eu.emi.security.authn.x509.helpers.pkipath.bc
public class CertPathValidatorUtilities extends CertPathValidatorUtilities
CertPathValidatorUtilities
plus in some
cases fixes bugs plus produces errors in the desired format.ANY_POLICY, AUTHORITY_KEY_IDENTIFIER, BASIC_CONSTRAINTS, CERTIFICATE_POLICIES, CRL_DISTRIBUTION_POINTS, CRL_NUMBER, CRL_SIGN, CRL_UTIL, crlReasons, DELTA_CRL_INDICATOR, FRESHEST_CRL, INHIBIT_ANY_POLICY, ISSUING_DISTRIBUTION_POINT, KEY_CERT_SIGN, KEY_USAGE, NAME_CONSTRAINTS, POLICY_CONSTRAINTS, POLICY_MAPPINGS, SUBJECT_ALTERNATIVE_NAME
Constructor and Description |
---|
CertPathValidatorUtilities() |
Modifier and Type | Method and Description |
---|---|
static void |
addAdditionalStoresFromAltNames(X509Certificate cert,
ExtendedPKIXParameters pkixParams) |
protected static void |
addAdditionalStoresFromCRLDistributionPoint(CRLDistPoint crldp,
ExtendedPKIXParameters pkixParams) |
static Collection<?> |
findIssuerCerts(X509Certificate cert,
ExtendedPKIXBuilderParameters pkixParams) |
static TrustAnchor |
findTrustAnchor2(X509Certificate cert,
Set<?> trustAnchors,
String sigProvider) |
protected static Set<?> |
getCompleteCRLs2(DistributionPoint dp,
X509Certificate cert,
Date currentDate,
ExtendedPKIXParameters paramsPKIX) |
protected static Set<X509CRL> |
getDeltaCRLs2(Date currentDate,
ExtendedPKIXParameters paramsPKIX,
X509CRL completeCRL)
Fetches delta CRLs according to RFC 3280 section 5.2.4.
|
protected static X500Principal |
getEncodedIssuerPrincipal(Object cert) |
protected static DERObject |
getExtensionValue(X509Extension ext,
String oid) |
static BigInteger |
getSerialNumber(Object cert) |
addAdditionalStoreFromLocation, findCertificates, findCertificates, findTrustAnchor, findTrustAnchor, getAlgorithmIdentifier, getCertStatus, getCompleteCRLs, getCRLIssuersFromDistributionPoint, getDeltaCRLs, getIssuerPrincipal, getNextWorkingKey, getQualifierSet, getSubjectPrincipal, getValidCertDateFromValidityModel, getValidDate, isAnyPolicy, isSelfIssued, prepareNextCertB1, prepareNextCertB2, processCertD1i, processCertD1ii, removePolicyNode, verifyX509Certificate
public static TrustAnchor findTrustAnchor2(X509Certificate cert, Set<?> trustAnchors, String sigProvider) throws AnnotatedException
AnnotatedException
public static void addAdditionalStoresFromAltNames(X509Certificate cert, ExtendedPKIXParameters pkixParams) throws CertificateParsingException
CertificateParsingException
public static Collection<?> findIssuerCerts(X509Certificate cert, ExtendedPKIXBuilderParameters pkixParams) throws AnnotatedException
AnnotatedException
protected static Set<?> getCompleteCRLs2(DistributionPoint dp, X509Certificate cert, Date currentDate, ExtendedPKIXParameters paramsPKIX) throws SimpleValidationErrorException
SimpleValidationErrorException
protected static Set<X509CRL> getDeltaCRLs2(Date currentDate, ExtendedPKIXParameters paramsPKIX, X509CRL completeCRL) throws SimpleValidationErrorException
currentDate
- The date for which the delta CRLs must be valid.paramsPKIX
- The extended PKIX parameters.completeCRL
- The complete CRL the delta CRL is for.Set
of X509CRL
s with delta CRLs.AnnotatedException
- if an exception occurs while picking the
delta CRLs.SimpleValidationErrorException
protected static DERObject getExtensionValue(X509Extension ext, String oid) throws AnnotatedException
AnnotatedException
protected static void addAdditionalStoresFromCRLDistributionPoint(CRLDistPoint crldp, ExtendedPKIXParameters pkixParams) throws AnnotatedException
AnnotatedException
public static BigInteger getSerialNumber(Object cert)
protected static X500Principal getEncodedIssuerPrincipal(Object cert)
Copyright © 2012-2014 European Middleware Initiative. All Rights Reserved.