1 /*
   2  * Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
   3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   4  *
   5  * This code is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License version 2 only, as
   7  * published by the Free Software Foundation.  Oracle designates this
   8  * particular file as subject to the "Classpath" exception as provided
   9  * by Oracle in the LICENSE file that accompanied this code.
  10  *
  11  * This code is distributed in the hope that it will be useful, but WITHOUT
  12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  14  * version 2 for more details (a copy is included in the LICENSE file that
  15  * accompanied this code).
  16  *
  17  * You should have received a copy of the GNU General Public License version
  18  * 2 along with this work; if not, write to the Free Software Foundation,
  19  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  20  *
  21  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  22  * or visit www.oracle.com if you need additional information or have any
  23  * questions.
  24  */
  25 
  26 package javax.net.ssl;
  27 
  28 import java.security.*;
  29 
  30 /**
  31  * This class is for various network permissions.
  32  * An SSLPermission contains a name (also referred to as a "target name") but
  33  * no actions list; you either have the named permission
  34  * or you don't.
  35  * <P>
  36  * The target name is the name of the network permission (see below). The naming
  37  * convention follows the  hierarchical property naming convention.
  38  * Also, an asterisk
  39  * may appear at the end of the name, following a ".", or by itself, to
  40  * signify a wildcard match. For example: "foo.*" and "*" signify a wildcard
  41  * match, while "*foo" and "a*b" do not.
  42  * <P>
  43  * The following table lists all the possible SSLPermission target names,
  44  * and for each provides a description of what the permission allows
  45  * and a discussion of the risks of granting code the permission.
  46  *
  47  * <table border=1 cellpadding=5
  48  *  summary="permission name, what it allows, and associated risks">
  49  * <tr>
  50  * <th>Permission Target Name</th>
  51  * <th>What the Permission Allows</th>
  52  * <th>Risks of Allowing this Permission</th>
  53  * </tr>
  54  *
  55  * <tr>
  56  *   <td>setHostnameVerifier</td>
  57  *   <td>The ability to set a callback which can decide whether to
  58  * allow a mismatch between the host being connected to by
  59  * an HttpsURLConnection and the common name field in
  60  * server certificate.
  61  *  </td>
  62  *   <td>Malicious
  63  * code can set a verifier that monitors host names visited by
  64  * HttpsURLConnection requests or that allows server certificates
  65  * with invalid common names.
  66  * </td>
  67  * </tr>
  68  *
  69  * <tr>
  70  *   <td>getSSLSessionContext</td>
  71  *   <td>The ability to get the SSLSessionContext of an SSLSession.
  72  * </td>
  73  *   <td>Malicious code may monitor sessions which have been established
  74  * with SSL peers or might invalidate sessions to slow down performance.
  75  * </td>
  76  * </tr>
  77  *
  78  * <tr>
  79  *   <td>setDefaultSSLContext</td>
  80  *   <td>The ability to set the default SSL context
  81  * </td>
  82  *   <td>Malicious code can set a context that monitors the opening of
  83  * connections or the plaintext data that is transmitted.
  84  * </td>
  85  * </tr>
  86  *
  87  * </table>
  88  *
  89  * @see java.security.BasicPermission
  90  * @see java.security.Permission
  91  * @see java.security.Permissions
  92  * @see java.security.PermissionCollection
  93  * @see java.lang.SecurityManager
  94  *
  95  * @since 1.4
  96  * @author Marianne Mueller
  97  * @author Roland Schemers
  98  */
  99 
 100 public final class SSLPermission extends BasicPermission {
 101 
 102     private static final long serialVersionUID = -3456898025505876775L;
 103 
 104     /**
 105      * Creates a new SSLPermission with the specified name.
 106      * The name is the symbolic name of the SSLPermission, such as
 107      * "setDefaultAuthenticator", etc. An asterisk
 108      * may appear at the end of the name, following a ".", or by itself, to
 109      * signify a wildcard match.
 110      *
 111      * @param name the name of the SSLPermission.
 112      *
 113      * @throws NullPointerException if <code>name</code> is null.
 114      * @throws IllegalArgumentException if <code>name</code> is empty.
 115      */
 116 
 117     public SSLPermission(String name)
 118     {
 119         super(name);
 120     }
 121 
 122     /**
 123      * Creates a new SSLPermission object with the specified name.
 124      * The name is the symbolic name of the SSLPermission, and the
 125      * actions String is currently unused and should be null.
 126      *
 127      * @param name the name of the SSLPermission.
 128      * @param actions ignored.
 129      *
 130      * @throws NullPointerException if <code>name</code> is null.
 131      * @throws IllegalArgumentException if <code>name</code> is empty.
 132      */
 133 
 134     public SSLPermission(String name, String actions)
 135     {
 136         super(name, actions);
 137     }
 138 }