APIdia Launch Partner
Top Description Constructors Methods
java.security.cert

public abstract Class CertPathValidatorSpi

extends Object
Class Inheritance
Known Direct Subclasses
sun.security.provider.certpath.PKIXCertPathValidator
Imports
java.security.InvalidAlgorithmParameterException

The Service Provider Interface (SPI) for the CertPathValidator class. All CertPathValidator implementations must include a class (the SPI class) that extends this class (CertPathValidatorSpi) and implements all of its methods. In general, instances of this class should only be accessed through the CertPathValidator class. For details, see the Java Cryptography Architecture.

Concurrent Access

Instances of this class need not be protected against concurrent access from multiple threads. Threads that need to access a single CertPathValidatorSpi instance concurrently should synchronize amongst themselves and provide the necessary locking before calling the wrapping CertPathValidator object.

However, implementations of CertPathValidatorSpi may still encounter concurrency issues, since multiple threads each manipulating a different CertPathValidatorSpi instance need not synchronize.

Author
Yassir Elley
Since
1.4

Constructor Summary

AccessConstructor and Description
public
CertPathValidatorSpi()

The default constructor.

Method Summary

Modifier and TypeMethod and Description
public CertPathChecker

Returns:

a CertPathChecker that this implementation uses to check the revocation status of certificates
engineGetRevocationChecker
()

Returns a CertPathChecker that this implementation uses to check the revocation status of certificates.

public abstract CertPathValidatorResult

Returns:

the result of the validation algorithm
engineValidate
(CertPath
the CertPath to be validated
certPath
,
CertPathParameters
the algorithm parameters
params
)

Validates the specified certification path using the specified algorithm parameter set.

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Constructor Detail

CertPathValidatorSpiback to summary
public CertPathValidatorSpi()

The default constructor.

Method Detail

engineGetRevocationCheckerback to summary
public CertPathChecker engineGetRevocationChecker()

Returns a CertPathChecker that this implementation uses to check the revocation status of certificates. A PKIX implementation returns objects of type PKIXRevocationChecker.

The primary purpose of this method is to allow callers to specify additional input parameters and options specific to revocation checking. See the class description of CertPathValidator for an example.

This method was added to version 1.8 of the Java Platform Standard Edition. In order to maintain backwards compatibility with existing service providers, this method cannot be abstract and by default throws an UnsupportedOperationException.

Returns:CertPathChecker

a CertPathChecker that this implementation uses to check the revocation status of certificates

Exceptions
UnsupportedOperationException:
if this method is not supported
Since
1.8
engineValidateback to summary
public abstract CertPathValidatorResult engineValidate(CertPath certPath, CertPathParameters params) throws CertPathValidatorException, InvalidAlgorithmParameterException

Validates the specified certification path using the specified algorithm parameter set.

The CertPath specified must be of a type that is supported by the validation algorithm, otherwise an InvalidAlgorithmParameterException will be thrown. For example, a CertPathValidator that implements the PKIX algorithm validates CertPath objects of type X.509.

Parameters
certPath:CertPath

the CertPath to be validated

params:CertPathParameters

the algorithm parameters

Returns:CertPathValidatorResult

the result of the validation algorithm

Exceptions
CertPathValidatorException:
if the CertPath does not validate
InvalidAlgorithmParameterException:
if the specified parameters or the type of the specified CertPath are inappropriate for this CertPathValidator