public abstract class PKIXCertPathChecker extends Object implements Cloneable
X509Certificate.
The checks are added to a certification path validation using the
setCertPathCheckers or
addCertPathChecker of the PKIXParameters and PKIXBuilderParameters class respectively. The
check method will be called for each
certificate processed by a CertPathBuilder of CertPathValidator.
A PKIXCertPathChecker implementation must support reverse
checking (from trusted CA to target) and may support forward checking
(from target to trusted CA). The return value of isForwardCheckingSupported indicates whether forward checking is supported.
| Modifier | Constructor and Description |
|---|---|
protected |
PKIXCertPathChecker()
Creates a new
PKIXCertPathChecker instance. |
| Modifier and Type | Method and Description |
|---|---|
abstract void |
check(Certificate cert,
Collection<String> unresolvedCritExts)
Checks the specified certificate and removes the processed critical
extensions from the specified list of X.509 extension OIDs.
|
Object |
clone()
Clones this
PKIXCertPathChecker instance. |
abstract Set<String> |
getSupportedExtensions()
Returns the list of extensions of X.509 certificates that this
PKIXCertPathChecker is able to process. |
abstract void |
init(boolean forward)
Initializes this
PKIXCertPathChecker instance for specified
checking direction. |
abstract boolean |
isForwardCheckingSupported()
Returns whether this
PKIXCertPathChecker instance supports
forward checking. |
protected PKIXCertPathChecker()
PKIXCertPathChecker instance.public Object clone()
PKIXCertPathChecker instance.public abstract void init(boolean forward)
throws CertPathValidatorException
PKIXCertPathChecker instance for specified
checking direction.forward - the direction of the certification path processing, true if the certificates are processed in forward direction
(from target to trusted CA), false if processed in
reverse direction (from trusted CA to target).CertPathValidatorException - if initialization of this PKIXCertPathChecker
instance fails, or if it cannot process certificates in the
specified order.public abstract boolean isForwardCheckingSupported()
PKIXCertPathChecker instance supports
forward checking.true if this PKIXCertPathChecker instance
supports forward checking, otherwise false.public abstract Set<String> getSupportedExtensions()
PKIXCertPathChecker is able to process.PKIXCertPathChecker is able to process, or null if there
are none.public abstract void check(Certificate cert, Collection<String> unresolvedCritExts) throws CertPathValidatorException
cert - the certificate.unresolvedCritExts - the list of critical X.509 extension OID strings.CertPathValidatorException - if check(s) fail on the specified certificate.