APIdia Launch Partner

Top Description Fields Constructors Methods

sun.security.validator

pack-priv final Class CamerfirmaTLSPolicy

Class Inheritance

extends Object

java.lang.Object
sun.security.validator.CamerfirmaTLSPolicy

Imports

java.security.cert.X509Certificate, java.time.LocalDate, .Month, .ZoneOffset, java.util.Date, .Map, .Set, sun.security.util.Debug, sun.security.x509.X509CertImpl

This class checks if Camerfirma issued TLS Server certificates should be restricted.

Field Summary

Modifier and Type	Field and Description
private static final LocalDate	APRIL_15_2025
private static final Debug	debug
private static final String	FINGERPRINT

Constructor Summary

Access	Constructor and Description
private	CamerfirmaTLSPolicy()

Method Summary

Modifier and Type	Method and Description
pack-priv static void	checkDistrust(X509Certificate[] the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1. chain) This method assumes the eeCert is a TLS Server Cert and chains back to the anchor.
private static void	checkNotBefore(LocalDate notBeforeDate, LocalDate distrustDate, X509Certificate anchor)
private static String	fingerprint(X509Certificate cert)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

APRIL_15_2025	back to summary
private static final LocalDate APRIL_15_2025

debug	back to summary
private static final Debug debug

FINGERPRINT	back to summary
private static final String FINGERPRINT

Constructor Detail

CamerfirmaTLSPolicy	back to summary
private CamerfirmaTLSPolicy()

Method Detail

checkDistrust

back to summary

pack-priv static void checkDistrust(X509Certificate[] chain) throws ValidatorException

This method assumes the eeCert is a TLS Server Cert and chains back to the anchor.

Parameters

chain:X509Certificate[]: the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1.

Exceptions

ValidatorException:: if the certificate is distrusted

checkNotBefore	back to summary
private static void checkNotBefore(LocalDate notBeforeDate, LocalDate distrustDate, X509Certificate anchor) throws ValidatorException

fingerprint	back to summary
private static String fingerprint(X509Certificate cert)