| java.lang.Object
 org.bouncycastle.jce.provider.CertPathValidatorUtilities
org.bouncycastle.x509.PKIXCertPathReviewer
All known Subclasses: org.bouncycastle.mail.smime.test.DummyCertPathReviewer,
| PKIXCertPathReviewer | | public class PKIXCertPathReviewer extends CertPathValidatorUtilities (Code) | | PKIXCertPathReviewer
Validation of X.509 Certificate Paths. Tries to find as much errors in the Path as possible.
|
| Method Summary | |
| protected void | addError(ErrorBundle msg)
| | protected void | addError(ErrorBundle msg, int index)
| | protected void | addNotification(ErrorBundle msg)
| | protected void | addNotification(ErrorBundle msg, int index)
| | protected void | checkCRLs(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector crlDistPointUrls, int index)
| | protected void | checkRevocation(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector crlDistPointUrls, Vector ocspUrls, int index)
| | protected void | doChecks()
| | protected Vector | getCRLDistUrls(CRLDistPoint crlDistPoints)
| | public CertPath | getCertPath()
| | public int | getCertPathSize()
| | public List[] | getErrors()
Returns an Array of Lists which contains a List of global error messages
and a List of error messages for each certificate in the path.
The global error List is at index 0. | | public List | getErrors(int index)
Returns an List of error messages for the certificate at the given index in the CertPath.
If index == -1 then the list of global errors is returned with errors not specific to a certificate. | | public List[] | getNotifications()
Returns an Array of Lists which contains a List of global notification messages
and a List of botification messages for each certificate in the path.
The global notificatio List is at index 0. | | public List | getNotifications(int index)
Returns an List of notification messages for the certificate at the given index in the CertPath.
If index == -1 then the list of global notifications is returned with notifications not specific to a certificate. | | protected Vector | getOCSPUrls(AuthorityInformationAccess authInfoAccess)
| | public PolicyNode | getPolicyTree()
| | public PublicKey | getSubjectPublicKey()
| | public TrustAnchor | getTrustAnchor()
| | public void | init(CertPath certPath, PKIXParameters params)
| | public boolean | isValidCertPath()
|
| PKIXCertPathReviewer | | public PKIXCertPathReviewer()(Code) | | Creates an empty PKIXCertPathReviewer. Don't forget to call init() to initialize the object.
|
| doChecks | | protected void doChecks()(Code) | | |
| getCertPath | | public CertPath getCertPath()(Code) | | the CertPath that was validated |
| getCertPathSize | | public int getCertPathSize()(Code) | | the size of the CertPath |
| getErrors | | public List[] getErrors()(Code) | | Returns an Array of Lists which contains a List of global error messages
and a List of error messages for each certificate in the path.
The global error List is at index 0. The error lists for each certificate at index 1 to n.
The error messages are of type.
the Array of Lists which contain the error messages
throws:
IllegalStateException - if the PKIXCertPathReviewer was not initialized |
| getErrors | | public List getErrors(int index)(Code) | | Returns an List of error messages for the certificate at the given index in the CertPath.
If index == -1 then the list of global errors is returned with errors not specific to a certificate.
Parameters:
index - the index of the certificate in the CertPath List of error messages for the certificate
throws:
IllegalStateException - if the PKIXCertPathReviewer was not initialized |
| getNotifications | | public List[] getNotifications()(Code) | | Returns an Array of Lists which contains a List of global notification messages
and a List of botification messages for each certificate in the path.
The global notificatio List is at index 0. The notification lists for each certificate at index 1 to n.
The error messages are of type.
the Array of Lists which contain the notification messages
throws:
IllegalStateException - if the PKIXCertPathReviewer was not initialized |
| getNotifications | | public List getNotifications(int index)(Code) | | Returns an List of notification messages for the certificate at the given index in the CertPath.
If index == -1 then the list of global notifications is returned with notifications not specific to a certificate.
Parameters:
index - the index of the certificate in the CertPath List of notification messages for the certificate
throws:
IllegalStateException - if the PKIXCertPathReviewer was not initialized |
| Methods inherited from org.bouncycastle.jce.provider.CertPathValidatorUtilities | protected static void addAdditionalStoreFromLocation(String location, ExtendedPKIXParameters pkixParams)(Code)(Java Doc)
protected static void addAdditionalStoresFromCRLDistributionPoint(CRLDistPoint crldp, ExtendedPKIXParameters pkixParams) throws AnnotatedException(Code)(Java Doc)
final protected static Collection findCRLs(X509CRLSelector crlSelect, List crlStores) throws AnnotatedException(Code)(Java Doc)
final protected static Collection findCRLs(X509CRLStoreSelector crlSelect, List crlStores) throws AnnotatedException(Code)(Java Doc)
protected static Collection findCertificates(CertSelector certSelect, List certStores) throws AnnotatedException(Code)(Java Doc)
protected static Collection findCertificates(Selector certSelect, List certStores) throws AnnotatedException(Code)(Java Doc)
final protected static TrustAnchor findTrustAnchor(X509Certificate cert, CertPath certPath, int index, Set trustAnchors) throws CertPathValidatorException(Code)(Java Doc)
protected static AlgorithmIdentifier getAlgorithmIdentifier(PublicKey key) throws CertPathValidatorException(Code)(Java Doc)
protected static void getCRLIssuersFromDistributionPoint(DistributionPoint dp, Collection issuerPrincipals, X509CRLStoreSelector selector, ExtendedPKIXParameters pkixParams) throws AnnotatedException(Code)(Java Doc)
protected static void getCertStatus(Date validDate, X509CRL crl, BigInteger serialNumber, CertStatus certStatus) throws AnnotatedException(Code)(Java Doc)
protected static Set getCompleteCRLs(DistributionPoint dp, Object cert, Date currentDate, ExtendedPKIXParameters paramsPKIX) throws AnnotatedException(Code)(Java Doc)
protected static Set getDeltaCRLs(Date currentDate, ExtendedPKIXParameters paramsPKIX, X509CRL completeCRL) throws AnnotatedException(Code)(Java Doc)
protected static X500Principal getEncodedIssuerPrincipal(Object cert)(Code)(Java Doc)
protected static DERObject getExtensionValue(java.security.cert.X509Extension ext, String oid) throws AnnotatedException(Code)(Java Doc)
protected static X500Principal getIssuerPrincipal(X509CRL crl)(Code)(Java Doc)
protected static PublicKey getNextWorkingKey(X509Certificate cert, List certs, int index) throws CertPathValidatorException(Code)(Java Doc)
final protected static Set getQualifierSet(ASN1Sequence qualifiers) throws CertPathValidatorException(Code)(Java Doc)
protected static X500Principal getSubjectPrincipal(X509Certificate cert)(Code)(Java Doc)
protected static Date getValidCertDateFromValidityModel(ExtendedPKIXParameters paramsPKIX, CertPath certPath, int index) throws AnnotatedException(Code)(Java Doc)
protected static Date getValidDate(PKIXParameters paramsPKIX)(Code)(Java Doc)
protected static boolean isAnyPolicy(Set policySet)(Code)(Java Doc)
protected static boolean isSelfIssued(X509Certificate cert)(Code)(Java Doc)
protected static void prepareNextCertB1(int i, List[] policyNodes, String id_p, Map m_idp, X509Certificate cert) throws AnnotatedException, CertPathValidatorException(Code)(Java Doc)
protected static PKIXPolicyNode prepareNextCertB2(int i, List[] policyNodes, String id_p, PKIXPolicyNode validPolicyTree)(Code)(Java Doc)
protected static boolean processCertD1i(int index, List[] policyNodes, DERObjectIdentifier pOid, Set pq)(Code)(Java Doc)
protected static void processCertD1ii(int index, List[] policyNodes, DERObjectIdentifier _poid, Set _pq)(Code)(Java Doc)
protected static PKIXPolicyNode removePolicyNode(PKIXPolicyNode validPolicyTree, List[] policyNodes, PKIXPolicyNode _node)(Code)(Java Doc)
|
|
|