SimpleValidator objects are immutable once they have been created.
Please DO NOT add methods that can change the state of an instance once
it has been created.
| Modifier and Type | Field and Description |
|---|---|
| private static final String | |
| private static final String | |
| pack-priv static final ObjectIdentifier | |
| pack-priv static final String | |
| pack-priv static final String | |
| pack-priv static final String | |
| pack-priv static final String | |
| pack-priv static final String | |
| private final Collection | trustedCerts
Set of the trusted certificates. |
| private final Map | trustedX500Principals
The trusted certificates as: Map (X500Principal)subject of trusted cert -> List of X509Certificate The list is used because there may be multiple certificates with an identical subject DN. |
| Access | Constructor and Description |
|---|---|
| pack-priv |
| Modifier and Type | Method and Description |
|---|---|
| private X509Certificate[] | |
| private int | |
| private int | |
| private void | |
| private void | |
| pack-priv X509Certificate[] | engineValidate(X509Certificate[] chain, Collection<X509Certificate> otherCerts, List<byte[]> responseList, AlgorithmConstraints constraints, Object parameter)
Implements abstract sun. Perform simple validation of chain. |
| pack-priv static boolean | getNetscapeCertTypeBit(X509Certificate cert, String type)
Get the value of the specified bit in the Netscape certificate type extension. |
| private X509Certificate | getTrustedCertificate(X509Certificate cert)
Return a trusted certificate that matches the input certificate, or null if no such certificate can be found. |
| public Collection | getTrustedCertificates()
Implements abstract sun. Returns an immutable Collection of the X509Certificates this instance uses as trust anchors. |
| NSCT_CODE_SIGNING_CA | back to summary |
|---|---|
| private static final String NSCT_CODE_SIGNING_CA | |
| NSCT_SSL_CA | back to summary |
|---|---|
| private static final String NSCT_SSL_CA | |
| OBJID_NETSCAPE_CERT_TYPE | back to summary |
|---|---|
| pack-priv static final ObjectIdentifier OBJID_NETSCAPE_CERT_TYPE | |
| OID_BASIC_CONSTRAINTS | back to summary |
|---|---|
| pack-priv static final String OID_BASIC_CONSTRAINTS | |
| OID_EKU_ANY_USAGE | back to summary |
|---|---|
| pack-priv static final String OID_EKU_ANY_USAGE | |
| OID_EXTENDED_KEY_USAGE | back to summary |
|---|---|
| pack-priv static final String OID_EXTENDED_KEY_USAGE | |
| OID_KEY_USAGE | back to summary |
|---|---|
| pack-priv static final String OID_KEY_USAGE | |
| OID_NETSCAPE_CERT_TYPE | back to summary |
|---|---|
| pack-priv static final String OID_NETSCAPE_CERT_TYPE | |
| trustedCerts | back to summary |
|---|---|
| private final Collection<X509Certificate> trustedCerts Set of the trusted certificates. Present only for getTrustedCertificates(). | |
| trustedX500Principals | back to summary |
|---|---|
| private final Map<X500Principal, List<X509Certificate>> trustedX500Principals The trusted certificates as: Map (X500Principal)subject of trusted cert -> List of X509Certificate The list is used because there may be multiple certificates with an identical subject DN. | |
| SimpleValidator | back to summary |
|---|---|
| pack-priv SimpleValidator(String variant, Collection<X509Certificate> trustedCerts) | |
| buildTrustedChain | back to summary |
|---|---|
| private X509Certificate[] buildTrustedChain(X509Certificate[] chain) throws CertificateException Build a trusted certificate chain. This method always returns a chain with a trust anchor as the final cert in the chain. If no trust anchor could be found, a CertificateException is thrown. | |
| checkBasicConstraints | back to summary |
|---|---|
| private int checkBasicConstraints(X509Certificate cert, Set<String> critSet, int maxPathLen) throws CertificateException | |
| checkExtensions | back to summary |
|---|---|
| private int checkExtensions(X509Certificate cert, int maxPathLen) throws CertificateException | |
| checkKeyUsage | back to summary |
|---|---|
| private void checkKeyUsage(X509Certificate cert, Set<String> critSet) throws CertificateException | |
| checkNetscapeCertType | back to summary |
|---|---|
| private void checkNetscapeCertType(X509Certificate cert, Set<String> critSet) throws CertificateException | |
| engineValidate | back to summary |
|---|---|
| pack-priv X509Certificate[] engineValidate(X509Certificate[] chain, Collection<X509Certificate> otherCerts, List<byte[]> responseList, AlgorithmConstraints constraints, Object parameter) throws CertificateException Implements abstract sun. Perform simple validation of chain. The arguments otherCerts and parameter are ignored.
| |
| getNetscapeCertTypeBit | back to summary |
|---|---|
| pack-priv static boolean getNetscapeCertTypeBit(X509Certificate cert, String type) Get the value of the specified bit in the Netscape certificate type extension. If the extension is not present at all, we return true. | |
| getTrustedCertificate | back to summary |
|---|---|
| private X509Certificate getTrustedCertificate(X509Certificate cert) Return a trusted certificate that matches the input certificate, or null if no such certificate can be found. This method also handles cases where a CA re-issues a trust anchor with the same public key and same subject and issuer names but a new validity period, etc. | |
| getTrustedCertificates | back to summary |
|---|---|
| public Collection Implements abstract sun. Doc from sun. Returns an immutable Collection of the X509Certificates this instance uses as trust anchors. | |
