Package | Description |
---|---|
eu.emi.security.authn.x509.helpers.pkipath |
Helper classes for internal, low level, logic of certificate path validation.
|
eu.emi.security.authn.x509.helpers.pkipath.bc |
Helper classes included (mostly copied) from the BouncyCastle 1.52 library
and further updated.
|
eu.emi.security.authn.x509.helpers.revocation |
Helper classes, implementing general revocation checking functionality.
|
Modifier and Type | Method and Description |
---|---|
ExtPKIXParameters2 |
ExtPKIXParameters2.Builder.build() |
ExtPKIXParameters2 |
ExtPKIXParameters2.clone() |
protected ExtPKIXParameters2 |
BCCertPathValidator.createPKIXParameters(java.security.cert.X509Certificate[] toCheck,
boolean proxySupport,
java.util.Set<java.security.cert.TrustAnchor> trustAnchors,
java.security.cert.CertStore crlStore,
RevocationParameters revocationParams,
ObserversHandler observersHandler) |
Modifier and Type | Method and Description |
---|---|
protected java.util.List<java.security.cert.X509Certificate> |
BCCertPathValidator.checkNonProxyChain(java.security.cert.X509Certificate[] baseChain,
ExtPKIXParameters2 params,
java.util.List<ValidationError> errors,
java.util.Set<java.lang.String> unresolvedExtensions,
int posDelta,
java.security.cert.X509Certificate[] cc)
Performs checking of the chain which has no proxies (or at least should not have proxies),
using
FixedBCPKIXCertPathReviewer . |
Modifier and Type | Field and Description |
---|---|
protected ExtPKIXParameters2 |
FixedBCPKIXCertPathReviewer.pkixParams |
Modifier and Type | Method and Description |
---|---|
static void |
RFC3280CertPathUtilitiesCanl.checkCRLs2(ExtPKIXParameters2 paramsPKIX,
java.security.cert.X509Certificate cert,
java.util.Date validDate,
java.security.cert.X509Certificate sign,
java.security.PublicKey workingPublicKey,
java.util.List<?> certPathCerts,
org.bouncycastle.jcajce.util.JcaJceHelper jcaHelper)
Checks a certificate if it is revoked.
|
protected void |
FixedBCPKIXCertPathReviewer.checkRevocation(ExtPKIXParameters2 paramsPKIX,
java.security.cert.X509Certificate cert,
java.util.Date validDate,
java.security.cert.X509Certificate sign,
java.security.PublicKey workingPublicKey) |
void |
FixedBCPKIXCertPathReviewer.init(java.security.cert.CertPath certPath,
ExtPKIXParameters2 params)
Initializes the PKIXCertPathReviewer with the given
CertPath and PKIXParameters params |
Constructor and Description |
---|
FixedBCPKIXCertPathReviewer(java.security.cert.CertPath certPath,
ExtPKIXParameters2 params)
Creates a PKIXCertPathReviewer and initializes it with the given
CertPath and PKIXParameters params |
Constructor and Description |
---|
CRLRevocationChecker(ExtPKIXParameters2 paramsPKIX,
java.util.Date validDate,
java.security.PublicKey workingPublicKey,
java.util.List<?> certificates,
CrlCheckingMode checkingMode) |