@Override
  public void checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine engine)
    throws CertificateException {
    x509ExtendedTrustManager.checkServerTrusted(chain, authType, engine);
    if (hostnameVerificationEnabled) {
      try {
        performHostVerification(InetAddress.getByName(engine.getPeerHost()), chain[0]);
      } catch (UnknownHostException e) {
        throw new CertificateException("Failed to verify host", e);
      }
    }
  }
Instantiate a new HBaseTrustManager.
@param x509ExtendedTrustManager    The trustmanager to use for
                                   checkClientTrusted/checkServerTrusted logic
@param hostnameVerificationEnabled If true, this TrustManager should verify hostnames of peers
                                   when checking trust.
@param allowReverseDnsLookup       If true, we will fall back on reverse dns if resolving of
                                   host fails
hbase-common/src/main/java/org/apache/hadoop/hbase/io/crypto/tls/HBaseTrustManager.java