APIdia Launch Partner
Top Description Fields Constructors Methods
sun.security.validator

pack-priv final Class SymantecTLSPolicy

extends Object
Class Inheritance
Imports
java.security.cert.X509Certificate, java.time.LocalDate, .Month, .ZoneOffset, java.util.Date, .Map, .Set, sun.security.util.Debug, sun.security.x509.X509CertImpl
This class checks if Symantec issued TLS Server certificates should be restricted.

Field Summary

Modifier and TypeField and Description
private static final LocalDate
APRIL_16_2019

private static final Debug
debug

private static final LocalDate
DECEMBER_31_2019

private static final Map<String, LocalDate>
EXEMPT_SUBCAS

private static final Set<String>
FINGERPRINTS

Constructor Summary

AccessConstructor and Description
private
SymantecTLSPolicy()

Method Summary

Modifier and TypeMethod and Description
pack-priv static void
checkDistrust(X509Certificate[]
the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1.
chain)

This method assumes the eeCert is a TLS Server Cert and chains back to the anchor.

private static void
checkNotBefore(LocalDate notBeforeDate, LocalDate distrustDate, X509Certificate anchor)

private static String
fingerprint(X509Certificate cert)

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

APRIL_16_2019back to summary
private static final LocalDate APRIL_16_2019
debugback to summary
private static final Debug debug
DECEMBER_31_2019back to summary
private static final LocalDate DECEMBER_31_2019
EXEMPT_SUBCASback to summary
private static final Map<String, LocalDate> EXEMPT_SUBCAS
FINGERPRINTSback to summary
private static final Set<String> FINGERPRINTS

Constructor Detail

SymantecTLSPolicyback to summary
private SymantecTLSPolicy()

Method Detail

checkDistrustback to summary
pack-priv static void checkDistrust(X509Certificate[] chain) throws ValidatorException

This method assumes the eeCert is a TLS Server Cert and chains back to the anchor.

Parameters
chain:X509Certificate[]

the end-entity's certificate chain. The end entity cert is at index 0, the trust anchor at index n-1.

Exceptions
ValidatorException:
if the certificate is distrusted
checkNotBeforeback to summary
private static void checkNotBefore(LocalDate notBeforeDate, LocalDate distrustDate, X509Certificate anchor) throws ValidatorException
fingerprintback to summary
private static String fingerprint(X509Certificate cert)