Top Description Interfaces Classes Enums
module java.base

Package java.security.cert


Provides classes and interfaces for parsing and managing certificates, certificate revocation lists (CRLs), and certification paths. It contains support for X.509 v3 certificates and X.509 v2 CRLs.

Package Specification

Related Documentation

For information about X.509 certificates and CRLs, please see:
Since
1.2

Interface Summary

Modifier and TypeInterface and Description
public interface
CertPathBuilderResult

A specification of the result of a certification path builder algorithm.

public interface
CertPathChecker

Performs one or more checks on each Certificate of a CertPath.

public interface
CertPathParameters

A specification of certification path algorithm parameters.

public interface
CertPathValidatorResult

A specification of the result of a certification path validator algorithm.

public interface
CertSelector

A selector that defines a set of criteria for selecting Certificates.

public interface
CertStoreParameters

A specification of CertStore parameters.

public interface
CRLSelector

A selector that defines a set of criteria for selecting CRLs.

public interface
Extension

This interface represents an X.509 extension.

public interface
PolicyNode

An immutable valid policy tree node as defined by the PKIX certification path validation algorithm.

public interface
X509Extension

Interface for an X.509 extension.

Class Summary

Modifier and TypeClass and Description
public abstract class
Certificate

Abstract class for managing a variety of identity certificates.

public class
CertificateEncodingException

Certificate Encoding Exception.

public class
CertificateException

This exception indicates one of a variety of certificate problems.

public class
CertificateExpiredException

Certificate Expired Exception.

public class
CertificateFactory

This class defines the functionality of a certificate factory, which is used to generate certificate, certification path (CertPath) and certificate revocation list (CRL) objects from their encodings.

public abstract class
CertificateFactorySpi

This class defines the Service Provider Interface (SPI) for the CertificateFactory class.

public class
CertificateNotYetValidException

Certificate is not yet valid exception.

public class
CertificateParsingException

Certificate Parsing Exception.

public class
CertificateRevokedException

An exception that indicates an X.509 certificate is revoked.

public abstract class
CertPath

An immutable sequence of certificates (a certification path).

public class
CertPathBuilder

A class for building certification paths (also known as certificate chains).

public class
CertPathBuilderException

An exception indicating one of a variety of problems encountered when building a certification path with a CertPathBuilder.

public abstract class
CertPathBuilderSpi

The Service Provider Interface (SPI) for the CertPathBuilder class.

pack-priv class
CertPathHelperImpl

Helper class that allows the Sun CertPath provider to access implementation dependent APIs in CertPath framework.

public class
CertPathValidator

A class for validating certification paths (also known as certificate chains).

public class
CertPathValidatorException

An exception indicating one of a variety of problems encountered when validating a certification path.

public abstract class
CertPathValidatorSpi

The Service Provider Interface (SPI) for the CertPathValidator class.

public class
CertStore

A class for retrieving Certificates and CRLs from a repository.

public class
CertStoreException

An exception indicating one of a variety of problems retrieving certificates and CRLs from a CertStore.

public abstract class
CertStoreSpi

The Service Provider Interface (SPI) for the CertStore class.

public class
CollectionCertStoreParameters

Parameters used as input for the Collection CertStore algorithm.

public abstract class
CRL

This class is an abstraction of certificate revocation lists (CRLs) that have different formats but important common uses.

public class
CRLException

CRL (Certificate Revocation List) Exception.

public class
LDAPCertStoreParameters

Parameters used as input for the LDAP CertStore algorithm.

public class
PKIXBuilderParameters

Parameters used as input for the PKIX CertPathBuilder algorithm.

public class
PKIXCertPathBuilderResult

This class represents the successful result of the PKIX certification path builder algorithm.

public abstract class
PKIXCertPathChecker

An abstract class that performs one or more checks on an X509Certificate.

public class
PKIXCertPathValidatorResult

This class represents the successful result of the PKIX certification path validation algorithm.

public class
PKIXParameters

Parameters used as input for the PKIX CertPathValidator algorithm.

public abstract class
PKIXRevocationChecker

A PKIXCertPathChecker for checking the revocation status of certificates with the PKIX algorithm.

public class
PolicyQualifierInfo

An immutable policy qualifier represented by the ASN.1 PolicyQualifierInfo structure.

public class
TrustAnchor

A trust anchor or most-trusted Certification Authority (CA).

public class
URICertStoreParameters

Parameters used as input for CertStore algorithms which use information contained in a URI to retrieve certificates and CRLs.

public abstract class
X509Certificate

Abstract class for X.509 certificates.

public class
X509CertSelector

A CertSelector that selects X509Certificates that match all specified criteria.

public abstract class
X509CRL

Abstract class for an X.509 Certificate Revocation List (CRL).

public abstract class
X509CRLEntry

Abstract class for a revoked certificate in a CRL (Certificate Revocation List).

public class
X509CRLSelector

A CRLSelector that selects X509CRLs that match all specified criteria.

Enum Summary

Modifier and TypeEnum and Description
public enum
CRLReason

The CRLReason enumeration specifies the reason that a certificate is revoked, as defined in RFC 5280: Internet X.509 Public Key Infrastructure Certificate and CRL Profile.

public enum
PKIXReason

The PKIXReason enumerates the potential PKIX-specific reasons that an X.509 certification path may be invalid according to the PKIX (RFC 5280) standard.