APIdia Launch Partner

Top Description Fields Constructors Methods

sun.security.validator

pack-priv final Class EntrustTLSPolicy

Class Inheritance

extends Object

java.lang.Object
sun.security.validator.EntrustTLSPolicy

Imports

java.security.cert.X509Certificate, java.time.LocalDate, .Month, .ZoneOffset, java.util.Date, .Map, .Set, sun.security.util.Debug, sun.security.x509.X509CertImpl

This class checks if Entrust issued TLS Server certificates should be restricted.

Field Summary

Modifier and Type	Field and Description
private static final Debug	debug
private static final Set<String>	FINGERPRINTS
private static final LocalDate	NOVEMBER_11_2024

Constructor Summary

Access	Constructor and Description
private	EntrustTLSPolicy()

Method Summary

Modifier and Type	Method and Description
pack-priv static void	checkDistrust(X509Certificate[] the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1. chain) This method assumes the eeCert is a TLS Server Cert and chains back to the anchor.
private static void	checkNotBefore(LocalDate notBeforeDate, LocalDate distrustDate, X509Certificate anchor)
private static String	fingerprint(X509Certificate cert)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

debug	back to summary
private static final Debug debug

FINGERPRINTS	back to summary
private static final Set<String> FINGERPRINTS

NOVEMBER_11_2024	back to summary
private static final LocalDate NOVEMBER_11_2024

Constructor Detail

EntrustTLSPolicy	back to summary
private EntrustTLSPolicy()

Method Detail

checkDistrust

back to summary

pack-priv static void checkDistrust(X509Certificate[] chain) throws ValidatorException

This method assumes the eeCert is a TLS Server Cert and chains back to the anchor.

Parameters

chain:X509Certificate[]: the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1.

Exceptions

ValidatorException:: if the certificate is distrusted

checkNotBefore	back to summary
private static void checkNotBefore(LocalDate notBeforeDate, LocalDate distrustDate, X509Certificate anchor) throws ValidatorException

fingerprint	back to summary
private static String fingerprint(X509Certificate cert)