java.lang.Object | |
↳ | java.security.cert.PKIXCertPathChecker |
The class specifying the interface to extend the certification path
validation algorithm by checks to perform on an X509Certificate
.
The checks are added to a certification path validation using the
setCertPathCheckers or
addCertPathChecker of the PKIXParameters
and PKIXBuilderParameters
class respectively. The
check method will be called for each
certificate processed by a CertPathBuilder
of CertPathValidator
.
A PKIXCertPathChecker
implementation must support reverse
checking (from trusted CA to target) and may support forward checking
(from target to trusted CA). The return value of isForwardCheckingSupported
indicates whether forward checking is supported.
Protected Constructors | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Creates a new
PKIXCertPathChecker instance. |
Public Methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Checks the specified certificate and removes the processed critical
extensions from the specified list of X.509 extension OIDs.
| |||||||||||
Clones this
PKIXCertPathChecker instance. | |||||||||||
Returns the list of extensions of X.509 certificates that this
PKIXCertPathChecker is able to process. | |||||||||||
Initializes this
PKIXCertPathChecker instance for specified
checking direction. | |||||||||||
Returns whether this
PKIXCertPathChecker instance supports
forward checking. |
[Expand]
Inherited Methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
From class java.lang.Object
|
Creates a new PKIXCertPathChecker
instance.
Checks the specified certificate and removes the processed critical extensions from the specified list of X.509 extension OIDs.
cert | the certificate. |
---|---|
unresolvedCritExts | the list of critical X.509 extension OID strings. |
CertPathValidatorException | if check(s) fail on the specified certificate. |
---|
Clones this PKIXCertPathChecker
instance.
Returns the list of extensions of X.509 certificates that this PKIXCertPathChecker
is able to process.
PKIXCertPathChecker
is able to process, or null
if there
are none.Initializes this PKIXCertPathChecker
instance for specified
checking direction.
forward | the direction of the certification path processing, true if the certificates are processed in forward direction
(from target to trusted CA), false if processed in
reverse direction (from trusted CA to target). |
---|
CertPathValidatorException | if initialization of this PKIXCertPathChecker
instance fails, or if it cannot process certificates in the
specified order. |
---|
Returns whether this PKIXCertPathChecker
instance supports
forward checking.
true
if this PKIXCertPathChecker
instance
supports forward checking, otherwise false
.