Bouncy Castle Provider 1.77 · org.bouncycastle.x509.PKIXCertPathReviewer

Modifier and Type	Field and Description
private static final String	AUTH_INFO_ACCESS
protected CertPath	certPath
protected List<E>	certs
private static final String	CRL_DIST_POINTS
protected Date	currentDate
protected List<E>[]	errors
private boolean	initialized
protected int	n
protected List<E>[]	notifications
protected PKIXParameters	pkixParams
protected PolicyNode	policyTree
private static final String	QC_STATEMENT
private static final String	RESOURCE_NAME
protected PublicKey	subjectPublicKey
protected TrustAnchor	trustAnchor
protected Date	validDate

Access	Constructor and Description
public	PKIXCertPathReviewer(CertPath the `CertPath` to validate certPath, PKIXParameters the `PKIXParameters` to use params) Creates a PKIXCertPathReviewer and initializes it with the given `CertPath` and `PKIXParameters` params
public	PKIXCertPathReviewer() Creates an empty PKIXCertPathReviewer.

Method Summary

Modifier and Type	Method and Description
protected void	addError(ErrorBundle msg)
protected void	addError(ErrorBundle msg, int index)
protected void	addNotification(ErrorBundle msg)
protected void	addNotification(ErrorBundle msg, int index)
private void	checkCriticalExtensions()
protected void	checkCRLs(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector<E> crlDistPointUrls, int index)
private void	checkNameConstraints()
private void	checkPathLength()
private void	checkPolicy()
protected void	checkRevocation(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector<E> crlDistPointUrls, Vector<E> ocspUrls, int index)
private void	checkSignatures()
protected void	doChecks()
public CertPath	Returns: the CertPath that was validated getCertPath()
public int	Returns: the size of the CertPath getCertPathSize()
private X509CRL	getCRL(String location)
protected Vector<E>	getCRLDistUrls(CRLDistPoint crlDistPoints)
public List<E>[]	Returns: the Array of Lists which contain the error messages getErrors() Returns an Array of Lists which contains a List of global error messages and a List of error messages for each certificate in the path.
public List<E>	Returns: List of error messages for the certificate getErrors(int the index of the certificate in the CertPath index) Returns an List of error messages for the certificate at the given index in the CertPath.
public List<E>[]	Returns: the Array of Lists which contain the notification messages getNotifications() Returns an Array of Lists which contains a List of global notification messages and a List of botification messages for each certificate in the path.
public List<E>	Returns: List of notification messages for the certificate getNotifications(int the index of the certificate in the CertPath index) Returns an List of notification messages for the certificate at the given index in the CertPath.
protected Vector<E>	getOCSPUrls(AuthorityInformationAccess authInfoAccess)
public PolicyNode	Returns: the valid policy tree, null if no valid policy exists. getPolicyTree()
public PublicKey	Returns: the PublicKey if the last certificate in the CertPath getSubjectPublicKey()
public TrustAnchor	Returns: the TrustAnchor for the CertPath, null if no valid TrustAnchor was found. getTrustAnchor()
protected Collection<E>	getTrustAnchors(X509Certificate cert, Set<E> trustanchors)
public void	init(CertPath the `CertPath` to validate certPath, PKIXParameters the `PKIXParameters` to use params) Initializes the PKIXCertPathReviewer with the given `CertPath` and `PKIXParameters` params
private String	IPtoString(byte[] ip)
public boolean	Returns: if the CertPath is valid isValidCertPath()
private boolean	processQcStatements(X509Certificate cert, int index)

AUTH_INFO_ACCESS	back to summary
private static final String AUTH_INFO_ACCESS

certPath	back to summary
protected CertPath certPath

certs	back to summary
protected List<E> certs

CRL_DIST_POINTS	back to summary
private static final String CRL_DIST_POINTS

currentDate	back to summary
protected Date currentDate

errors	back to summary
protected List<E>[] errors

initialized	back to summary
private boolean initialized

n	back to summary
protected int n

notifications	back to summary
protected List<E>[] notifications

pkixParams	back to summary
protected PKIXParameters pkixParams

policyTree	back to summary
protected PolicyNode policyTree

QC_STATEMENT	back to summary
private static final String QC_STATEMENT

RESOURCE_NAME	back to summary
private static final String RESOURCE_NAME

subjectPublicKey	back to summary
protected PublicKey subjectPublicKey

trustAnchor	back to summary
protected TrustAnchor trustAnchor

validDate	back to summary
protected Date validDate

PKIXCertPathReviewer	back to summary
public PKIXCertPathReviewer(CertPath certPath, PKIXParameters params) throws CertPathReviewerException Creates a PKIXCertPathReviewer and initializes it with the given `CertPath` and `PKIXParameters` params Parameters certPath:CertPath the `CertPath` to validate params:PKIXParameters the `PKIXParameters` to use Exceptions CertPathReviewerException: if the certPath is empty

PKIXCertPathReviewer	back to summary
public PKIXCertPathReviewer() Creates an empty PKIXCertPathReviewer. Don't forget to call init() to initialize the object.

Method Detail

addError	back to summary
protected void addError(ErrorBundle msg)

addError	back to summary
protected void addError(ErrorBundle msg, int index)

addNotification	back to summary
protected void addNotification(ErrorBundle msg)

addNotification	back to summary
protected void addNotification(ErrorBundle msg, int index)

checkCriticalExtensions	back to summary
private void checkCriticalExtensions()

checkCRLs	back to summary
protected void checkCRLs(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector<E> crlDistPointUrls, int index) throws CertPathReviewerException

checkNameConstraints	back to summary
private void checkNameConstraints()

checkPathLength	back to summary
private void checkPathLength()

checkPolicy	back to summary
private void checkPolicy()

checkRevocation	back to summary
protected void checkRevocation(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector<E> crlDistPointUrls, Vector<E> ocspUrls, int index) throws CertPathReviewerException

checkSignatures	back to summary
private void checkSignatures()

doChecks	back to summary
protected void doChecks()

getCertPath	back to summary
public CertPath getCertPath() Returns:CertPath the CertPath that was validated

getCertPathSize	back to summary
public int getCertPathSize() Returns:int the size of the CertPath

getCRL	back to summary
private X509CRL getCRL(String location) throws CertPathReviewerException

getCRLDistUrls	back to summary
protected Vector<E> getCRLDistUrls(CRLDistPoint crlDistPoints)

getErrors back to summary

getErrors	back to summary
public List<E>[] getErrors() Returns an Array of Lists which contains a List of global error messages and a List of error messages for each certificate in the path. The global error List is at index 0. The error lists for each certificate at index 1 to n. The error messages are of type. Returns:List<E>[] the Array of Lists which contain the error messages Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

public List<E>[] getErrors()

Returns an Array of Lists which contains a List of global error messages and a List of error messages for each certificate in the path. The global error List is at index 0. The error lists for each certificate at index 1 to n. The error messages are of type.

Returns:List<E>[]

the Array of Lists which contain the error messages

Exceptions

IllegalStateException:: if the PKIXCertPathReviewer was not initialized

getErrors back to summary

getErrors	back to summary
public List<E> getErrors(int index) Returns an List of error messages for the certificate at the given index in the CertPath. If index == -1 then the list of global errors is returned with errors not specific to a certificate. Parameters index:int the index of the certificate in the CertPath Returns:List<E> List of error messages for the certificate Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

public List<E> getErrors(int index)

Returns an List of error messages for the certificate at the given index in the CertPath. If index == -1 then the list of global errors is returned with errors not specific to a certificate.

Parameters

index:int: the index of the certificate in the CertPath

Returns:List<E>

List of error messages for the certificate

Exceptions

IllegalStateException:: if the PKIXCertPathReviewer was not initialized

getNotifications back to summary

getNotifications	back to summary
public List<E>[] getNotifications() Returns an Array of Lists which contains a List of global notification messages and a List of botification messages for each certificate in the path. The global notificatio List is at index 0. The notification lists for each certificate at index 1 to n. The error messages are of type. Returns:List<E>[] the Array of Lists which contain the notification messages Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

public List<E>[] getNotifications()

Returns an Array of Lists which contains a List of global notification messages and a List of botification messages for each certificate in the path. The global notificatio List is at index 0. The notification lists for each certificate at index 1 to n. The error messages are of type.

Returns:List<E>[]

the Array of Lists which contain the notification messages

Exceptions

IllegalStateException:: if the PKIXCertPathReviewer was not initialized

getNotifications back to summary

getNotifications	back to summary
public List<E> getNotifications(int index) Returns an List of notification messages for the certificate at the given index in the CertPath. If index == -1 then the list of global notifications is returned with notifications not specific to a certificate. Parameters index:int the index of the certificate in the CertPath Returns:List<E> List of notification messages for the certificate Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

public List<E> getNotifications(int index)

Returns an List of notification messages for the certificate at the given index in the CertPath. If index == -1 then the list of global notifications is returned with notifications not specific to a certificate.

Parameters

index:int: the index of the certificate in the CertPath

Returns:List<E>

List of notification messages for the certificate

Exceptions

IllegalStateException:: if the PKIXCertPathReviewer was not initialized

getOCSPUrls	back to summary
protected Vector<E> getOCSPUrls(AuthorityInformationAccess authInfoAccess)

getPolicyTree	back to summary
public PolicyNode getPolicyTree() Returns:PolicyNode the valid policy tree, null if no valid policy exists. Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

getSubjectPublicKey	back to summary
public PublicKey getSubjectPublicKey() Returns:PublicKey the PublicKey if the last certificate in the CertPath Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

getTrustAnchor	back to summary
public TrustAnchor getTrustAnchor() Returns:TrustAnchor the TrustAnchor for the CertPath, null if no valid TrustAnchor was found. Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

getTrustAnchors	back to summary
protected Collection<E> getTrustAnchors(X509Certificate cert, Set<E> trustanchors) throws CertPathReviewerException

init back to summary

init	back to summary
public void init(CertPath certPath, PKIXParameters params) throws CertPathReviewerException Initializes the PKIXCertPathReviewer with the given `CertPath` and `PKIXParameters` params Parameters certPath:CertPath the `CertPath` to validate params:PKIXParameters the `PKIXParameters` to use Exceptions CertPathReviewerException: if the certPath is empty IllegalStateException: if the `PKIXCertPathReviewer` is already initialized

public void init(CertPath certPath, PKIXParameters params) throws CertPathReviewerException

Initializes the PKIXCertPathReviewer with the given CertPath and PKIXParameters params

Parameters

certPath:CertPath: the CertPath to validate
params:PKIXParameters: the PKIXParameters to use

Exceptions

CertPathReviewerException:: if the certPath is empty
IllegalStateException:: if the PKIXCertPathReviewer is already initialized

IPtoString	back to summary
private String IPtoString(byte[] ip)

isValidCertPath	back to summary
public boolean isValidCertPath() Returns:boolean if the CertPath is valid Exceptions IllegalStateException: if the `PKIXCertPathReviewer` was not initialized

processQcStatements	back to summary
private boolean processQcStatements(X509Certificate cert, int index)

public Class PKIXCertPathReviewer

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail