kiosk-ops-sdk/com.sarastarquant.kioskops.sdk.transport.security

Package-level declarations

Types

CertificateCredentials

data class CertificateCredentials(val certificate: X509Certificate, val privateKey: PrivateKey, val certificateChain: List<X509Certificate> = emptyList())

Client certificate credentials for mTLS.

data class CertificatePin(val hostname: String, val sha256Pins: List<String>)

Certificate pin for a specific hostname.

CertificatePinningException

class CertificatePinningException(message: String, cause: Throwable? = null) : IOException

Exception thrown when certificate pinning validation fails.

CertificatePinningInterceptor

class ~~CertificatePinningInterceptor~~(pins: List<CertificatePin>, onPinValidationFailure: (String, String) -> Unit? = null) : Interceptor

OkHttp interceptor for certificate pinning validation.

CertificateTransparencyException

class CertificateTransparencyException(message: String) : IOException

Exception thrown when Certificate Transparency validation fails.

CertificateTransparencyValidator

class CertificateTransparencyValidator(enabled: Boolean = true, onValidationFailure: (String, String) -> Unit? = null) : Interceptor

SCT-presence-only check for Certificate Transparency.

ClientCertificateProvider

fun interface ClientCertificateProvider

Provider interface for client certificates in mutual TLS authentication.

CtValidationResult

data class CtValidationResult(val isValid: Boolean, val reason: String)

Result of Certificate Transparency validation.

MtlsClientBuilder

object MtlsClientBuilder

Builder for OkHttpClient with mutual TLS (mTLS) support.

data class MtlsConfig(val clientCertificateProvider: ClientCertificateProvider)

Mutual TLS configuration.

MtlsConfigurationException

class MtlsConfigurationException(message: String, cause: Throwable? = null) : IOException

Thrown when mTLS configuration fails. The SDK does NOT silently downgrade to unauthenticated TLS; callers that intend mTLS will see this exception and can decide whether to retry, surface to an operator, or proceed explicitly.

TransportSecurityPolicy

data class TransportSecurityPolicy(val certificatePins: List<CertificatePin> = emptyList(), val mtlsConfig: MtlsConfig? = null, val certificateTransparencyEnabled: Boolean = false)

Transport layer security policy configuration.