Modifier and Type	Class and Description
public static class	SignedMailValidator.ValidationResult

Field Summary

Modifier and Type	Field and Description
private Class<T>	certPathReviewerClass
private CertStore	certs
private static final Class<T>	DEFAULT_CERT_PATH_REVIEWER
private static final String	EXT_KEY_USAGE
private String[]	fromAddresses
private static final String	RESOURCE_NAME
private Map<K, V>	results
private static final JcaX509CertSelectorConverter	selectorConverter
private static final int	shortKeyLength
private SignerInformationStore	signers
private static final String	SUBJECT_ALTERNATIVE_NAME
private static final long	THIRTY_YEARS_IN_MILLI_SEC

Constructor Summary

Access	Constructor and Description
public	SignedMailValidator(MimeMessage the signed MimeMessage message, PKIXParameters the parameters for the certificate path validation param) Validates the signed `MimeMessage` message.
public	SignedMailValidator(MimeMessage the signed MimeMessage message, PKIXParameters the parameters for the certificate path validation param, Class<T> a subclass of `PKIXCertPathReviewer`. The SignedMailValidator uses objects of this type for the cert path vailidation. The class must have an empty constructor. certPathReviewerClass) Validates the signed `MimeMessage` message.

Method Summary

Modifier and Type	Method and Description
pack-priv static String	addressesToString(Object[] a)
protected void	checkSignerCert(X509Certificate cert, List<E> errors, List<E> notifications)
public static CertPath	Returns: the resulting certificate path. createCertPath(X509Certificate the end of the path signerCert, Set<E> trust anchors for the path trustanchors, List<E> certStores)
public static Object[]	Returns: a CertPath and a List of booleans. createCertPath(X509Certificate the end of the path signerCert, Set<E> trust anchors for the path trustanchors, List<E> list of `CertStore` provided by the system systemCertStores, List<E> list of `CertStore` provided by the user userCertStores) Returns an Object array containing a CertPath and a List of Booleans.
private static ErrorBundle	createErrorBundle(String id)
private static ErrorBundle	createErrorBundle(String id, Object[] arguments)
private static List<E>	findCerts(List<E> certStores, X509CertSelector selector)
private static X509Certificate	findNextCert(List<E> certStores, X509CertSelector selector, Set<E> certSet)
public CertStore	getCertsAndCRLs()
public static Set<E>	getEmailAddresses(X509Certificate cert)
private static ASN1Primitive	getObject(byte[] ext)
public static Date	getSignatureTime(SignerInformation signer)
public SignerInformationStore	getSignerInformationStore()
private static TBSCertificate	getTBSCert(X509Certificate cert)
public SignedMailValidator.ValidationResult	getValidationResult(SignerInformation signer)
protected void	validateSignatures(PKIXParameters pkixParam)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

certPathReviewerClass	back to summary
private Class<T> certPathReviewerClass

certs	back to summary
private CertStore certs

DEFAULT_CERT_PATH_REVIEWER	back to summary
private static final Class<T> DEFAULT_CERT_PATH_REVIEWER

EXT_KEY_USAGE	back to summary
private static final String EXT_KEY_USAGE

fromAddresses	back to summary
private String[] fromAddresses

RESOURCE_NAME	back to summary
private static final String RESOURCE_NAME

results	back to summary
private Map<K, V> results

selectorConverter	back to summary
private static final JcaX509CertSelectorConverter selectorConverter

shortKeyLength	back to summary
private static final int shortKeyLength

signers	back to summary
private SignerInformationStore signers

SUBJECT_ALTERNATIVE_NAME	back to summary
private static final String SUBJECT_ALTERNATIVE_NAME

THIRTY_YEARS_IN_MILLI_SEC	back to summary
private static final long THIRTY_YEARS_IN_MILLI_SEC

Constructor Detail

SignedMailValidator back to summary

SignedMailValidator	back to summary
public SignedMailValidator(MimeMessage message, PKIXParameters param) throws SignedMailValidatorException Validates the signed `MimeMessage` message. The `PKIXParameters` from param are used for the certificate path validation. The actual PKIXParameters used for the certificate path validation is a copy of param with the followin changes: - The validation date is changed to the signature time - A CertStore with certificates and crls from the mail message is added to the CertStores. In `param` it's also possible to add additional CertStores with intermediate Certificates and/or CRLs which then are also used for the validation. Parameters message:MimeMessage the signed MimeMessage param:PKIXParameters the parameters for the certificate path validation Exceptions SignedMailValidatorException: if the message is no signed message or if an exception occurs reading the message

public SignedMailValidator(MimeMessage message, PKIXParameters param) throws SignedMailValidatorException

Validates the signed MimeMessage message. The PKIXParameters from param are used for the certificate path validation. The actual PKIXParameters used for the certificate path validation is a copy of param with the followin changes:
- The validation date is changed to the signature time
- A CertStore with certificates and crls from the mail message is added to the CertStores.

In param it's also possible to add additional CertStores with intermediate Certificates and/or CRLs which then are also used for the validation.

Parameters

message:MimeMessage: the signed MimeMessage
param:PKIXParameters: the parameters for the certificate path validation

Exceptions

SignedMailValidatorException:: if the message is no signed message or if an exception occurs reading the message

SignedMailValidator back to summary

SignedMailValidator	back to summary
public SignedMailValidator(MimeMessage message, PKIXParameters param, Class<T> certPathReviewerClass) throws SignedMailValidatorException Validates the signed `MimeMessage` message. The `PKIXParameters` from param are used for the certificate path validation. The actual PKIXParameters used for the certificate path validation is a copy of param with the followin changes: - The validation date is changed to the signature time - A CertStore with certificates and crls from the mail message is added to the CertStores. In `param` it's also possible to add additional CertStores with intermediate Certificates and/or CRLs which then are also used for the validation. Parameters message:MimeMessage the signed MimeMessage param:PKIXParameters the parameters for the certificate path validation certPathReviewerClass:Class<T> a subclass of `PKIXCertPathReviewer`. The SignedMailValidator uses objects of this type for the cert path vailidation. The class must have an empty constructor. Exceptions SignedMailValidatorException: if the message is no signed message or if an exception occurs reading the message IllegalArgumentException: if the certPathReviewerClass is not a subclass of `PKIXCertPathReviewer` or objects of certPathReviewerClass can not be instantiated

public SignedMailValidator(MimeMessage message, PKIXParameters param, Class<T> certPathReviewerClass) throws SignedMailValidatorException

Parameters

message:MimeMessage: the signed MimeMessage
param:PKIXParameters: the parameters for the certificate path validation
certPathReviewerClass:Class<T>: a subclass of PKIXCertPathReviewer. The SignedMailValidator uses objects of this type for the cert path vailidation. The class must have an empty constructor.

Exceptions

SignedMailValidatorException:: if the message is no signed message or if an exception occurs reading the message
IllegalArgumentException:: if the certPathReviewerClass is not a subclass of PKIXCertPathReviewer or objects of certPathReviewerClass can not be instantiated

Method Detail

addressesToString	back to summary
pack-priv static String addressesToString(Object[] a)

checkSignerCert	back to summary
protected void checkSignerCert(X509Certificate cert, List<E> errors, List<E> notifications)

createCertPath	back to summary
public static CertPath createCertPath(X509Certificate signerCert, Set<E> trustanchors, List<E> certStores) throws GeneralSecurityException Parameters signerCert:X509Certificate the end of the path trustanchors:Set<E> trust anchors for the path Returns:CertPath the resulting certificate path.

createCertPath back to summary

createCertPath	back to summary
public static Object[] createCertPath(X509Certificate signerCert, Set<E> trustanchors, List<E> systemCertStores, List<E> userCertStores) throws GeneralSecurityException Returns an Object array containing a CertPath and a List of Booleans. The list contains the value `true` if the corresponding certificate in the CertPath was taken from the user provided CertStores. Parameters signerCert:X509Certificate the end of the path trustanchors:Set<E> trust anchors for the path systemCertStores:List<E> list of `CertStore` provided by the system userCertStores:List<E> list of `CertStore` provided by the user Returns:Object[] a CertPath and a List of booleans.

public static Object[] createCertPath(X509Certificate signerCert, Set<E> trustanchors, List<E> systemCertStores, List<E> userCertStores) throws GeneralSecurityException

Returns an Object array containing a CertPath and a List of Booleans. The list contains the value true if the corresponding certificate in the CertPath was taken from the user provided CertStores.

Parameters

signerCert:X509Certificate: the end of the path
trustanchors:Set<E>: trust anchors for the path
systemCertStores:List<E>: list of CertStore provided by the system
userCertStores:List<E>: list of CertStore provided by the user

Returns:Object[]

a CertPath and a List of booleans.

createErrorBundle	back to summary
private static ErrorBundle createErrorBundle(String id)

createErrorBundle	back to summary
private static ErrorBundle createErrorBundle(String id, Object[] arguments)

findCerts	back to summary
private static List<E> findCerts(List<E> certStores, X509CertSelector selector) throws CertStoreException

findNextCert	back to summary
private static X509Certificate findNextCert(List<E> certStores, X509CertSelector selector, Set<E> certSet) throws CertStoreException

getCertsAndCRLs	back to summary
public CertStore getCertsAndCRLs()

getEmailAddresses	back to summary
public static Set<E> getEmailAddresses(X509Certificate cert) throws IOException, CertificateEncodingException

getObject	back to summary
private static ASN1Primitive getObject(byte[] ext) throws IOException

getSignatureTime	back to summary
public static Date getSignatureTime(SignerInformation signer)

getSignerInformationStore	back to summary
public SignerInformationStore getSignerInformationStore()

getTBSCert	back to summary
private static TBSCertificate getTBSCert(X509Certificate cert) throws CertificateEncodingException

getValidationResult	back to summary
public SignedMailValidator.ValidationResult getValidationResult(SignerInformation signer) throws SignedMailValidatorException

validateSignatures	back to summary
protected void validateSignatures(PKIXParameters pkixParam)

org.bouncycastle.mail.smime.validator back to summary

public Class SignedMailValidator.ValidationResult

Class Inheritance

extends Object

java.lang.Object
org.bouncycastle.mail.smime.validator.SignedMailValidator.ValidationResult

Field Summary

Modifier and Type	Field and Description
private List<E>	errors
private List<E>	notifications
private PKIXCertPathReviewer	review
private boolean	signVerified
private List<E>	userProvidedCerts

Constructor Summary

Access	Constructor and Description
pack-priv	ValidationResult(PKIXCertPathReviewer review, boolean verified, List<E> errors, List<E> notifications, List<E> userProvidedCerts)

Method Summary

Modifier and Type	Method and Description
public CertPath	Returns: the CertPath for this signature or null if an Exception occurred. getCertPath()
public PKIXCertPathReviewer	Returns: the PKIXCertPathReviewer for the CertPath of this signature or null if an Exception occurred. getCertPathReview()
public List<E>	Returns: List of error messages getErrors() Returns a list of error messages of type `ErrorBundle`.
public List<E>	Returns: List of notification messages getNotifications() Returns a list of notification messages of type `ErrorBundle`.
public List<E>	Returns: a List of Booleans that are true if the corresponding certificate in the CertPath was taken from the CertStore of the SMIME message getUserProvidedCerts()
public boolean	Returns: true if the signature is valid (ie. if it corresponds to the public key of the signer and the cert path for the signers certificate is also valid) isValidSignature()
public boolean	Returns: true if the signature corresponds to the public key of the signer isVerifiedSignature()

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

errors	back to summary
private List<E> errors

notifications	back to summary
private List<E> notifications

review	back to summary
private PKIXCertPathReviewer review

signVerified	back to summary
private boolean signVerified

userProvidedCerts	back to summary
private List<E> userProvidedCerts

Constructor Detail

ValidationResult	back to summary
pack-priv ValidationResult(PKIXCertPathReviewer review, boolean verified, List<E> errors, List<E> notifications, List<E> userProvidedCerts)

Method Detail

getCertPath	back to summary
public CertPath getCertPath() Returns:CertPath the CertPath for this signature or null if an Exception occurred.

getCertPathReview	back to summary
public PKIXCertPathReviewer getCertPathReview() Returns:PKIXCertPathReviewer the PKIXCertPathReviewer for the CertPath of this signature or null if an Exception occurred.

getErrors back to summary

getErrors	back to summary
public List<E> getErrors() Returns a list of error messages of type `ErrorBundle`. Returns:List<E> List of error messages

public List<E> getErrors()

Returns a list of error messages of type ErrorBundle.

Returns:List<E>: List of error messages

getNotifications back to summary

getNotifications	back to summary
public List<E> getNotifications() Returns a list of notification messages of type `ErrorBundle`. Returns:List<E> List of notification messages

public List<E> getNotifications()

Returns a list of notification messages of type ErrorBundle.

Returns:List<E>: List of notification messages

getUserProvidedCerts	back to summary
public List<E> getUserProvidedCerts() Returns:List<E> a List of Booleans that are true if the corresponding certificate in the CertPath was taken from the CertStore of the SMIME message

isValidSignature	back to summary
public boolean isValidSignature() Returns:boolean true if the signature is valid (ie. if it corresponds to the public key of the signer and the cert path for the signers certificate is also valid)

isVerifiedSignature	back to summary
public boolean isVerifiedSignature() Returns:boolean true if the signature corresponds to the public key of the signer

public Class SignedMailValidator

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

public Class SignedMailValidator.ValidationResult

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail