| Modifier and Type | Field and Description |
|---|---|
| pack-priv final PKIX. | |
| private static final Debug | |
| private Set | |
| pack-priv final X509CertSelector | |
| pack-priv static final boolean | USE_AIA
Flag indicating whether support for the caIssuers field of the Authority Information Access extension shall be enabled. |
| Access | Constructor and Description |
|---|---|
| pack-priv | Builder(PKIX.
the parameter set used to build a certification path buildParamsInitialize the builder with the input parameters. |
| Modifier and Type | Method and Description |
|---|---|
| pack-priv abstract void | addCertToPath(X509Certificate
the certificate to be added cert, LinkedList<X509Certificate> the certification path list certPathList)Adds the certificate to the certPathList |
| pack-priv boolean | addMatchingCerts(X509CertSelector selector, Collection<CertStore> certStores, Collection<X509Certificate> resultCerts, boolean checkAll)
Search the specified CertStores and add all certificates matching selector to resultCerts. |
| pack-priv abstract Collection | getMatchingCerts(State
the current State currentState, List<CertStore> list of CertStores certStores)Retrieves certificates from the list of certStores using the buildParams and the currentState as a filter |
| pack-priv Set | Returns: the Set of policies any of which must exist in a cert's certificate policies extension in order for a cert to be selected.This method can be used as an optimization to filter out certificates that do not have policies which are valid. |
| pack-priv abstract boolean | Returns: a boolean value indicating whether the cert completes the path.the certificate to test cert)Verifies whether the input certificate completes the path. |
| pack-priv abstract void | removeFinalCertFromPath(LinkedList<X509Certificate>
the certification path list certPathList)Removes final certificate from the certPathList |
| pack-priv abstract void | verifyCert(X509Certificate
the certificate to be verified cert, State the current state against which the cert is verified currentState, List<X509Certificate> the certPathList generated thus far certPathList)Verifies the cert against the currentState, using the certPathList generated thus far to help with loop detection |
| buildParams | back to summary |
|---|---|
| pack-priv final PKIX. | |
| debug | back to summary |
|---|---|
| private static final Debug debug | |
| matchingPolicies | back to summary |
|---|---|
| private Set<String> matchingPolicies | |
| targetCertConstraints | back to summary |
|---|---|
| pack-priv final X509CertSelector targetCertConstraints | |
| USE_AIA | back to summary |
|---|---|
| pack-priv static final boolean USE_AIA Flag indicating whether support for the caIssuers field of the Authority Information Access extension shall be enabled. Currently disabled by default for compatibility reasons. | |
| Builder | back to summary |
|---|---|
| pack-priv Builder(PKIX. Initialize the builder with the input parameters.
| |
| addCertToPath | back to summary |
|---|---|
| pack-priv abstract void addCertToPath(X509Certificate cert, LinkedList<X509Certificate> certPathList) Adds the certificate to the certPathList
| |
| addMatchingCerts | back to summary |
|---|---|
| pack-priv boolean addMatchingCerts(X509CertSelector selector, Collection<CertStore> certStores, Collection<X509Certificate> resultCerts, boolean checkAll) Search the specified CertStores and add all certificates matching selector to resultCerts. If the targetCert criterion of the selector is set, only that cert is examined and the CertStores are not searched. If checkAll is true, all CertStores are searched for matching certs. If false, the method returns as soon as the first CertStore returns a matching cert(s). Returns true iff resultCerts changed (a cert was added to the collection) | |
| getMatchingCerts | back to summary |
|---|---|
| pack-priv abstract Collection Retrieves certificates from the list of certStores using the buildParams and the currentState as a filter | |
| getMatchingPolicies | back to summary |
|---|---|
| pack-priv Set This method can be used as an optimization to filter out certificates that do not have policies which are valid. It returns the set of policies (String OIDs) that should exist in the certificate policies extension of the certificate that is needed by the builder. The logic applied is as follows: 1) If some initial policies have been set *and* policy mappings are inhibited, then acceptable certificates are those that include the ANY_POLICY OID or with policies that intersect with the initial policies. 2) If no initial policies have been set *or* policy mappings are not inhibited then we don't have much to work with. All we know is that a certificate must have *some* policy because if it didn't have any policy then the policy tree would become null (and validation would fail). | |
| isPathCompleted | back to summary |
|---|---|
| pack-priv abstract boolean isPathCompleted(X509Certificate cert) Verifies whether the input certificate completes the path. When building in the forward direction, a trust anchor will complete the path.
| |
| removeFinalCertFromPath | back to summary |
|---|---|
| pack-priv abstract void removeFinalCertFromPath(LinkedList<X509Certificate> certPathList) Removes final certificate from the certPathList
| |
| verifyCert | back to summary |
|---|---|
| pack-priv abstract void verifyCert(X509Certificate cert, State currentState, List<X509Certificate> certPathList) throws GeneralSecurityException Verifies the cert against the currentState, using the certPathList generated thus far to help with loop detection
| |
