From 0195e5b16c132c0e4c557a6b5f28a3c79cfcdcfe Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Richard=20K=C3=B6rber?= Date: Mon, 18 Jul 2016 00:14:35 +0200 Subject: [PATCH] Check identifier type on authorizations --- .../src/main/java/org/shredzone/acme4j/Authorization.java | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/acme4j-client/src/main/java/org/shredzone/acme4j/Authorization.java b/acme4j-client/src/main/java/org/shredzone/acme4j/Authorization.java index 429b7214..b9f5c34b 100644 --- a/acme4j-client/src/main/java/org/shredzone/acme4j/Authorization.java +++ b/acme4j-client/src/main/java/org/shredzone/acme4j/Authorization.java @@ -27,6 +27,7 @@ import org.shredzone.acme4j.challenge.Challenge; import org.shredzone.acme4j.connector.Connection; import org.shredzone.acme4j.exception.AcmeException; import org.shredzone.acme4j.exception.AcmeNetworkException; +import org.shredzone.acme4j.exception.AcmeProtocolException; import org.shredzone.acme4j.util.ClaimBuilder; import org.shredzone.acme4j.util.TimestampParser; import org.slf4j.Logger; @@ -215,6 +216,10 @@ public class Authorization extends AcmeResource { Map identifier = (Map) json.get("identifier"); if (identifier != null) { + String type = (String) identifier.get("type"); + if (type != null && !"dns".equals(type)) { + throw new AcmeProtocolException("Unknown authorization type: " + type); + } this.domain = (String) identifier.get("value"); }