Class TlsValidator

TLS certificate fingerprint validator.

Validates TLS certificates using SHA-256 SPKI fingerprints. Provides constant-time comparison to prevent timing attacks.

Platform support:

Node.js: Full validation with socket inspection
Browser: Validation skipped (browser handles TLS)

Index

Constructors

Accessors

Methods

validate addExpectedFingerprint clearExpectedFingerprints

Constructors

constructor

new TlsValidator(config: TlsValidatorConfig): TlsValidator
Create a TLS validator.
Parameters
- config: TlsValidatorConfig
  Configuration with expected fingerprints
Returns TlsValidator
- Defined in src/connection/tls.ts:84

Accessors

`Static`isSupported

get isSupported(): boolean
Check if TLS validation is supported on this platform.

Returns false in browser environments where TLS socket inspection is not available.

Returns boolean
- Defined in src/connection/tls.ts:69

Methods

validate

validate(socket: TLSSocket): TlsValidationResult
Validate TLS certificate.
Parameters
- socket: TLSSocket
  TLS socket to validate
Returns TlsValidationResult
Validation result

Throws
ConnectionError if fingerprint doesn't match and requireValidation is true
- Defined in src/connection/tls.ts:96

addExpectedFingerprint

addExpectedFingerprint(fingerprint: string): void
Add an expected fingerprint.
Parameters
- fingerprint: string
  Fingerprint to add
Returns void
- Defined in src/connection/tls.ts:155

clearExpectedFingerprints

clearExpectedFingerprints(): void
Clear all expected fingerprints.

Returns void
- Defined in src/connection/tls.ts:162