| java.lang.Object
 org.bouncycastle.jce.provider.CertPathValidatorUtilities
All known Subclasses: org.bouncycastle.x509.PKIXCertPathReviewer, org.bouncycastle.jce.provider.RFC3281CertPathUtilities,
| CertPathValidatorUtilities | | public class CertPathValidatorUtilities (Code) | | |
| Method Summary | |
| protected static void | addAdditionalStoreFromLocation(String location, ExtendedPKIXParameters pkixParams)
| | protected static void | addAdditionalStoresFromCRLDistributionPoint(CRLDistPoint crldp, ExtendedPKIXParameters pkixParams)
| | final protected static Collection | findCRLs(X509CRLSelector crlSelect, List crlStores)
Return a Collection of all CRLs found in the
CertStore's that are matching the crlSelect criteriums.
Parameters:
crlSelect - a CertSelector CertSelectorobject that will be used to select the CRLs
Parameters:
crlStores - a List containing only CertStoreCertStore objects. | | final protected static Collection | findCRLs(X509CRLStoreSelector crlSelect, List crlStores)
Return a Collection of all CRLs found in the X509Store's that are
matching the crlSelect criteriums.
Parameters:
crlSelect - a X509CRLStoreSelector object that will be usedto select the CRLs
Parameters:
crlStores - a List containing onlyorg.bouncycastle.x509.X509Store X509Store objects.These are used to search for CRLs a Collection of all found X509CRL X509CRL objects. | | protected static Collection | findCertificates(CertSelector certSelect, List certStores)
Return a Collection of all certificates found in the CertStore's that are
matching the certSelect criteriums.
Parameters:
certSelect - a CertSelector CertSelector object that willbe used to select the certificates
Parameters:
certStores - a List containing only CertStore CertStoreobjects. | | protected static Collection | findCertificates(Selector certSelect, List certStores)
Return a Collection of all certificates or attribute certificates found
in the X509Store's that are matching the certSelect criteriums.
Parameters:
certSelect - a Selector object that will be used to selectthe certificates
Parameters:
certStores - a List containing only X509Store objects. | | final protected static TrustAnchor | findTrustAnchor(X509Certificate cert, CertPath certPath, int index, Set trustAnchors)
Search the given Set of TrustAnchor's for one that is the
issuer of the given X509 certificate.
Parameters:
cert - the X509 certificate
Parameters:
trustAnchors - a Set of TrustAnchor's the TrustAnchor object if found ornull if not.
exception:
CertPathValidatorException - if a TrustAnchor wasfound but the signature verification on the given certificatehas thrown an exception. | | protected static AlgorithmIdentifier | getAlgorithmIdentifier(PublicKey key)
| | protected static void | getCRLIssuersFromDistributionPoint(DistributionPoint dp, Collection issuerPrincipals, X509CRLStoreSelector selector, ExtendedPKIXParameters pkixParams)
Add the CRL issuers from the cRLIssuer field of the distribution point or
from the certificate if not given to the issuer criterion of the
selector.
The issuerPrincipals are a collection with a single
X500Principal for X509Certificates. | | protected static void | getCertStatus(Date validDate, X509CRL crl, BigInteger serialNumber, CertStatus certStatus)
| | protected static Set | getCompleteCRLs(DistributionPoint dp, Object cert, Date currentDate, ExtendedPKIXParameters paramsPKIX)
Fetches complete CRLs according to RFC 3280.
Parameters:
dp - The distribution point for which the complete CRL
Parameters:
cert - The X509Certificate ororg.bouncycastle.x509.X509AttributeCertificate forwhich the CRL should be searched.
Parameters:
currentDate - The date for which the delta CRLs must be valid.
Parameters:
paramsPKIX - The extended PKIX parameters. | | protected static Set | getDeltaCRLs(Date currentDate, ExtendedPKIXParameters paramsPKIX, X509CRL completeCRL)
Fetches delta CRLs according to RFC 3280 section 5.2.4.
Parameters:
currentDate - The date for which the delta CRLs must be valid.
Parameters:
paramsPKIX - The extended PKIX parameters.
Parameters:
completeCRL - The complete CRL the delta CRL is for. | | protected static X500Principal | getEncodedIssuerPrincipal(Object cert)
Returns the issuer of an attribute certificate or certificate.
Parameters:
cert - The attribute certificate or certificate. | | protected static DERObject | getExtensionValue(java.security.cert.X509Extension ext, String oid)
extract the value of the given extension, if it exists. | | protected static X500Principal | getIssuerPrincipal(X509CRL crl)
| | protected static PublicKey | getNextWorkingKey(X509Certificate cert, List certs, int index)
Return the next working key inheriting DSA parameters if necessary.
This methods inherits DSA parameters from the indexed certificate or
previous certificates in the certificate chain to the returned
PublicKey. | | final protected static Set | getQualifierSet(ASN1Sequence qualifiers)
| | protected static X500Principal | getSubjectPrincipal(X509Certificate cert)
| | protected static Date | getValidCertDateFromValidityModel(ExtendedPKIXParameters paramsPKIX, CertPath certPath, int index)
| | protected static Date | getValidDate(PKIXParameters paramsPKIX)
| | protected static boolean | isAnyPolicy(Set policySet)
| | protected static boolean | isSelfIssued(X509Certificate cert)
| | protected static void | prepareNextCertB1(int i, List[] policyNodes, String id_p, Map m_idp, X509Certificate cert)
| | protected static PKIXPolicyNode | prepareNextCertB2(int i, List[] policyNodes, String id_p, PKIXPolicyNode validPolicyTree)
| | protected static boolean | processCertD1i(int index, List[] policyNodes, DERObjectIdentifier pOid, Set pq)
| | protected static void | processCertD1ii(int index, List[] policyNodes, DERObjectIdentifier _poid, Set _pq)
| | protected static PKIXPolicyNode | removePolicyNode(PKIXPolicyNode validPolicyTree, List[] policyNodes, PKIXPolicyNode _node)
|
| AUTHORITY_KEY_IDENTIFIER | | final protected static String AUTHORITY_KEY_IDENTIFIER(Code) | | |
| BASIC_CONSTRAINTS | | final protected static String BASIC_CONSTRAINTS(Code) | | |
| CERTIFICATE_POLICIES | | final protected static String CERTIFICATE_POLICIES(Code) | | |
| CRL_DISTRIBUTION_POINTS | | final protected static String CRL_DISTRIBUTION_POINTS(Code) | | |
| CRL_SIGN | | final protected static int CRL_SIGN(Code) | | |
| DELTA_CRL_INDICATOR | | final protected static String DELTA_CRL_INDICATOR(Code) | | |
| FRESHEST_CRL | | final protected static String FRESHEST_CRL(Code) | | |
| INHIBIT_ANY_POLICY | | final protected static String INHIBIT_ANY_POLICY(Code) | | |
| ISSUING_DISTRIBUTION_POINT | | final protected static String ISSUING_DISTRIBUTION_POINT(Code) | | |
| KEY_CERT_SIGN | | final protected static int KEY_CERT_SIGN(Code) | | |
| NAME_CONSTRAINTS | | final protected static String NAME_CONSTRAINTS(Code) | | |
| POLICY_CONSTRAINTS | | final protected static String POLICY_CONSTRAINTS(Code) | | |
| POLICY_MAPPINGS | | final protected static String POLICY_MAPPINGS(Code) | | |
| SUBJECT_ALTERNATIVE_NAME | | final protected static String SUBJECT_ALTERNATIVE_NAME(Code) | | |
| findCRLs | | final protected static Collection findCRLs(X509CRLSelector crlSelect, List crlStores) throws AnnotatedException(Code) | | Return a Collection of all CRLs found in the
CertStore's that are matching the crlSelect criteriums.
Parameters:
crlSelect - a CertSelector CertSelectorobject that will be used to select the CRLs
Parameters:
crlStores - a List containing only CertStoreCertStore objects. These are used to search forCRLs a Collection of all found CRL CRLobjects. May be empty but never null. |
| findCertificates | | protected static Collection findCertificates(CertSelector certSelect, List certStores) throws AnnotatedException(Code) | | Return a Collection of all certificates found in the CertStore's that are
matching the certSelect criteriums.
Parameters:
certSelect - a CertSelector CertSelector object that willbe used to select the certificates
Parameters:
certStores - a List containing only CertStore CertStoreobjects. These are used to search for certificates a Collection of all found java.security.cert.Certificate Certificateobjects. May be empty but never null. |
| findTrustAnchor | | final protected static TrustAnchor findTrustAnchor(X509Certificate cert, CertPath certPath, int index, Set trustAnchors) throws CertPathValidatorException(Code) | | Search the given Set of TrustAnchor's for one that is the
issuer of the given X509 certificate.
Parameters:
cert - the X509 certificate
Parameters:
trustAnchors - a Set of TrustAnchor's the TrustAnchor object if found ornull if not.
exception:
CertPathValidatorException - if a TrustAnchor wasfound but the signature verification on the given certificatehas thrown an exception. This Exception can be obtainted withgetCause() method. |
| getCRLIssuersFromDistributionPoint | | protected static void getCRLIssuersFromDistributionPoint(DistributionPoint dp, Collection issuerPrincipals, X509CRLStoreSelector selector, ExtendedPKIXParameters pkixParams) throws AnnotatedException(Code) | | Add the CRL issuers from the cRLIssuer field of the distribution point or
from the certificate if not given to the issuer criterion of the
selector.
The issuerPrincipals are a collection with a single
X500Principal for X509Certificates. For
X509AttributeCertificate s the issuer may contain more than one
X500Principal.
Parameters:
dp - The distribution point.
Parameters:
issuerPrincipals - The issuers of the certificate or atributecertificate which contains the distribution point.
Parameters:
selector - The CRL selector.
Parameters:
pkixParams - The PKIX parameters containing the cert stores.
throws:
AnnotatedException - if an exception occurs while processing.
throws:
ClassCastException - if issuerPrincipals does notcontain only X500Principals. |
| getDeltaCRLs | | protected static Set getDeltaCRLs(Date currentDate, ExtendedPKIXParameters paramsPKIX, X509CRL completeCRL) throws AnnotatedException(Code) | | Fetches delta CRLs according to RFC 3280 section 5.2.4.
Parameters:
currentDate - The date for which the delta CRLs must be valid.
Parameters:
paramsPKIX - The extended PKIX parameters.
Parameters:
completeCRL - The complete CRL the delta CRL is for. A Set of X509CRLs with delta CRLs.
throws:
AnnotatedException - if an exception occurs while picking the deltaCRLs or no delta CRLs are found. |
| getEncodedIssuerPrincipal | | protected static X500Principal getEncodedIssuerPrincipal(Object cert)(Code) | | Returns the issuer of an attribute certificate or certificate.
Parameters:
cert - The attribute certificate or certificate. The issuer as X500Principal. |
| getNextWorkingKey | | protected static PublicKey getNextWorkingKey(X509Certificate cert, List certs, int index) throws CertPathValidatorException(Code) | | Return the next working key inheriting DSA parameters if necessary.
This methods inherits DSA parameters from the indexed certificate or
previous certificates in the certificate chain to the returned
PublicKey. The list is searched upwards, meaning the end
certificate is at position 0 and previous certificates are following.
If the indexed certificate does not contain a DSA key this method simply
returns the public key. If the DSA key already contains DSA parameters
the key is also only returned.
Parameters:
certs - The certification path.
Parameters:
index - The index of the certificate which contains the public keywhich should be extended with DSA parameters. The public key of the certificate in list positionindex extended with DSA parameters if applicable.
throws:
AnnotatedException - if DSA parameters cannot be inherited. |
| isAnyPolicy | | protected static boolean isAnyPolicy(Set policySet)(Code) | | |
|
|