Modifier and Type	Class and Description
public static class	PKIXExtendedParameters.Builder Builder for a PKIXExtendedParameters object.

Access	Constructor and Description
private	PKIXExtendedParameters(PKIXExtendedParameters.Builder builder)

Method Summary

Modifier and Type	Method and Description
public Object	clone() Overrides java.lang.Object.clone. Implements java.security.cert.CertPathParameters.clone. Makes a copy of this `CertPathParameters`.
public List<PKIXCertStore<T extends Certificate>>	getCertificateStores()
public List<E>	getCertPathCheckers()
public List<CertStore>	getCertStores()
public List<PKIXCRLStore<T extends CRL>>	getCRLStores()
public Date	getDate() Deprecated Use 'getValidityDate' instead (which can return null).
public Set<E>	getInitialPolicies()
public Map<GeneralName, PKIXCertStore<T extends Certificate>>	getNamedCertificateStoreMap()
public Map<GeneralName, PKIXCRLStore<T extends CRL>>	getNamedCRLStoreMap()
public boolean	getPolicyQualifiersRejected()
public String	getSigProvider()
public PKIXCertStoreSelector<T extends Certificate>	Returns: a `Selector` specifying the constraints on the target certificate or attribute certificate (or `null`) getTargetConstraints() Returns the required constraints on the target certificate.
public Set<E>	getTrustAnchors()
public Date	Returns: the `Date`, or `null` if not set getValidityDate() Returns the time at which to check the validity of the certification path.
public int	Returns: Returns the validity model. getValidityModel()
public boolean	isAnyPolicyInhibited()
public boolean	isExplicitPolicyRequired()
public boolean	isPolicyMappingInhibited()
public boolean	isRevocationEnabled()
public boolean	Returns: Returns if delta CRLs should be used. isUseDeltasEnabled() Defaults to `false`.

Inherited from java.lang.Object:: equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

baseParameters	back to summary
private final PKIXParameters baseParameters

CHAIN_VALIDITY_MODEL back to summary

CHAIN_VALIDITY_MODEL	back to summary
public static final int CHAIN_VALIDITY_MODEL This model uses the following validity model. Each certificate must have been valid at the moment when it was used. That means the end certificate must have been valid at the time the signature was done. The CA certificate which signed the end certificate must have been valid, when the end certificate was signed. The CA (or Root CA) certificate must have been valid when the CA certificate was signed, and so on. So the `PKIXParameters#setDate(Date)` method sets the time, when the end certificate must have been valid. It is used e.g. in the German signature law.

public static final int CHAIN_VALIDITY_MODEL

This model uses the following validity model. Each certificate must have been valid at the moment when it was used. That means the end certificate must have been valid at the time the signature was done. The CA certificate which signed the end certificate must have been valid, when the end certificate was signed. The CA (or Root CA) certificate must have been valid when the CA certificate was signed, and so on. So the PKIXParameters#setDate(Date) method sets the time, when the end certificate must have been valid. It is used e.g. in the German signature law.

date	back to summary
private final Date date

extraCertStores	back to summary
private final List<PKIXCertStore<T extends Certificate>> extraCertStores

extraCRLStores	back to summary
private final List<PKIXCRLStore<T extends CRL>> extraCRLStores

namedCertificateStoreMap	back to summary
private final Map<GeneralName, PKIXCertStore<T extends Certificate>> namedCertificateStoreMap

namedCRLStoreMap	back to summary
private final Map<GeneralName, PKIXCRLStore<T extends CRL>> namedCRLStoreMap

PKIX_VALIDITY_MODEL back to summary

PKIX_VALIDITY_MODEL	back to summary
public static final int PKIX_VALIDITY_MODEL This is the default PKIX validity model. Actually there are two variants of this: The PKIX model and the modified PKIX model. The PKIX model verifies that all involved certificates must have been valid at the current time. The modified PKIX model verifies that all involved certificates were valid at the signing time. Both are indirectly chosen with the `PKIXParameters#setDate(Date)` method, so this methods sets the Date when all certificates must have been valid.

public static final int PKIX_VALIDITY_MODEL

This is the default PKIX validity model. Actually there are two variants of this: The PKIX model and the modified PKIX model. The PKIX model verifies that all involved certificates must have been valid at the current time. The modified PKIX model verifies that all involved certificates were valid at the signing time. Both are indirectly chosen with the PKIXParameters#setDate(Date) method, so this methods sets the Date when all certificates must have been valid.

revocationEnabled	back to summary
private final boolean revocationEnabled

targetConstraints	back to summary
private final PKIXCertStoreSelector<T extends Certificate> targetConstraints

trustAnchors	back to summary
private final Set<TrustAnchor> trustAnchors

useDeltas	back to summary
private final boolean useDeltas

validityDate	back to summary
private final Date validityDate

validityModel	back to summary
private final int validityModel

PKIXExtendedParameters	back to summary
private PKIXExtendedParameters(PKIXExtendedParameters.Builder builder)

Method Detail

clone back to summary

clone	back to summary
public Object clone() Overrides java.lang.Object.clone. Implements java.security.cert.CertPathParameters.clone. Doc from java.security.cert.CertPathParameters.clone. Makes a copy of this `CertPathParameters`. Changes to the copy will not affect the original and vice versa. Returns:Object a copy of this `CertPathParameters`

public Object clone()

Overrides java.lang.Object.clone.

Implements java.security.cert.CertPathParameters.clone.

Doc from java.security.cert.CertPathParameters.clone.

Makes a copy of this CertPathParameters. Changes to the copy will not affect the original and vice versa.

Returns:Object: a copy of this CertPathParameters

getCertificateStores	back to summary
public List<PKIXCertStore<T extends Certificate>> getCertificateStores()

getCertPathCheckers	back to summary
public List<E> getCertPathCheckers()

getCertStores	back to summary
public List<CertStore> getCertStores()

getCRLStores	back to summary
public List<PKIXCRLStore<T extends CRL>> getCRLStores()

getDate	back to summary
public Date getDate() Deprecated Use 'getValidityDate' instead (which can return null).

getInitialPolicies	back to summary
public Set<E> getInitialPolicies()

getNamedCertificateStoreMap	back to summary
public Map<GeneralName, PKIXCertStore<T extends Certificate>> getNamedCertificateStoreMap()

getNamedCRLStoreMap	back to summary
public Map<GeneralName, PKIXCRLStore<T extends CRL>> getNamedCRLStoreMap()

getPolicyQualifiersRejected	back to summary
public boolean getPolicyQualifiersRejected()

getSigProvider	back to summary
public String getSigProvider()

getTargetConstraints back to summary

getTargetConstraints	back to summary
public PKIXCertStoreSelector<T extends Certificate> getTargetConstraints() Returns the required constraints on the target certificate. The constraints are returned as an instance of `Selector`. If `null`, no constraints are defined. Returns:PKIXCertStoreSelector<T extends Certificate> a `Selector` specifying the constraints on the target certificate or attribute certificate (or `null`) See Also `PKIXCertStoreSelector`

public PKIXCertStoreSelector<T extends Certificate> getTargetConstraints()

Returns the required constraints on the target certificate. The constraints are returned as an instance of Selector. If null, no constraints are defined.

Returns:PKIXCertStoreSelector<T extends Certificate>: a Selector specifying the constraints on the target certificate or attribute certificate (or null)
See Also: PKIXCertStoreSelector

getTrustAnchors	back to summary
public Set<E> getTrustAnchors()

getValidityDate back to summary

getValidityDate	back to summary
public Date getValidityDate() Returns the time at which to check the validity of the certification path. If `null`, the current time is used. Returns:Date the `Date`, or `null` if not set

public Date getValidityDate()

Returns the time at which to check the validity of the certification path. If null, the current time is used.

Returns:Date: the Date, or null if not set

getValidityModel	back to summary
public int getValidityModel() Returns:int Returns the validity model. See Also `CHAIN_VALIDITY_MODEL`, `PKIX_VALIDITY_MODEL`

isAnyPolicyInhibited	back to summary
public boolean isAnyPolicyInhibited()

isExplicitPolicyRequired	back to summary
public boolean isExplicitPolicyRequired()

isPolicyMappingInhibited	back to summary
public boolean isPolicyMappingInhibited()

isRevocationEnabled	back to summary
public boolean isRevocationEnabled()

isUseDeltasEnabled back to summary

isUseDeltasEnabled	back to summary
public boolean isUseDeltasEnabled() Defaults to `false`. Returns:boolean Returns if delta CRLs should be used.

public boolean isUseDeltasEnabled()

Defaults to false.

Returns:boolean: Returns if delta CRLs should be used.

org.bouncycastle.jcajce back to summary

public Class PKIXExtendedParameters.Builder

Class Inheritance

extends Object

java.lang.Object
org.bouncycastle.jcajce.PKIXExtendedParameters.Builder

Builder for a PKIXExtendedParameters object.

Field Summary

Modifier and Type	Field and Description
private final PKIXParameters	baseParameters
private final Date	date
private List<PKIXCertStore<T extends Certificate>>	extraCertStores
private List<PKIXCRLStore<T extends CRL>>	extraCRLStores
private Map<GeneralName, PKIXCertStore<T extends Certificate>>	namedCertificateStoreMap
private Map<GeneralName, PKIXCRLStore<T extends CRL>>	namedCRLStoreMap
private boolean	revocationEnabled
private PKIXCertStoreSelector<T extends Certificate>	targetConstraints
private Set<TrustAnchor>	trustAnchors
private boolean	useDeltas
private final Date	validityDate
private int	validityModel

Constructor Summary

Access	Constructor and Description
public	Builder(PKIXParameters baseParameters)
public	Builder(PKIXExtendedParameters baseParameters)

Method Summary

Modifier and Type	Method and Description
public PKIXExtendedParameters.Builder	addCertificateStore(PKIXCertStore<T extends Certificate> store)
public PKIXExtendedParameters.Builder	addCRLStore(PKIXCRLStore<T extends CRL> store)
public PKIXExtendedParameters.Builder	addNamedCertificateStore(GeneralName issuerAltName, PKIXCertStore<T extends Certificate> store)
public PKIXExtendedParameters.Builder	addNamedCRLStore(GeneralName issuerAltName, PKIXCRLStore<T extends CRL> store)
public PKIXExtendedParameters	build()
public void	setRevocationEnabled(boolean true if revocation checking to be enabled, false otherwise. revocationEnabled) Flag whether or not revocation checking is to be enabled.
public PKIXExtendedParameters.Builder	setTargetConstraints(PKIXCertStoreSelector<T extends Certificate> selector)
public PKIXExtendedParameters.Builder	Returns: the current builder. setTrustAnchor(TrustAnchor the trust anchor end-entity and CRLs must be based on. trustAnchor) Set the trustAnchor to be used with these parameters.
public PKIXExtendedParameters.Builder	Returns: the current builder. setTrustAnchors(Set<TrustAnchor> a set of trustAnchors, one of which a particular end-entity and it's associated CRLs must be based on. trustAnchors) Set the set of trustAnchors to be used with these parameters.
public PKIXExtendedParameters.Builder	setUseDeltasEnabled(boolean `true` if delta CRLs should be used. useDeltas) Sets if delta CRLs should be used for checking the revocation status.
public PKIXExtendedParameters.Builder	setValidityModel(int The validity model to set. validityModel)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

baseParameters	back to summary
private final PKIXParameters baseParameters

date	back to summary
private final Date date

extraCertStores	back to summary
private List<PKIXCertStore<T extends Certificate>> extraCertStores

extraCRLStores	back to summary
private List<PKIXCRLStore<T extends CRL>> extraCRLStores

namedCertificateStoreMap	back to summary
private Map<GeneralName, PKIXCertStore<T extends Certificate>> namedCertificateStoreMap

namedCRLStoreMap	back to summary
private Map<GeneralName, PKIXCRLStore<T extends CRL>> namedCRLStoreMap

revocationEnabled	back to summary
private boolean revocationEnabled

targetConstraints	back to summary
private PKIXCertStoreSelector<T extends Certificate> targetConstraints

trustAnchors	back to summary
private Set<TrustAnchor> trustAnchors

useDeltas	back to summary
private boolean useDeltas

validityDate	back to summary
private final Date validityDate

validityModel	back to summary
private int validityModel

Constructor Detail

Builder	back to summary
public Builder(PKIXParameters baseParameters)

Builder	back to summary
public Builder(PKIXExtendedParameters baseParameters)

Method Detail

addCertificateStore	back to summary
public PKIXExtendedParameters.Builder addCertificateStore(PKIXCertStore<T extends Certificate> store)

addCRLStore	back to summary
public PKIXExtendedParameters.Builder addCRLStore(PKIXCRLStore<T extends CRL> store)

addNamedCertificateStore	back to summary
public PKIXExtendedParameters.Builder addNamedCertificateStore(GeneralName issuerAltName, PKIXCertStore<T extends Certificate> store)

addNamedCRLStore	back to summary
public PKIXExtendedParameters.Builder addNamedCRLStore(GeneralName issuerAltName, PKIXCRLStore<T extends CRL> store)

build	back to summary
public PKIXExtendedParameters build()

setRevocationEnabled

back to summary

public void setRevocationEnabled(boolean revocationEnabled)

Flag whether or not revocation checking is to be enabled.

Parameters

revocationEnabled:boolean: true if revocation checking to be enabled, false otherwise.

setTargetConstraints	back to summary
public PKIXExtendedParameters.Builder setTargetConstraints(PKIXCertStoreSelector<T extends Certificate> selector)

setTrustAnchor

back to summary

public PKIXExtendedParameters.Builder setTrustAnchor(TrustAnchor trustAnchor)

Set the trustAnchor to be used with these parameters.

Parameters

trustAnchor:TrustAnchor: the trust anchor end-entity and CRLs must be based on.

Returns:PKIXExtendedParameters.Builder

the current builder.

setTrustAnchors

back to summary

public PKIXExtendedParameters.Builder setTrustAnchors(Set<TrustAnchor> trustAnchors)

Set the set of trustAnchors to be used with these parameters.

Parameters

trustAnchors:Set<TrustAnchor>: a set of trustAnchors, one of which a particular end-entity and it's associated CRLs must be based on.

Returns:PKIXExtendedParameters.Builder

the current builder.

setUseDeltasEnabled back to summary

public PKIXExtendedParameters.Builder setUseDeltasEnabled(boolean useDeltas)

Sets if delta CRLs should be used for checking the revocation status.

Parameters

useDeltas:boolean: true if delta CRLs should be used.

setValidityModel	back to summary
public PKIXExtendedParameters.Builder setValidityModel(int validityModel) Parameters validityModel:int The validity model to set. See Also `CHAIN_VALIDITY_MODEL`, `PKIX_VALIDITY_MODEL`

Modifier and Type	Field and Description
private final PKIXParameters	baseParameters
public static final int	CHAIN_VALIDITY_MODEL This model uses the following validity model.
private final Date	date
private final List<PKIXCertStore<T extends Certificate>>	extraCertStores
private final List<PKIXCRLStore<T extends CRL>>	extraCRLStores
private final Map<GeneralName, PKIXCertStore<T extends Certificate>>	namedCertificateStoreMap
private final Map<GeneralName, PKIXCRLStore<T extends CRL>>	namedCRLStoreMap
public static final int	PKIX_VALIDITY_MODEL This is the default PKIX validity model.
private final boolean	revocationEnabled
private final PKIXCertStoreSelector<T extends Certificate>	targetConstraints
private final Set<TrustAnchor>	trustAnchors
private final boolean	useDeltas
private final Date	validityDate
private final int	validityModel

public Class PKIXExtendedParameters

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

public Class PKIXExtendedParameters.Builder

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail