Class ClientCertificateMatcher

All Implemented Interfaces:
Matcher<List<X509Certificate>>

public class ClientCertificateMatcher extends ObjectWithReflectiveEqualsHashCodeToString implements Matcher<List<X509Certificate>>
Matches an expectation's ClientCertificate criteria against the client-certificate chain a request was received with (the request's clientCertificateChain).

Matching is always performed against the leaf certificate (index 0) of the chain — the client's own certificate. See ClientCertificate for the full description of the subject, issuer and fingerprintSha256 criteria and their NottableString (regex / negation) semantics.

A blank criterion (no ClientCertificate, or every field blank) matches every request, exactly like the other request-property matchers. A non-blank criterion never matches a request that presents no certificate chain.

Author:
jamesdbloom