From 5c704e6deb1f975ce2deef3d0dce1b1455dc1067 Mon Sep 17 00:00:00 2001 From: Andrew Solovay Date: Mon, 23 Jul 2018 15:00:25 -0700 Subject: [PATCH] docs: Updating setDomainSuffixMatch() for Android P Small update to reflect P-related change (that common-name verification is no longer supported), per https://android-dot-devsite.googleplex.com/about/versions/p/android-9.0-changes#certificate-common-name Also added some missing paragraph breaks while I was doing it. Doc is staged to: http://go/dac-stage/reference/android/net/wifi/WifiEnterpriseConfig#setDomainSuffixMatch(java.lang.String) Exempt-From-Owner-Approval: Docs-only change Bug: 110483059 Test: make ds-docs Change-Id: I50b6eb70bf16c17dd0ae4e54711c5bb599c47c1a --- wifi/java/android/net/wifi/WifiEnterpriseConfig.java | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/wifi/java/android/net/wifi/WifiEnterpriseConfig.java b/wifi/java/android/net/wifi/WifiEnterpriseConfig.java index bb3af3cd16874..52f7a60420951 100644 --- a/wifi/java/android/net/wifi/WifiEnterpriseConfig.java +++ b/wifi/java/android/net/wifi/WifiEnterpriseConfig.java @@ -948,16 +948,15 @@ public class WifiEnterpriseConfig implements Parcelable { * for Hotspot 2.0 defined matching of AAA server certs per WFA HS2.0 spec, section 7.3.3.2, * second paragraph. * - * From wpa_supplicant documentation: - * Constraint for server domain name. If set, this FQDN is used as a suffix match requirement + *

From wpa_supplicant documentation: + *

Constraint for server domain name. If set, this FQDN is used as a suffix match requirement * for the AAAserver certificate in SubjectAltName dNSName element(s). If a matching dNSName is - * found, this constraint is met. If no dNSName values are present, this constraint is matched - * against SubjectName CN using same suffix match comparison. - * Suffix match here means that the host/domain name is compared one label at a time starting + * found, this constraint is met. + *

Suffix match here means that the host/domain name is compared one label at a time starting * from the top-level domain and all the labels in domain_suffix_match shall be included in the * certificate. The certificate may include additional sub-level labels in addition to the * required labels. - * For example, domain_suffix_match=example.com would match test.example.com but would not + *

For example, domain_suffix_match=example.com would match test.example.com but would not * match test-example.com. * @param domain The domain value */