Java Doc for ExtendedPKIXParameters.java in » Security » Bouncy-Castle » org » bouncycastle » x509 » Java Source Code / Java DocumentationJava Source Code and Java Documentation

Java Source Code / Java Documentation

1.	6.0 JDK Core
2.	6.0 JDK Modules
3.	6.0 JDK Modules com.sun
4.	6.0 JDK Modules com.sun.java
5.	6.0 JDK Modules sun
6.	6.0 JDK Platform
7.	Ajax
8.	Apache Harmony Java SE
9.	Aspect oriented
10.	Authentication Authorization
11.	Blogger System
12.	Build
13.	Byte Code
14.	Cache
15.	Chart
16.	Chat
17.	Code Analyzer
18.	Collaboration
19.	Content Management System
20.	Database Client
21.	Database DBMS
22.	Database JDBC Connection Pool
23.	Database ORM
24.	Development
25.	EJB Server geronimo
26.	EJB Server GlassFish
27.	EJB Server JBoss 4.2.1
28.	EJB Server resin 3.1.5
29.	ERP CRM Financial
30.	ESB
31.	Forum
32.	GIS
33.	Graphic Library
34.	Groupware
35.	HTML Parser
36.	IDE
37.	IDE Eclipse
38.	IDE Netbeans
39.	Installer
40.	Internationalization Localization
41.	Inversion of Control
42.	Issue Tracking
43.	J2EE
44.	JBoss
45.	JMS
46.	JMX
47.	Library
48.	Mail Clients
49.	Net
50.	Parser
51.	PDF
52.	Portal
53.	Profiler
54.	Project Management
55.	Report
56.	RSS RDF
57.	Rule Engine
58.	Science
59.	Scripting
60.	Search Engine
61.	Security
62.	Sevlet Container
63.	Source Control
64.	Swing Library
65.	Template Engine
66.	Test Coverage
67.	Testing
68.	UML
69.	Web Crawler
70.	Web Framework
71.	Web Mail
72.	Web Server
73.	Web Services
74.	Web Services apache cxf 2.0.1
75.	Web Services AXIS2
76.	Wiki Engine
77.	Workflow Engines
78.	XML
79.	XML UI

Java

Java Tutorial

Illustrator Tutorials

GIMP Tutorials

C# / C Sharp

C# / CSharp Tutorial

C# / CSharp Open Source

SQL Server / T-SQL Tutorial

Oracle PL / SQL

Oracle PL/SQL Tutorial

Flash / Flex / ActionScript

VBA / Excel / Access / Word

XML

XML Tutorial

Microsoft Office PowerPoint 2007 Tutorial

Microsoft Office Excel 2007 Tutorial

Microsoft Office Word 2007 Tutorial

Java Source Code / Java Documentation » Security » Bouncy Castle » org.bouncycastle.x509

Source Cross Reference Class Diagram Java Document (Java Doc)

java.lang .Object

java.security.cert .PKIXParameters

org.bouncycastle.x509 .ExtendedPKIXParameters

All known Subclasses:   org.bouncycastle.x509 .ExtendedPKIXBuilderParameters,
ExtendedPKIXParameters
public class ExtendedPKIXParameters extends PKIXParameters (Code)
This class extends the PKIXParameters with a validity model parameter.

Field Summary
final public static int CHAIN_VALIDITY_MODEL
     This model uses the following validity model.
final public static int PKIX_VALIDITY_MODEL
     This is the default PKIX validity model.

Constructor Summary
public ExtendedPKIXParameters(Set trustAnchors)
     Creates an instance of PKIXParameters with the specified Set of most-trusted CAs.

Method Summary
public void addAddionalStore(Store store)
     Adds a additional Bouncy Castle Store to find CRLs, certificates, attribute certificates or cross certificates.
You should not use this method.
public void addCertStore(CertStore store)
     Adds a Java CertStore to this extended PKIX parameters.
public void addStore(Store store)
     Adds a Bouncy Castle Store to find CRLs, certificates, attribute certificates or cross certificates.
This method should be used to add local stores, like collection based X.509 stores, if available.
public Object clone()

public List getAddionalStores()
     Returns an immutable List of additional Bouncy Castle Stores used for finding CRLs, certificates, attribute certificates or cross certificates. an immutable List of additional Bouncy CastleStores.
public Set getAttrCertCheckers()
     Returns the attribute certificate checker.
public static ExtendedPKIXParameters getInstance(PKIXParameters pkixParams)
     Returns an instance with the parameters of a given PKIXParameters object.
public Set getNecessaryACAttributes()
     Returns the neccessary attributes which must be contained in an attribute certificate.
public Set getProhibitedACAttributes()
     Returns the attribute certificates which are not allowed.
The returned Set is immutable and contains Strings with the OIDs. Returns the prohibited AC attributes.
public List getStores()
     Returns an immutable List of Bouncy Castle Stores used for finding CRLs, certificates, attribute certificates or cross certificates. an immutable List of Bouncy CastleStores.
public Selector getTargetConstraints()
     Returns the required constraints on the target certificate or attribute certificate.
public Set getTrustedACIssuers()
     Returns the trusted attribute certificate issuers.
public int getValidityModel()

public boolean isAdditionalLocationsEnabled()
     Returns if additional X509Store s for locations like LDAP found in certificates or CRLs should be used.
public boolean isUseDeltasEnabled()
     Defaults to false.
public void setAdditionalLocationsEnabled(boolean enabled)
     Sets if additional X509Store s for locations like LDAP found in certificates or CRLs should be used.
public void setAttrCertCheckers(Set attrCertCheckers)
     Sets the attribute certificate checkers.
All elements in the Set must a PKIXAttrCertChecker .
The given set is cloned.
Parameters:
  attrCertCheckers - The attribute certificate checkers to set.
public void setCertStores(List stores)
     Sets the Java CertStore to this extended PKIX parameters.
public void setNecessaryACAttributes(Set necessaryACAttributes)
     Sets the neccessary which must be contained in an attribute certificate.
protected void setParams(PKIXParameters params)
     Method to support clone() under J2ME. super.clone() does not exist and fields are not copied.
Parameters:
  params - Parameters to set.
public void setProhibitedACAttributes(Set prohibitedACAttributes)
     Sets the attribute certificates which are not allowed.
public void setStores(List stores)
     Sets the Bouncy Castle Stores for finding CRLs, certificates, attribute certificates or cross certificates.
public void setTargetCertConstraints(CertSelector selector)
     Sets the required constraints on the target certificate.
public void setTargetConstraints(Selector selector)
     Sets the required constraints on the target certificate or attribute certificate.
public void setTrustedACIssuers(Set trustedACIssuers)
     Sets the trusted attribute certificate issuers.
public void setUseDeltasEnabled(boolean useDeltas)
     Sets if delta CRLs should be used for checking the revocation status.
public void setValidityModel(int validityModel)


Field Detail
CHAIN_VALIDITY_MODEL
final public static int CHAIN_VALIDITY_MODEL(Code)
This model uses the following validity model. Each certificate must have been valid at the moment where is was used. That means the end certificate must have been valid at the time the signature was done. The CA certificate which signed the end certificate must have been valid, when the end certificate was signed. The CA (or Root CA) certificate must have been valid, when the CA certificate was signed and so on. So the PKIXParameters.setDate(java.util.Date) method sets the time, when the end certificate must have been valid.
It is used e.g. in the German signature law.

PKIX_VALIDITY_MODEL
final public static int PKIX_VALIDITY_MODEL(Code)
This is the default PKIX validity model. Actually there are two variants of this: The PKIX model and the modified PKIX model. The PKIX model verifies that all involved certificates must have been valid at the current time. The modified PKIX model verifies that all involved certificates were valid at the signing time. Both are indirectly choosen with the PKIXParameters.setDate(java.util.Date) method, so this methods sets the Date when all certificates must have been valid.

Constructor Detail
ExtendedPKIXParameters
public ExtendedPKIXParameters(Set trustAnchors) throws InvalidAlgorithmParameterException(Code)
Creates an instance of PKIXParameters with the specified Set of most-trusted CAs. Each element of the set is a TrustAnchor TrustAnchor .
Note that the Set is copied to protect against subsequent modifications.
Parameters:
  trustAnchors - a Set of TrustAnchors
throws:
  InvalidAlgorithmParameterException - if the specifiedSet is empty.
throws:
  NullPointerException - if the specified Set isnull
throws:
  ClassCastException - if any of the elements in the Setis not of type java.security.cert.TrustAnchor

Method Detail
addAddionalStore
public void addAddionalStore(Store store)(Code)
Adds a additional Bouncy Castle Store to find CRLs, certificates, attribute certificates or cross certificates.
You should not use this method. This method is used for adding additional X.509 stores, which are used to add (remote) locations, e.g. LDAP, found during X.509 object processing, e.g. in certificates or CRLs. This method is used in PKIX certification path processing.
If store is null it is ignored.
Parameters:
  store - The store to add.
See Also:   ExtendedPKIXParameters.getStores()

addCertStore
public void addCertStore(CertStore store)(Code)
Adds a Java CertStore to this extended PKIX parameters. If the store uses initialisation parameters of type CollectionCertStoreParameters or the corresponding Bouncy Castle Store type is created additionally to it.

addStore
public void addStore(Store store)(Code)
Adds a Bouncy Castle Store to find CRLs, certificates, attribute certificates or cross certificates.
This method should be used to add local stores, like collection based X.509 stores, if available. Local stores should be considered first, before trying to use additional (remote) locations, because they do not need possible additional network traffic.
If store is null it is ignored.
Parameters:
  store - The store to add.
See Also:   ExtendedPKIXParameters.getStores

clone
public Object clone()(Code)

getAddionalStores
public List getAddionalStores()(Code)
Returns an immutable List of additional Bouncy Castle Stores used for finding CRLs, certificates, attribute certificates or cross certificates. an immutable List of additional Bouncy CastleStores. Never null.
See Also:   ExtendedPKIXParameters.addAddionalStore(Store)

getAttrCertCheckers
public Set getAttrCertCheckers()(Code)
Returns the attribute certificate checker. The returned set contains PKIXAttrCertChecker s and is immutable. Returns the attribute certificate checker. Is nevernull.

getInstance
public static ExtendedPKIXParameters getInstance(PKIXParameters pkixParams)(Code)
Returns an instance with the parameters of a given PKIXParameters object.
Parameters:
  pkixParams - The given PKIXParameters an extended PKIX params object

getNecessaryACAttributes
public Set getNecessaryACAttributes()(Code)
Returns the neccessary attributes which must be contained in an attribute certificate.
The returned Set is immutable and contains Strings with the OIDs. Returns the necessary AC attributes.

getProhibitedACAttributes
public Set getProhibitedACAttributes()(Code)
Returns the attribute certificates which are not allowed.
The returned Set is immutable and contains Strings with the OIDs. Returns the prohibited AC attributes. Is never null.

getStores
public List getStores()(Code)
Returns an immutable List of Bouncy Castle Stores used for finding CRLs, certificates, attribute certificates or cross certificates. an immutable List of Bouncy CastleStores. Never null.
See Also:   ExtendedPKIXParameters.setStores(List)

getTargetConstraints
public Selector getTargetConstraints()(Code)
Returns the required constraints on the target certificate or attribute certificate. The constraints are returned as an instance of Selector. If null, no constraints are defined.
The target certificate in a PKIX path may be a certificate or an attribute certificate.
Note that the Selector returned is cloned to protect against subsequent modifications. a Selector specifying the constraints on thetarget certificate or attribute certificate (or null)
See Also:   ExtendedPKIXParameters.setTargetConstraints
See Also:   X509CertStoreSelector
See Also:   X509AttributeCertStoreSelector

getTrustedACIssuers
public Set getTrustedACIssuers()(Code)
Returns the trusted attribute certificate issuers. If attribute certificates is verified the trusted AC issuers must be set.
The returned Set consists of TrustAnchors.
The returned Set is immutable. Never null Returns an immutable set of the trusted AC issuers.

getValidityModel
public int getValidityModel()(Code)
Returns the validity model.
See Also:   ExtendedPKIXParameters.CHAIN_VALIDITY_MODEL
See Also:   ExtendedPKIXParameters.PKIX_VALIDITY_MODEL

isAdditionalLocationsEnabled
public boolean isAdditionalLocationsEnabled()(Code)
Returns if additional X509Store s for locations like LDAP found in certificates or CRLs should be used. Returns true if additional stores are used.

isUseDeltasEnabled
public boolean isUseDeltasEnabled()(Code)
Defaults to false. Returns if delta CRLs should be used.

setAdditionalLocationsEnabled
public void setAdditionalLocationsEnabled(boolean enabled)(Code)
Sets if additional X509Store s for locations like LDAP found in certificates or CRLs should be used.
Parameters:
  enabled - true if additional stores are used.

setAttrCertCheckers
public void setAttrCertCheckers(Set attrCertCheckers)(Code)
Sets the attribute certificate checkers.
All elements in the Set must a PKIXAttrCertChecker .
The given set is cloned.
Parameters:
  attrCertCheckers - The attribute certificate checkers to set. Isnever null.
throws:
  ClassCastException - if an element of attrCertCheckersis not a PKIXAttrCertChecker.

setCertStores
public void setCertStores(List stores)(Code)
Sets the Java CertStore to this extended PKIX parameters. If the stores use initialisation parameters of type CollectionCertStoreParameters or the corresponding Bouncy Castle Store types are created additionally to it.
throws:
  ClassCastException - if an element of stores is nota CertStore.

setNecessaryACAttributes
public void setNecessaryACAttributes(Set necessaryACAttributes)(Code)
Sets the neccessary which must be contained in an attribute certificate.
The Set must contain Strings with the OIDs.
The set is cloned.
Parameters:
  necessaryACAttributes - The necessary AC attributes to set.
throws:
  ClassCastException - if an element ofnecessaryACAttributes is not aString.

setParams
protected void setParams(PKIXParameters params)(Code)
Method to support clone() under J2ME. super.clone() does not exist and fields are not copied.
Parameters:
  params - Parameters to set. If this areExtendedPKIXParameters they are copied to.

setProhibitedACAttributes
public void setProhibitedACAttributes(Set prohibitedACAttributes)(Code)
Sets the attribute certificates which are not allowed.
The Set must contain Strings with the OIDs.
The set is cloned.
Parameters:
  prohibitedACAttributes - The prohibited AC attributes to set.
throws:
  ClassCastException - if an element ofprohibitedACAttributes is not aString.

setStores
public void setStores(List stores)(Code)
Sets the Bouncy Castle Stores for finding CRLs, certificates, attribute certificates or cross certificates.
The List is cloned.
Parameters:
  stores - A list of stores to use.
See Also:   ExtendedPKIXParameters.getStores
throws:
  ClassCastException - if an element of stores is nota Store.

setTargetCertConstraints
public void setTargetCertConstraints(CertSelector selector)(Code)
Sets the required constraints on the target certificate. The constraints are specified as an instance of X509CertSelector. If null, no constraints are defined.
This method wraps the given X509CertSelector into a X509CertStoreSelector.
Note that the X509CertSelector specified is cloned to protect against subsequent modifications.
Parameters:
  selector - a X509CertSelector specifying theconstraints on the target certificate (or null)
See Also:   ExtendedPKIXParameters.getTargetCertConstraints
See Also:   X509CertStoreSelector

setTargetConstraints
public void setTargetConstraints(Selector selector)(Code)
Sets the required constraints on the target certificate or attribute certificate. The constraints are specified as an instance of Selector. If null, no constraints are defined.
The target certificate in a PKIX path may be a certificate or an attribute certificate.
Note that the Selector specified is cloned to protect against subsequent modifications.
Parameters:
  selector - a Selector specifying the constraints onthe target certificate or attribute certificate (ornull)
See Also:   ExtendedPKIXParameters.getTargetConstraints
See Also:   X509CertStoreSelector
See Also:   X509AttributeCertStoreSelector

setTrustedACIssuers
public void setTrustedACIssuers(Set trustedACIssuers)(Code)
Sets the trusted attribute certificate issuers. If attribute certificates is verified the trusted AC issuers must be set.
The trustedACIssuers must be a Set of TrustAnchor
The given set is cloned.
Parameters:
  trustedACIssuers - The trusted AC issuers to set. Is nevernull.
throws:
  ClassCastException - if an element of stores is nota TrustAnchor.

setUseDeltasEnabled
public void setUseDeltasEnabled(boolean useDeltas)(Code)
Sets if delta CRLs should be used for checking the revocation status.
Parameters:
  useDeltas - true if delta CRLs should be used.

setValidityModel
public void setValidityModel(int validityModel)(Code)

Parameters:
  validityModel - The validity model to set.
See Also:   ExtendedPKIXParameters.CHAIN_VALIDITY_MODEL
See Also:   ExtendedPKIXParameters.PKIX_VALIDITY_MODEL

Methods inherited from java.security.cert.PKIXParameters
public void addCertPathChecker(PKIXCertPathChecker checker)(Code)(Java Doc)
public void addCertStore(CertStore store)(Code)(Java Doc)
public Object clone()(Code)(Java Doc)
public List<PKIXCertPathChecker> getCertPathCheckers()(Code)(Java Doc)
public List<CertStore> getCertStores()(Code)(Java Doc)
public Date getDate()(Code)(Java Doc)
public Set<String> getInitialPolicies()(Code)(Java Doc)
public boolean getPolicyQualifiersRejected()(Code)(Java Doc)
public String getSigProvider()(Code)(Java Doc)
public CertSelector getTargetCertConstraints()(Code)(Java Doc)
public Set<TrustAnchor> getTrustAnchors()(Code)(Java Doc)
public boolean isAnyPolicyInhibited()(Code)(Java Doc)
public boolean isExplicitPolicyRequired()(Code)(Java Doc)
public boolean isPolicyMappingInhibited()(Code)(Java Doc)
public boolean isRevocationEnabled()(Code)(Java Doc)
public void setAnyPolicyInhibited(boolean val)(Code)(Java Doc)
public void setCertPathCheckers(List<PKIXCertPathChecker> checkers)(Code)(Java Doc)
public void setCertStores(List<CertStore> stores)(Code)(Java Doc)
public void setDate(Date date)(Code)(Java Doc)
public void setExplicitPolicyRequired(boolean val)(Code)(Java Doc)
public void setInitialPolicies(Set<String> initialPolicies)(Code)(Java Doc)
public void setPolicyMappingInhibited(boolean val)(Code)(Java Doc)
public void setPolicyQualifiersRejected(boolean qualifiersRejected)(Code)(Java Doc)
public void setRevocationEnabled(boolean val)(Code)(Java Doc)
public void setSigProvider(String sigProvider)(Code)(Java Doc)
public void setTargetCertConstraints(CertSelector selector)(Code)(Java Doc)
public void setTrustAnchors(Set<TrustAnchor> trustAnchors) throws InvalidAlgorithmParameterException(Code)(Java Doc)
public String toString()(Code)(Java Doc)

Methods inherited from java.lang.Object
native protected Object clone() throws CloneNotSupportedException(Code)(Java Doc)
public boolean equals(Object obj)(Code)(Java Doc)
protected void finalize() throws Throwable(Code)(Java Doc)
final native public Class getClass()(Code)(Java Doc)
native public int hashCode()(Code)(Java Doc)
final native public void notify()(Code)(Java Doc)
final native public void notifyAll()(Code)(Java Doc)
public String toString()(Code)(Java Doc)
final native public void wait(long timeout) throws InterruptedException(Code)(Java Doc)
final public void wait(long timeout, int nanos) throws InterruptedException(Code)(Java Doc)
final public void wait() throws InterruptedException(Code)(Java Doc)

www.java2java.com | Contact Us

All other trademarks are property of their respective owners.