APIdia Launch Partner
Top Description Fields Constructors Methods
sun.security.validator

pack-priv sealed Enum CADistrustPolicy

extends Enum<CADistrustPolicy>
Class Inheritance
Imports
java.security.Security, java.security.cert.X509Certificate, java.util.EnumSet, sun.security.util.Debug
Policies for distrusting a certificate authority (CA). See the jdk.security.caDistrustPolicies security property for more information.

Field Summary

Modifier and TypeField and Description
public static final CADistrustPolicy
CAMERFIRMA_TLS

Distrust TLS Server certificates anchored by a CAMERFIRMA root CA and issued after April 15, 2025.

public static final CADistrustPolicy
CHUNGHWA_TLS

Distrust TLS Server certificates anchored by the Chunghwa ePKI root CA and issued after March 17, 2026.

public static final CADistrustPolicy
ENTRUST_TLS

Distrust TLS Server certificates anchored by an Entrust root CA and issued after November 11, 2024.

pack-priv static final EnumSet<CADistrustPolicy>
POLICIES

public static final CADistrustPolicy
SYMANTEC_TLS

Distrust TLS Server certificates anchored by a Symantec root CA and issued after April 16, 2019 (with exceptions for a couple of subordinate CAs, see the jdk.security.caDistrustPolicies definition in the java.security file for more details).

Constructor Summary

AccessConstructor and Description
private
CADistrustPolicy()

Method Summary

Modifier and TypeMethod and Description
pack-priv abstract void
checkDistrust(String
the type of certificate being checked
variant, X509Certificate[]
the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1.
chain)

Checks if the end-entity certificate is distrusted.

private static EnumSet<CADistrustPolicy>
parseProperty()

public static CADistrustPolicy
valueOf(String name)

public static CADistrustPolicy[]
values()

Inherited from java.lang.Enum:
clonecompareTodescribeConstableequalsfinalizegetDeclaringClasshashCodenameordinaltoStringvalueOf

Field Detail

CAMERFIRMA_TLSback to summary
public static final CADistrustPolicy CAMERFIRMA_TLS

Distrust TLS Server certificates anchored by a CAMERFIRMA root CA and issued after April 15, 2025. If enabled, this policy is currently enforced by the PKIX and SunX509 TrustManager implementations of the SunJSSE provider implementation.

CHUNGHWA_TLSback to summary
public static final CADistrustPolicy CHUNGHWA_TLS

Distrust TLS Server certificates anchored by the Chunghwa ePKI root CA and issued after March 17, 2026. If enabled, this policy is currently enforced by the PKIX and SunX509 TrustManager implementations of the SunJSSE provider implementation.

ENTRUST_TLSback to summary
public static final CADistrustPolicy ENTRUST_TLS

Distrust TLS Server certificates anchored by an Entrust root CA and issued after November 11, 2024. If enabled, this policy is currently enforced by the PKIX and SunX509 TrustManager implementations of the SunJSSE provider implementation.

POLICIESback to summary
pack-priv static final EnumSet<CADistrustPolicy> POLICIES
SYMANTEC_TLSback to summary
public static final CADistrustPolicy SYMANTEC_TLS

Distrust TLS Server certificates anchored by a Symantec root CA and issued after April 16, 2019 (with exceptions for a couple of subordinate CAs, see the jdk.security.caDistrustPolicies definition in the java.security file for more details). If enabled, this policy is currently enforced by the PKIX and SunX509 TrustManager implementations of the SunJSSE provider implementation.

Constructor Detail

CADistrustPolicyback to summary
private CADistrustPolicy()

Method Detail

checkDistrustback to summary
pack-priv abstract void checkDistrust(String variant, X509Certificate[] chain) throws ValidatorException

Checks if the end-entity certificate is distrusted.

Parameters
variant:String

the type of certificate being checked

chain:X509Certificate[]

the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1.

Exceptions
ValidatorException:
if the end-entity certificate is distrusted
parsePropertyback to summary
private static EnumSet<CADistrustPolicy> parseProperty()
valueOfback to summary
public static CADistrustPolicy valueOf(String name)
valuesback to summary
public static CADistrustPolicy[] values()