz Aug 27 '15 at 20:07