| |
|
| java.lang.Object
 java.security.cert.CertPathValidator
| CertPathValidator | | public class CertPathValidator (Code) | | A class for validating certification paths (also known as certificate
chains).
This class uses a provider-based architecture.
To create a CertPathValidator,
call one of the static getInstance methods, passing in the
algorithm name of the CertPathValidator desired and
optionally the name of the provider desired.
Once a CertPathValidator object has been created, it can
be used to validate certification paths by calling the
CertPathValidator.validatevalidate method and passing it the CertPath to be validated
and an algorithm-specific set of parameters. If successful, the result is
returned in an object that implements the
CertPathValidatorResult interface.
Concurrent Access
The static methods of this class are guaranteed to be thread-safe.
Multiple threads may concurrently invoke the static methods defined in
this class with no ill effects.
However, this is not true for the non-static methods defined by this class.
Unless otherwise documented by a specific provider, threads that need to
access a single CertPathValidator instance concurrently should
synchronize amongst themselves and provide the necessary locking. Multiple
threads each manipulating a different CertPathValidator
instance need not synchronize.
See Also: CertPath
version:
1.20 05/05/07
since:
1.4
author:
Yassir Elley |
| Method Summary | |
| final public String | getAlgorithm()
Returns the algorithm name of this CertPathValidator. | | final public static String | getDefaultType()
Returns the default CertPathValidator type as specified in
the Java security properties file, or the string "PKIX"
if no such property exists. | | public static CertPathValidator | getInstance(String algorithm)
Returns a CertPathValidator object that implements the
specified algorithm.
This method traverses the list of registered security Providers,
starting with the most preferred Provider.
A new CertPathValidator object encapsulating the
CertPathValidatorSpi implementation from the first
Provider that supports the specified algorithm is returned.
Note that the list of registered providers may be retrieved via
the
Security.getProviders Security.getProviders() method.
Parameters:
algorithm - the name of the requested CertPathValidatoralgorithm. | | public static CertPathValidator | getInstance(String algorithm, String provider)
Returns a CertPathValidator object that implements the
specified algorithm.
A new CertPathValidator object encapsulating the
CertPathValidatorSpi implementation from the specified provider
is returned. | | public static CertPathValidator | getInstance(String algorithm, Provider provider)
Returns a CertPathValidator object that implements the
specified algorithm.
A new CertPathValidator object encapsulating the
CertPathValidatorSpi implementation from the specified Provider
object is returned. | | final public Provider | getProvider()
Returns the Provider of this
CertPathValidator. | | final public CertPathValidatorResult | validate(CertPath certPath, CertPathParameters params)
Validates the specified certification path using the specified
algorithm parameter set. |
| CertPathValidator | | protected CertPathValidator(CertPathValidatorSpi validatorSpi, Provider provider, String algorithm)(Code) | | Creates a CertPathValidator object of the given algorithm,
and encapsulates the given provider implementation (SPI object) in it.
Parameters:
validatorSpi - the provider implementation
Parameters:
provider - the provider
Parameters:
algorithm - the algorithm name |
| getAlgorithm | | final public String getAlgorithm()(Code) | | Returns the algorithm name of this CertPathValidator.
the algorithm name of this CertPathValidator |
| getDefaultType | | final public static String getDefaultType()(Code) | | Returns the default CertPathValidator type as specified in
the Java security properties file, or the string "PKIX"
if no such property exists. The Java security properties file is
located in the file named <JAVA_HOME>/lib/security/java.security.
<JAVA_HOME> refers to the value of the java.home system property,
and specifies the directory where the JRE is installed.
The default CertPathValidator type can be used by
applications that do not want to use a hard-coded type when calling one
of the getInstance methods, and want to provide a default
type in case a user does not specify its own.
The default CertPathValidator type can be changed by
setting the value of the "certpathvalidator.type" security property
(in the Java security properties file) to the desired type.
the default CertPathValidator type as specified in the Java security properties file, or the string "PKIX"if no such property exists. |
| getInstance | | public static CertPathValidator getInstance(String algorithm) throws NoSuchAlgorithmException(Code) | | Returns a CertPathValidator object that implements the
specified algorithm.
This method traverses the list of registered security Providers,
starting with the most preferred Provider.
A new CertPathValidator object encapsulating the
CertPathValidatorSpi implementation from the first
Provider that supports the specified algorithm is returned.
Note that the list of registered providers may be retrieved via
the
Security.getProviders Security.getProviders() method.
Parameters:
algorithm - the name of the requested CertPathValidatoralgorithm. See Appendix A in the Java Certification Path API Programmer's Guide for information about standard algorithm names. a CertPathValidator object that implements thespecified algorithm.
exception:
NoSuchAlgorithmException - if no Provider supports aCertPathValidatorSpi implementation for thespecified algorithm.
See Also: java.security.Provider |
| getInstance | | public static CertPathValidator getInstance(String algorithm, String provider) throws NoSuchAlgorithmException, NoSuchProviderException(Code) | | Returns a CertPathValidator object that implements the
specified algorithm.
A new CertPathValidator object encapsulating the
CertPathValidatorSpi implementation from the specified provider
is returned. The specified provider must be registered
in the security provider list.
Note that the list of registered providers may be retrieved via
the
Security.getProviders Security.getProviders() method.
Parameters:
algorithm - the name of the requested CertPathValidatoralgorithm. See Appendix A in the Java Certification Path API Programmer's Guide for information about standard algorithm names.
Parameters:
provider - the name of the provider. a CertPathValidator object that implements thespecified algorithm.
exception:
NoSuchAlgorithmException - if a CertPathValidatorSpiimplementation for the specified algorithm is notavailable from the specified provider.
exception:
NoSuchProviderException - if the specified provider is notregistered in the security provider list.
exception:
IllegalArgumentException - if the provider isnull or empty.
See Also: java.security.Provider |
| getInstance | | public static CertPathValidator getInstance(String algorithm, Provider provider) throws NoSuchAlgorithmException(Code) | | Returns a CertPathValidator object that implements the
specified algorithm.
A new CertPathValidator object encapsulating the
CertPathValidatorSpi implementation from the specified Provider
object is returned. Note that the specified Provider object
does not have to be registered in the provider list.
Parameters:
algorithm - the name of the requestedCertPathValidator algorithm.See Appendix A in the Java Certification Path API Programmer's Guide for information about standard algorithm names.
Parameters:
provider - the provider. a CertPathValidator object that implements thespecified algorithm.
exception:
NoSuchAlgorithmException - if a CertPathValidatorSpiimplementation for the specified algorithm is not availablefrom the specified Provider object.
exception:
IllegalArgumentException - if the provider isnull.
See Also: java.security.Provider |
| getProvider | | final public Provider getProvider()(Code) | | Returns the Provider of this
CertPathValidator.
the Provider of this CertPathValidator |
| validate | | final public CertPathValidatorResult validate(CertPath certPath, CertPathParameters params) throws CertPathValidatorException, InvalidAlgorithmParameterException(Code) | | Validates the specified certification path using the specified
algorithm parameter set.
The CertPath specified must be of a type that is
supported by the validation algorithm, otherwise an
InvalidAlgorithmParameterException will be thrown. For
example, a CertPathValidator that implements the PKIX
algorithm validates CertPath objects of type X.509.
Parameters:
certPath - the CertPath to be validated
Parameters:
params - the algorithm parameters the result of the validation algorithm
exception:
CertPathValidatorException - if the CertPathdoes not validate
exception:
InvalidAlgorithmParameterException - if the specified parameters or the type of the specified CertPath are inappropriate for this CertPathValidator |
|
|
|