| java.lang.Object org.bouncycastle.jce.provider.CertPathValidatorUtilities org.bouncycastle.jce.provider.RFC3281CertPathUtilities
Method Summary | |
protected static void | additionalChecks(X509AttributeCertificate attrCert, ExtendedPKIXParameters pkixParams) | protected static void | checkCRLs(X509AttributeCertificate attrCert, ExtendedPKIXParameters paramsPKIX, X509Certificate issuerCert, Date validDate) Checks if an attribute certificate is revoked. | protected static CertPath | processAttrCert1(X509AttributeCertificate attrCert, ExtendedPKIXParameters pkixParams) Searches for a holder public key certificate and verifies its
certification path.
Parameters: attrCert - the attribute certificate. Parameters: pkixParams - The PKIX parameters. | protected static CertPathValidatorResult | processAttrCert2(CertPath certPath, ExtendedPKIXParameters pkixParams) | protected static void | processAttrCert3(X509Certificate acIssuerCert, ExtendedPKIXParameters pkixParams) | protected static void | processAttrCert4(X509Certificate acIssuerCert, ExtendedPKIXParameters pkixParams) | protected static void | processAttrCert5(X509AttributeCertificate attrCert, ExtendedPKIXParameters pkixParams) | protected static void | processAttrCert7(X509AttributeCertificate attrCert, CertPath certPath, CertPath holderCertPath, ExtendedPKIXParameters pkixParams) | protected static Set | processCRLA1i(Date currentDate, ExtendedPKIXParameters paramsPKIX, X509Certificate cert, X509CRL crl) | protected static Set[] | processCRLA1ii(Date currentDate, ExtendedPKIXParameters paramsPKIX, X509Certificate cert, X509CRL crl) | protected static void | processCRLB1(DistributionPoint dp, Object cert, X509CRL crl) | protected static void | processCRLB2(DistributionPoint dp, Object cert, X509CRL crl) | protected static void | processCRLC(X509CRL deltaCRL, X509CRL completeCRL, ExtendedPKIXParameters pkixParams) If use-deltas is set, verify the issuer and scope of the delta CRL. | protected static ReasonsMask | processCRLD(X509CRL crl, DistributionPoint dp) | protected static Set | processCRLF(X509CRL crl, Object cert, X509Certificate defaultCRLSignCert, PublicKey defaultCRLSignKey, ExtendedPKIXParameters paramsPKIX) Obtain and validate the certification path for the complete CRL issuer.
If a key usage extension is present in the CRL issuer's certificate,
verify that the cRLSign bit is set.
Parameters: crl - CRL which contains revocation information for the certificatecert . Parameters: cert - The attribute certificate or certificate to check if it isrevoked. Parameters: defaultCRLSignCert - The issuer certificate of the certificatecert . | protected static PublicKey | processCRLG(X509CRL crl, Set keys) | protected static X509CRL | processCRLH(Set deltacrls, PublicKey key) | protected static void | processCRLI(Date validDate, X509CRL deltacrl, BigInteger serialNumber, CertStatus certStatus, ExtendedPKIXParameters pkixParams) | protected static void | processCRLJ(Date validDate, X509CRL completecrl, BigInteger serialNumber, CertStatus certStatus) |
checkCRLs | protected static void checkCRLs(X509AttributeCertificate attrCert, ExtendedPKIXParameters paramsPKIX, X509Certificate issuerCert, Date validDate) throws CertPathValidatorException(Code) | | Checks if an attribute certificate is revoked.
Parameters: attrCert - Attribute certificate to check if it is revoked. Parameters: paramsPKIX - PKIX parameters. Parameters: issuerCert - The issuer certificate of the attribute certificateattrCert . Parameters: validDate - The date when the certificate revocation status shouldbe checked. throws: CertPathValidatorException - if the certificate is revoked or thestatus cannot be checked or some error occurs. |
processAttrCert1 | protected static CertPath processAttrCert1(X509AttributeCertificate attrCert, ExtendedPKIXParameters pkixParams) throws CertPathValidatorException(Code) | | Searches for a holder public key certificate and verifies its
certification path.
Parameters: attrCert - the attribute certificate. Parameters: pkixParams - The PKIX parameters. The certificate path of the holder certificate. throws: AnnotatedException - if- no public key certificate can be found although holderinformation is given by an entity name or a base certificateID
- support classes cannot be created
- no certification path for the public key certificate canbe built
|
processCRLC | protected static void processCRLC(X509CRL deltaCRL, X509CRL completeCRL, ExtendedPKIXParameters pkixParams) throws AnnotatedException(Code) | | If use-deltas is set, verify the issuer and scope of the delta CRL.
Parameters: deltaCRL - The delta CRL. Parameters: completeCRL - The complete CRL. Parameters: pkixParams - The PKIX paramaters. throws: AnnotatedException - if an exception occurs. |
processCRLF | protected static Set processCRLF(X509CRL crl, Object cert, X509Certificate defaultCRLSignCert, PublicKey defaultCRLSignKey, ExtendedPKIXParameters paramsPKIX) throws AnnotatedException(Code) | | Obtain and validate the certification path for the complete CRL issuer.
If a key usage extension is present in the CRL issuer's certificate,
verify that the cRLSign bit is set.
Parameters: crl - CRL which contains revocation information for the certificatecert . Parameters: cert - The attribute certificate or certificate to check if it isrevoked. Parameters: defaultCRLSignCert - The issuer certificate of the certificatecert . May be null . Parameters: defaultCRLSignKey - The public key of the issuer certificatedefaultCRLSignCert . May be null . Parameters: paramsPKIX - paramsPKIX PKIX parameters. A Set with all keys of possible CRL issuercertificates. throws: AnnotatedException - if the CRL is no valid or the status cannot bechecked or some error occurs. |
Methods inherited from org.bouncycastle.jce.provider.CertPathValidatorUtilities | protected static void addAdditionalStoreFromLocation(String location, ExtendedPKIXParameters pkixParams)(Code)(Java Doc) protected static void addAdditionalStoresFromCRLDistributionPoint(CRLDistPoint crldp, ExtendedPKIXParameters pkixParams) throws AnnotatedException(Code)(Java Doc) final protected static Collection findCRLs(X509CRLSelector crlSelect, List crlStores) throws AnnotatedException(Code)(Java Doc) final protected static Collection findCRLs(X509CRLStoreSelector crlSelect, List crlStores) throws AnnotatedException(Code)(Java Doc) protected static Collection findCertificates(CertSelector certSelect, List certStores) throws AnnotatedException(Code)(Java Doc) protected static Collection findCertificates(Selector certSelect, List certStores) throws AnnotatedException(Code)(Java Doc) final protected static TrustAnchor findTrustAnchor(X509Certificate cert, CertPath certPath, int index, Set trustAnchors) throws CertPathValidatorException(Code)(Java Doc) protected static AlgorithmIdentifier getAlgorithmIdentifier(PublicKey key) throws CertPathValidatorException(Code)(Java Doc) protected static void getCRLIssuersFromDistributionPoint(DistributionPoint dp, Collection issuerPrincipals, X509CRLStoreSelector selector, ExtendedPKIXParameters pkixParams) throws AnnotatedException(Code)(Java Doc) protected static void getCertStatus(Date validDate, X509CRL crl, BigInteger serialNumber, CertStatus certStatus) throws AnnotatedException(Code)(Java Doc) protected static Set getCompleteCRLs(DistributionPoint dp, Object cert, Date currentDate, ExtendedPKIXParameters paramsPKIX) throws AnnotatedException(Code)(Java Doc) protected static Set getDeltaCRLs(Date currentDate, ExtendedPKIXParameters paramsPKIX, X509CRL completeCRL) throws AnnotatedException(Code)(Java Doc) protected static X500Principal getEncodedIssuerPrincipal(Object cert)(Code)(Java Doc) protected static DERObject getExtensionValue(java.security.cert.X509Extension ext, String oid) throws AnnotatedException(Code)(Java Doc) protected static X500Principal getIssuerPrincipal(X509CRL crl)(Code)(Java Doc) protected static PublicKey getNextWorkingKey(X509Certificate cert, List certs, int index) throws CertPathValidatorException(Code)(Java Doc) final protected static Set getQualifierSet(ASN1Sequence qualifiers) throws CertPathValidatorException(Code)(Java Doc) protected static X500Principal getSubjectPrincipal(X509Certificate cert)(Code)(Java Doc) protected static Date getValidCertDateFromValidityModel(ExtendedPKIXParameters paramsPKIX, CertPath certPath, int index) throws AnnotatedException(Code)(Java Doc) protected static Date getValidDate(PKIXParameters paramsPKIX)(Code)(Java Doc) protected static boolean isAnyPolicy(Set policySet)(Code)(Java Doc) protected static boolean isSelfIssued(X509Certificate cert)(Code)(Java Doc) protected static void prepareNextCertB1(int i, List[] policyNodes, String id_p, Map m_idp, X509Certificate cert) throws AnnotatedException, CertPathValidatorException(Code)(Java Doc) protected static PKIXPolicyNode prepareNextCertB2(int i, List[] policyNodes, String id_p, PKIXPolicyNode validPolicyTree)(Code)(Java Doc) protected static boolean processCertD1i(int index, List[] policyNodes, DERObjectIdentifier pOid, Set pq)(Code)(Java Doc) protected static void processCertD1ii(int index, List[] policyNodes, DERObjectIdentifier _poid, Set _pq)(Code)(Java Doc) protected static PKIXPolicyNode removePolicyNode(PKIXPolicyNode validPolicyTree, List[] policyNodes, PKIXPolicyNode _node)(Code)(Java Doc)
|
|
|