Top Description Fields Constructors Methods
org.bouncycastle.jce.provider

public Class PKIXAttrCertPathValidatorSpi

extends CertPathValidatorSpi
Class Inheritance
Imports
java.security.InvalidAlgorithmParameterException, java.security.cert.CertPath, .CertPathParameters, .CertPathValidatorException, .CertPathValidatorResult, .CertPathValidatorSpi, .PKIXParameters, .X509Certificate, java.util.Date, .HashSet, .Set, org.bouncycastle.jcajce.PKIXExtendedParameters, org.bouncycastle.jcajce.util.BCJcaJceHelper, .JcaJceHelper, org.bouncycastle.jce.exception.ExtCertPathValidatorException, org.bouncycastle.util.Selector, org.bouncycastle.x509.ExtendedPKIXParameters, .X509AttributeCertStoreSelector, .X509AttributeCertificate
CertPathValidatorSpi implementation for X.509 Attribute Certificates la RFC 3281.
See Also
org.bouncycastle.x509.ExtendedPKIXParameters

Field Summary

Modifier and TypeField and Description
private final JcaJceHelper
helper

Constructor Summary

AccessConstructor and Description
public
PKIXAttrCertPathValidatorSpi()

Method Summary

Modifier and TypeMethod and Description
public CertPathValidatorResult

Returns:

A PKIXCertPathValidatorResult of the result of validating the certPath.
engineValidate(CertPath
The certificate path which belongs to the attribute certificate issuer public key certificate.
certPath, CertPathParameters
The PKIX parameters.
params)

Implements abstract java.security.cert.CertPathValidatorSpi.engineValidate.

Validates an attribute certificate with the given certificate path.
Inherited from java.security.cert.CertPathValidatorSpi:
engineGetRevocationChecker

Field Detail

helperback to summary
private final JcaJceHelper helper

Constructor Detail

PKIXAttrCertPathValidatorSpiback to summary
public PKIXAttrCertPathValidatorSpi()

Method Detail

engineValidateback to summary
public CertPathValidatorResult engineValidate(CertPath certPath, CertPathParameters params) throws CertPathValidatorException, InvalidAlgorithmParameterException

Implements abstract java.security.cert.CertPathValidatorSpi.engineValidate.

Validates an attribute certificate with the given certificate path.

params must be an instance of ExtendedPKIXParameters.

The target constraints in the params must be an X509AttributeCertStoreSelector with at least the attribute certificate criterion set. Obey that also target informations may be necessary to correctly validate this attribute certificate.

The attribute certificate issuer must be added to the trusted attribute issuers with org.bouncycastle.x509.ExtendedPKIXParameters#setTrustedACIssuers(java.util.Set).

Parameters
certPath:CertPath

The certificate path which belongs to the attribute certificate issuer public key certificate.

params:CertPathParameters

The PKIX parameters.

Returns:CertPathValidatorResult

A PKIXCertPathValidatorResult of the result of validating the certPath.

Exceptions
CertPathValidatorException:
if the verification fails.
InvalidAlgorithmParameterException:
if params is inappropriate for this validator.