1 files changed, 18 insertions, 0 deletions
diff --git a/bcprov/src/main/java/org/bouncycastle/crypto/tls/TlsSRPIdentityManager.java b/bcprov/src/main/java/org/bouncycastle/crypto/tls/TlsSRPIdentityManager.java
new file mode 100644
index 0000000..fbf50b1
--- /dev/null
+++ b/bcprov/src/main/java/org/bouncycastle/crypto/tls/TlsSRPIdentityManager.java
@@ -0,0 +1,18 @@
+package org.bouncycastle.crypto.tls;
+
+public interface TlsSRPIdentityManager
+{
+    /**
+     * Lookup the {@link TlsSRPLoginParameters} corresponding to the specified identity.
+     * 
+     * NOTE: To avoid "identity probing", unknown identities SHOULD be handled as recommended in RFC
+     * 5054 2.5.1.3. {@link SimulatedTlsSRPIdentityManager} is provided for this purpose.
+     * 
+     * @param identity
+     *            the SRP identity sent by the connecting client
+     * @return the {@link TlsSRPLoginParameters} for the specified identity, or else 'simulated'
+     *         parameters if the identity is not recognized. A null value is also allowed, but not
+     *         recommended.
+     */
+    TlsSRPLoginParameters getLoginParameters(byte[] identity);
+}