Top Description Fields Constructors Methods
sun.security.provider.certpath

public final Class PKIXCertPathValidator

extends CertPathValidatorSpi
Class Inheritance
Imports
java.io.IOException, java.security.InvalidAlgorithmParameterException, java.security.cert.*, java.util.*, java.util.concurrent.atomic.AtomicLong, jdk.internal.event.X509ValidationEvent, .EventHelper, sun.security.provider.certpath.PKIX.ValidatorParams, sun.security.x509.X509CertImpl, sun.security.util.Debug

This class implements the PKIX validation algorithm for certification paths consisting exclusively of X509Certificates. It uses the specified input parameter set (which must be a PKIXParameters object).
Author
Yassir Elley
Since
1.4

Field Summary

Modifier and TypeField and Description
private static final Debug
private static final AtomicLong

Constructor Summary

AccessConstructor and Description
public
PKIXCertPathValidator()

Default constructor.

Method Summary

Modifier and TypeMethod and Description
public CertPathChecker
engineGetRevocationChecker()

Overrides java.security.cert.CertPathValidatorSpi.engineGetRevocationChecker.

Returns a CertPathChecker that this implementation uses to check the revocation status of certificates.

public CertPathValidatorResult

Returns:

the result
engineValidate
(CertPath
the X509 certification path
cp
,
CertPathParameters
the input PKIX parameter set
params
)

Implements abstract java.security.cert.CertPathValidatorSpi.engineValidate.

Validates a certification path consisting exclusively of X509Certificates using the PKIX validation algorithm, which uses the specified input parameter set.

private static PKIXCertPathValidatorResult
private static PKIXCertPathValidatorResult

Field Detail

debugback to summary
private static final Debug debug
validationCounterback to summary
private static final AtomicLong validationCounter

Constructor Detail

PKIXCertPathValidatorback to summary
public PKIXCertPathValidator()

Default constructor.

Method Detail

engineGetRevocationCheckerback to summary
public CertPathChecker engineGetRevocationChecker()

Overrides java.security.cert.CertPathValidatorSpi.engineGetRevocationChecker.

Doc from java.security.cert.CertPathValidatorSpi.engineGetRevocationChecker.

Returns a CertPathChecker that this implementation uses to check the revocation status of certificates. A PKIX implementation returns objects of type PKIXRevocationChecker.

The primary purpose of this method is to allow callers to specify additional input parameters and options specific to revocation checking. See the class description of CertPathValidator for an example.

This method was added to version 1.8 of the Java Platform Standard Edition. In order to maintain backwards compatibility with existing service providers, this method cannot be abstract and by default throws an UnsupportedOperationException.

Returns:CertPathChecker

a CertPathChecker that this implementation uses to check the revocation status of certificates

Annotations
@Override
engineValidateback to summary
public CertPathValidatorResult engineValidate(CertPath cp, CertPathParameters params) throws CertPathValidatorException, InvalidAlgorithmParameterException

Implements abstract java.security.cert.CertPathValidatorSpi.engineValidate.

Validates a certification path consisting exclusively of X509Certificates using the PKIX validation algorithm, which uses the specified input parameter set. The input parameter set must be a PKIXParameters object.

Parameters
cp:CertPath

the X509 certification path

params:CertPathParameters

the input PKIX parameter set

Returns:CertPathValidatorResult

the result

Annotations
@Override
Exceptions
CertPathValidatorException:
if cert path does not validate.
InvalidAlgorithmParameterException:
if the specified parameters are inappropriate for this CertPathValidator
validateback to summary
private static PKIXCertPathValidatorResult validate(PKIX.ValidatorParams params) throws CertPathValidatorException
validateback to summary
private static PKIXCertPathValidatorResult validate(TrustAnchor anchor, PKIX.ValidatorParams params) throws CertPathValidatorException