Top Fields Constructors Methods
org.bouncycastle.jce.provider

pack-priv Class RFC3281CertPathUtilities

extends Object
Class Inheritance
Imports
java.io.IOException, java.security.InvalidAlgorithmParameterException, .NoSuchAlgorithmException, .NoSuchProviderException, .Principal, .PublicKey, java.security.cert.CertPath, .CertPathBuilder, .CertPathBuilderException, .CertPathBuilderResult, .CertPathValidator, .CertPathValidatorException, .CertPathValidatorResult, .CertificateExpiredException, .CertificateNotYetValidException, .TrustAnchor, .X509CRL, .X509CertSelector, .X509Certificate, java.util.ArrayList, .Date, .Iterator, .LinkedHashSet, .List, .Set, javax.security.auth.x500.X500Principal, org.bouncycastle.asn1.x500.X500Name, org.bouncycastle.asn1.x509.CRLDistPoint, .CRLReason, .DistributionPoint, .DistributionPointName, .Extension, .GeneralName, .GeneralNames, .TargetInformation, .X509Extensions, org.bouncycastle.jcajce.PKIXCRLStore, .PKIXCertRevocationCheckerParameters, .PKIXCertStoreSelector, .PKIXExtendedBuilderParameters, .PKIXExtendedParameters, org.bouncycastle.jcajce.util.JcaJceHelper, org.bouncycastle.jce.exception.ExtCertPathValidatorException, org.bouncycastle.x509.PKIXAttrCertChecker, .X509AttributeCertificate, .X509CertStoreSelector

Field Summary

Modifier and TypeField and Description
private static final String
AUTHORITY_INFO_ACCESS

private static final String
CRL_DISTRIBUTION_POINTS

private static final String
NO_REV_AVAIL

private static final String
TARGET_INFORMATION

Constructor Summary

AccessConstructor and Description
pack-priv
RFC3281CertPathUtilities()

Method Summary

Modifier and TypeMethod and Description
protected static void
additionalChecks(X509AttributeCertificate attrCert, Set<E> prohibitedACAttributes, Set<E> necessaryACAttributes)

Deprecated as a consequence of X509AttributeCertificate being deprecated.
private static void
checkCRL(DistributionPoint
The distribution point to consider.
dp, X509AttributeCertificate
The attribute certificate which should be checked.
attrCert, PKIXExtendedParameters
PKIX parameters.
paramsPKIX, Date
The date when the certificate revocation status should be checked.
currentDate, Date validityDate, X509Certificate
Certificate to check if it is revoked.
issuerCert, CertStatus certStatus, ReasonsMask
The reasons mask which is already checked.
reasonMask, List<E>
The certificates of the certification path to be checked.
certPathCerts, JcaJceHelper helper)

Deprecated as a consequence of X509AttributeCertificate being deprecated.
Checks a distribution point for revocation information for the certificate attrCert.
protected static void
checkCRLs(X509AttributeCertificate
Attribute certificate to check if it is revoked.
attrCert, PKIXExtendedParameters
PKIX parameters.
paramsPKIX, Date currentDate, Date
The date when the certificate revocation status should be checked.
validityDate, X509Certificate
The issuer certificate of the attribute certificate attrCert.
issuerCert, List<E>
The certificates of the certification path to be checked.
certPathCerts, JcaJceHelper helper)

Deprecated as a consequence of X509AttributeCertificate being deprecated.
Checks if an attribute certificate is revoked.
protected static CertPath

Returns:

The certificate path of the holder certificate.
processAttrCert1(X509AttributeCertificate
the attribute certificate.
attrCert, PKIXExtendedParameters
The PKIX parameters.
pkixParams)

Deprecated as a consequence of X509AttributeCertificate being deprecated.
Searches for a holder public key certificate and verifies its certification path.
protected static CertPathValidatorResult
processAttrCert2(CertPath certPath, PKIXExtendedParameters pkixParams)

protected static void
processAttrCert3(X509Certificate acIssuerCert, PKIXExtendedParameters pkixParams)

protected static void
processAttrCert4(X509Certificate acIssuerCert, Set<E> trustedACIssuers)

protected static void
processAttrCert5(X509AttributeCertificate attrCert, Date validityDate)

Deprecated as a consequence of X509AttributeCertificate being deprecated.
protected static void
processAttrCert7(X509AttributeCertificate attrCert, CertPath certPath, CertPath holderCertPath, PKIXExtendedParameters pkixParams, Set<E> attrCertCheckers)

Deprecated as a consequence of X509AttributeCertificate being deprecated.
Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

AUTHORITY_INFO_ACCESSback to summary
private static final String AUTHORITY_INFO_ACCESS
CRL_DISTRIBUTION_POINTSback to summary
private static final String CRL_DISTRIBUTION_POINTS
NO_REV_AVAILback to summary
private static final String NO_REV_AVAIL
TARGET_INFORMATIONback to summary
private static final String TARGET_INFORMATION

Constructor Detail

RFC3281CertPathUtilitiesback to summary
pack-priv RFC3281CertPathUtilities()

Method Detail

additionalChecksback to summary
protected static void additionalChecks(X509AttributeCertificate attrCert, Set<E> prohibitedACAttributes, Set<E> necessaryACAttributes) throws CertPathValidatorException

Deprecated

as a consequence of X509AttributeCertificate being deprecated. See corresponding docs for further information.

checkCRLback to summary
private static void checkCRL(DistributionPoint dp, X509AttributeCertificate attrCert, PKIXExtendedParameters paramsPKIX, Date currentDate, Date validityDate, X509Certificate issuerCert, CertStatus certStatus, ReasonsMask reasonMask, List<E> certPathCerts, JcaJceHelper helper) throws AnnotatedException, RecoverableCertPathValidatorException

Deprecated

as a consequence of X509AttributeCertificate being deprecated. See corresponding docs for further information.

Checks a distribution point for revocation information for the certificate attrCert.

Parameters
dp:DistributionPoint

The distribution point to consider.

attrCert:X509AttributeCertificate

The attribute certificate which should be checked.

paramsPKIX:PKIXExtendedParameters

PKIX parameters.

currentDate:Date

The date when the certificate revocation status should be checked.

issuerCert:X509Certificate

Certificate to check if it is revoked.

reasonMask:ReasonsMask

The reasons mask which is already checked.

certPathCerts:List<E>

The certificates of the certification path to be checked.

Exceptions
AnnotatedException:
if the certificate is revoked or the status cannot be checked or some error occurs.
checkCRLsback to summary
protected static void checkCRLs(X509AttributeCertificate attrCert, PKIXExtendedParameters paramsPKIX, Date currentDate, Date validityDate, X509Certificate issuerCert, List<E> certPathCerts, JcaJceHelper helper) throws CertPathValidatorException

Deprecated

as a consequence of X509AttributeCertificate being deprecated. See corresponding docs for further information.

Checks if an attribute certificate is revoked.

Parameters
attrCert:X509AttributeCertificate

Attribute certificate to check if it is revoked.

paramsPKIX:PKIXExtendedParameters

PKIX parameters.

validityDate:Date

The date when the certificate revocation status should be checked.

issuerCert:X509Certificate

The issuer certificate of the attribute certificate attrCert.

certPathCerts:List<E>

The certificates of the certification path to be checked.

Exceptions
CertPathValidatorException:
if the certificate is revoked or the status cannot be checked or some error occurs.
processAttrCert1back to summary
protected static CertPath processAttrCert1(X509AttributeCertificate attrCert, PKIXExtendedParameters pkixParams) throws CertPathValidatorException

Deprecated

as a consequence of X509AttributeCertificate being deprecated. See corresponding docs for further information.

Searches for a holder public key certificate and verifies its certification path.

Parameters
attrCert:X509AttributeCertificate

the attribute certificate.

pkixParams:PKIXExtendedParameters

The PKIX parameters.

Returns:CertPath

The certificate path of the holder certificate.

Exceptions
AnnotatedException:
if
  • no public key certificate can be found although holder information is given by an entity name or a base certificate ID
  • support classes cannot be created
  • no certification path for the public key certificate can be built
processAttrCert2back to summary
protected static CertPathValidatorResult processAttrCert2(CertPath certPath, PKIXExtendedParameters pkixParams) throws CertPathValidatorException
processAttrCert3back to summary
protected static void processAttrCert3(X509Certificate acIssuerCert, PKIXExtendedParameters pkixParams) throws CertPathValidatorException
processAttrCert4back to summary
protected static void processAttrCert4(X509Certificate acIssuerCert, Set<E> trustedACIssuers) throws CertPathValidatorException
processAttrCert5back to summary
protected static void processAttrCert5(X509AttributeCertificate attrCert, Date validityDate) throws CertPathValidatorException

Deprecated

as a consequence of X509AttributeCertificate being deprecated. See corresponding docs for further information.

processAttrCert7back to summary
protected static void processAttrCert7(X509AttributeCertificate attrCert, CertPath certPath, CertPath holderCertPath, PKIXExtendedParameters pkixParams, Set<E> attrCertCheckers) throws CertPathValidatorException

Deprecated

as a consequence of X509AttributeCertificate being deprecated. See corresponding docs for further information.