Deprecated
use PKIXExtendedParameters
| Modifier and Type | Field and Description |
|---|---|
| private boolean | |
| private List | |
| private Set | |
| public static final int | CHAIN_VALIDITY_MODEL
This model uses the following validity model. |
| private Set | |
| public static final int | PKIX_VALIDITY_MODEL
This is the default PKIX validity model. |
| private Set | |
| private Selector | |
| private List | |
| private Set | |
| private boolean | |
| private int |
| Access | Constructor and Description |
|---|---|
| public | ExtendedPKIXParameters(Set<E>
a trustAnchors)Set of TrustAnchorsCreates an instance of |
| Modifier and Type | Method and Description |
|---|---|
| public void | |
| public void | addAdditionalStore(Store<T>
The store to add. store)
Deprecated
use addStore().
Adds an additional Bouncy Castle |
| public void | |
| public Object | clone()
Overrides java. Implements java. Makes a copy of this |
| public List | Returns: an immutableList of additional Bouncy Castle
Stores. Never null.Returns an immutable |
| public Set | Returns: Returns the attribute certificate checker. Is nevernull.Returns the attribute certificate checker. |
| public static ExtendedPKIXParameters | Returns: an extended PKIX params objectThe given pkixParams)PKIXParameters
References Deprecated
ExtendedPKIXParameters is deprecated or references (maybe indirectly) at least one deprecated element.
Returns an instance with the parameters of a given
|
| public Set | Returns: Returns the necessary AC attributes.Returns the neccessary attributes which must be contained in an attribute certificate. |
| public Set | Returns: Returns the prohibited AC attributes. Is nevernull.Returns the attribute certificates which are not allowed. |
| public List | Returns: an immutableList of Bouncy Castle
Stores. Never null.Returns an immutable |
| public Selector | Returns: aSelector specifying the constraints on the
target certificate or attribute certificate (or null)Returns the required constraints on the target certificate or attribute certificate. |
| public Set | Returns: Returns an immutable set of the trusted AC issuers.Returns the trusted attribute certificate issuers. |
| public int | |
| public boolean | Returns: Returnstrue if additional stores are used.Returns if additional |
| public boolean | |
| public void | setAdditionalLocationsEnabled(boolean
true if additional stores are used.Sets if additional |
| public void | setAttrCertCheckers(Set<E>
The attribute certificate checkers to set. Is
never attrCertCheckers)null.Sets the attribute certificate checkers. |
| public void | setCertStores(List<E>
a stores)List of CertStores (or
null)Overrides java. Sets the Java CertStore to this extended PKIX parameters. |
| public void | setNecessaryACAttributes(Set<E>
The necessary AC attributes to set. necessaryACAttributes)Sets the neccessary which must be contained in an attribute certificate. |
| protected void | setParams(PKIXParameters
Parameters to set. If this are
params)ExtendedPKIXParameters they are copied to.Method to support |
| public void | setProhibitedACAttributes(Set<E>
The prohibited AC attributes to set. prohibitedACAttributes)Sets the attribute certificates which are not allowed. |
| public void | |
| public void | setTargetCertConstraints(CertSelector
a selector)X509CertSelector specifying the
constraints on the target certificate (or null)Overrides java. Sets the required constraints on the target certificate. |
| public void | setTargetConstraints(Selector<T>
a selector)Selector specifying the constraints on
the target certificate or attribute certificate (or
null)Sets the required constraints on the target certificate or attribute certificate. |
| public void | setTrustedACIssuers(Set<E>
The trusted AC issuers to set. Is never
trustedACIssuers)null.Sets the trusted attribute certificate issuers. |
| public void | setUseDeltasEnabled(boolean
true if delta CRLs should be used.Sets if delta CRLs should be used for checking the revocation status. |
| public void |
| additionalLocationsEnabled | back to summary |
|---|---|
| private boolean additionalLocationsEnabled | |
| additionalStores | back to summary |
|---|---|
| private List<E> additionalStores | |
| attrCertCheckers | back to summary |
|---|---|
| private Set<E> attrCertCheckers | |
| CHAIN_VALIDITY_MODEL | back to summary |
|---|---|
| public static final int CHAIN_VALIDITY_MODEL This model uses the following validity model. Each certificate must have
been valid at the moment where is was used. That means the end
certificate must have been valid at the time the signature was done. The
CA certificate which signed the end certificate must have been valid,
when the end certificate was signed. The CA (or Root CA) certificate must
have been valid, when the CA certificate was signed and so on. So the
It is used e.g. in the German signature law. | |
| necessaryACAttributes | back to summary |
|---|---|
| private Set<E> necessaryACAttributes | |
| PKIX_VALIDITY_MODEL | back to summary |
|---|---|
| public static final int PKIX_VALIDITY_MODEL This is the default PKIX validity model. Actually there are two variants
of this: The PKIX model and the modified PKIX model. The PKIX model
verifies that all involved certificates must have been valid at the
current time. The modified PKIX model verifies that all involved
certificates were valid at the signing time. Both are indirectly choosen
with the | |
| prohibitedACAttributes | back to summary |
|---|---|
| private Set<E> prohibitedACAttributes | |
| selector | back to summary |
|---|---|
| private Selector<T> selector | |
| stores | back to summary |
|---|---|
| private List<E> stores | |
| trustedACIssuers | back to summary |
|---|---|
| private Set<E> trustedACIssuers | |
| useDeltas | back to summary |
|---|---|
| private boolean useDeltas | |
| validityModel | back to summary |
|---|---|
| private int validityModel | |
| ExtendedPKIXParameters | back to summary |
|---|---|
| public ExtendedPKIXParameters(Set<E> trustAnchors) throws InvalidAlgorithmParameterException Creates an instance of
Note that the
| |
| addAddionalStore | back to summary |
|---|---|
| public void addAddionalStore(Store<T> store)
Deprecated
| |
| addAdditionalStore | back to summary |
|---|---|
| public void addAdditionalStore(Store<T> store)
Deprecated use addStore(). Adds an additional Bouncy Castle You should not use this method. This method is used for adding additional X.509 stores, which are used to add (remote) locations, e.g. LDAP, found during X.509 object processing, e.g. in certificates or CRLs. This method is used in PKIX certification path processing.
If
| |
| addStore | back to summary |
|---|---|
| public void addStore(Store<T> store) Adds a Bouncy Castle This method should be used to add local stores, like collection based X.509 stores, if available. Local stores should be considered first, before trying to use additional (remote) locations, because they do not need possible additional network traffic.
If | |
| clone | back to summary |
|---|---|
| public Object clone() Overrides java. Implements java. Doc from java. Makes a copy of this
| |
| getAdditionalStores | back to summary |
|---|---|
| public List Returns an immutable
| |
| getAttrCertCheckers | back to summary |
|---|---|
| public Set Returns the attribute certificate checker. The returned set contains
| |
| getInstance | back to summary |
|---|---|
| public static ExtendedPKIXParameters getInstance(PKIXParameters pkixParams)
References Deprecated
See corresponding docs for further information. Returns an instance with the parameters of a given
| |
| getNecessaryACAttributes | back to summary |
|---|---|
| public Set Returns the neccessary attributes which must be contained in an attribute certificate.
The returned
| |
| getProhibitedACAttributes | back to summary |
|---|---|
| public Set Returns the attribute certificates which are not allowed.
The returned
| |
| getStores | back to summary |
|---|---|
| public List Returns an immutable
| |
| getTargetConstraints | back to summary |
|---|---|
| public Selector Returns the required constraints on the target certificate or attribute
certificate. The constraints are returned as an instance of
The target certificate in a PKIX path may be a certificate or an attribute certificate.
Note that the
| |
| getTrustedACIssuers | back to summary |
|---|---|
| public Set Returns the trusted attribute certificate issuers. If attribute certificates is verified the trusted AC issuers must be set.
The returned
The returned
| |
| getValidityModel | back to summary |
|---|---|
public int getValidityModel()
| |
| isAdditionalLocationsEnabled | back to summary |
|---|---|
| public boolean isAdditionalLocationsEnabled() Returns if additional
| |
| isUseDeltasEnabled | back to summary |
|---|---|
| public boolean isUseDeltasEnabled() Defaults to
| |
| setAdditionalLocationsEnabled | back to summary |
|---|---|
| public void setAdditionalLocationsEnabled(boolean enabled) Sets if additional
| |
| setAttrCertCheckers | back to summary |
|---|---|
| public void setAttrCertCheckers(Set<E> attrCertCheckers) Sets the attribute certificate checkers.
All elements in the The given set is cloned.
| |
| setCertStores | back to summary |
|---|---|
| public void setCertStores(List<E> stores) Overrides java. Sets the Java CertStore to this extended PKIX parameters.
| |
| setNecessaryACAttributes | back to summary |
|---|---|
| public void setNecessaryACAttributes(Set<E> necessaryACAttributes) Sets the neccessary which must be contained in an attribute certificate.
The The set is cloned.
| |
| setParams | back to summary |
|---|---|
| protected void setParams(PKIXParameters params) Method to support
| |
| setProhibitedACAttributes | back to summary |
|---|---|
| public void setProhibitedACAttributes(Set<E> prohibitedACAttributes) Sets the attribute certificates which are not allowed.
The The set is cloned.
| |
| setStores | back to summary |
|---|---|
| public void setStores(List<E> stores) Sets the Bouncy Castle Stores for finding CRLs, certificates, attribute certificates or cross certificates.
The
| |
| setTargetCertConstraints | back to summary |
|---|---|
| public void setTargetCertConstraints(CertSelector selector) Overrides java. Sets the required constraints on the target certificate. The constraints
are specified as an instance of
This method wraps the given
Note that the
| |
| setTargetConstraints | back to summary |
|---|---|
| public void setTargetConstraints(Selector<T> selector) Sets the required constraints on the target certificate or attribute
certificate. The constraints are specified as an instance of
The target certificate in a PKIX path may be a certificate or an attribute certificate.
Note that the
| |
| setTrustedACIssuers | back to summary |
|---|---|
| public void setTrustedACIssuers(Set<E> trustedACIssuers) Sets the trusted attribute certificate issuers. If attribute certificates is verified the trusted AC issuers must be set.
The The given set is cloned.
| |
| setUseDeltasEnabled | back to summary |
|---|---|
| public void setUseDeltasEnabled(boolean useDeltas) Sets if delta CRLs should be used for checking the revocation status.
| |
| setValidityModel | back to summary |
|---|---|
public void setValidityModel(int validityModel)
| |