Package org.bouncycastle.x509

Class PKIXCertPathReviewer

java.lang.Object

org.bouncycastle.x509.PKIXCertPathReviewer

public class PKIXCertPathReviewer
extends Object

Deprecated.

use org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer in the bcpkix package

PKIXCertPathReviewer
Validation of X.509 Certificate Paths. Tries to find as much errors in the Path as possible.

Field Summary

Fields

Modifier and Type	Field	Description
protected static final String	ANY_POLICY
protected static final String	BASIC_CONSTRAINTS
protected static final String	CERTIFICATE_POLICIES
protected CertPath	certPath	Deprecated.
protected List	certs	Deprecated.
protected static final String	CRL_NUMBER
protected static final int	CRL_SIGN
protected static final String[]	crlReasons
protected Date	currentDate	Deprecated.
protected static final String	DELTA_CRL_INDICATOR
protected List[]	errors	Deprecated.
protected static final String	INHIBIT_ANY_POLICY
protected static final String	ISSUING_DISTRIBUTION_POINT
protected static final int	KEY_CERT_SIGN
protected static final String	KEY_USAGE
protected int	n	Deprecated.
protected static final String	NAME_CONSTRAINTS
protected List[]	notifications	Deprecated.
protected PKIXParameters	pkixParams	Deprecated.
protected static final String	POLICY_CONSTRAINTS
protected static final String	POLICY_MAPPINGS
protected PolicyNode	policyTree	Deprecated.
protected static final String	SUBJECT_ALTERNATIVE_NAME
protected PublicKey	subjectPublicKey	Deprecated.
protected TrustAnchor	trustAnchor	Deprecated.
protected Date	validDate	Deprecated.

Constructor Summary

Constructors

Constructor	Description
PKIXCertPathReviewer()	Deprecated. Creates an empty PKIXCertPathReviewer.
PKIXCertPathReviewer(CertPath certPath, PKIXParameters params)	Deprecated. Creates a PKIXCertPathReviewer and initializes it with the given CertPath and PKIXParameters params

Method Summary

Modifier and Type	Method	Description
protected void	addError(ErrorBundle msg)	Deprecated.
protected void	addError(ErrorBundle msg, int index)	Deprecated.
protected void	addNotification(ErrorBundle msg)	Deprecated.
protected void	addNotification(ErrorBundle msg, int index)	Deprecated.
protected void	checkCRLs(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector crlDistPointUrls, int index)	Deprecated.
protected void	checkRevocation(PKIXParameters paramsPKIX, X509Certificate cert, Date validDate, X509Certificate sign, PublicKey workingPublicKey, Vector crlDistPointUrls, Vector ocspUrls, int index)	Deprecated.
protected void	doChecks()	Deprecated.
protected static Collection	findCertificates(PKIXCertStoreSelector certSelect, List certStores)
protected static Collection	findCertificates(X509AttributeCertStoreSelector certSelect, List certStores)
protected static Collection	findCertificates(X509CertStoreSelector certSelect, List certStores)	Return a Collection of all certificates or attribute certificates found in the X509Store's that are matching the certSelect criteriums.
protected static AlgorithmIdentifier	getAlgorithmIdentifier(PublicKey key)
CertPath	getCertPath()	Deprecated.
int	getCertPathSize()	Deprecated.
protected static void	getCertStatus(Date validDate, X509CRL crl, Object cert, org.bouncycastle.x509.CertStatus certStatus)
protected Vector	getCRLDistUrls(CRLDistPoint crlDistPoints)	Deprecated.
protected static X500Principal	getEncodedIssuerPrincipal(Object cert)	Returns the issuer of an attribute certificate or certificate.
List[]	getErrors()	Deprecated. Returns an Array of Lists which contains a List of global error messages and a List of error messages for each certificate in the path.
List	getErrors(int index)	Deprecated. Returns an List of error messages for the certificate at the given index in the CertPath.
protected static ASN1Primitive	getExtensionValue(X509Extension ext, String oid)	Extract the value of the given extension, if it exists.
protected static X500Principal	getIssuerPrincipal(X509CRL crl)
protected static PublicKey	getNextWorkingKey(List certs, int index)	Return the next working key inheriting DSA parameters if necessary.
List[]	getNotifications()	Deprecated. Returns an Array of Lists which contains a List of global notification messages and a List of botification messages for each certificate in the path.
List	getNotifications(int index)	Deprecated. Returns an List of notification messages for the certificate at the given index in the CertPath.
protected Vector	getOCSPUrls(AuthorityInformationAccess authInfoAccess)	Deprecated.
PolicyNode	getPolicyTree()	Deprecated.
protected static final Set	getQualifierSet(ASN1Sequence qualifiers)
protected static X500Principal	getSubjectPrincipal(X509Certificate cert)
PublicKey	getSubjectPublicKey()	Deprecated.
TrustAnchor	getTrustAnchor()	Deprecated.
protected Collection	getTrustAnchors(X509Certificate cert, Set trustanchors)	Deprecated.
protected static Date	getValidityDate(PKIXParameters paramsPKIX, Date currentDate)
void	init(CertPath certPath, PKIXParameters params)	Deprecated. Initializes the PKIXCertPathReviewer with the given CertPath and PKIXParameters params
protected static boolean	isAnyPolicy(Set policySet)
protected static boolean	isSelfIssued(X509Certificate cert)
boolean	isValidCertPath()	Deprecated.
protected static void	prepareNextCertB1(int i, List[] policyNodes, String id_p, Map m_idp, X509Certificate cert)
protected static PKIXPolicyNode	prepareNextCertB2(int i, List[] policyNodes, String id_p, PKIXPolicyNode validPolicyTree)
protected static boolean	processCertD1i(int index, List[] policyNodes, ASN1ObjectIdentifier pOid, Set pq)
protected static void	processCertD1ii(int index, List[] policyNodes, ASN1ObjectIdentifier _poid, Set _pq)
protected static PKIXPolicyNode	removePolicyNode(PKIXPolicyNode validPolicyTree, List[] policyNodes, PKIXPolicyNode _node)
protected static void	verifyX509Certificate(X509Certificate cert, PublicKey publicKey, String sigProvider)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

certPath

protected CertPath certPath

Deprecated.

pkixParams

protected PKIXParameters pkixParams

Deprecated.

currentDate

protected Date currentDate

Deprecated.

validDate

protected Date validDate

Deprecated.

certs

protected List certs

Deprecated.

n

protected int n

Deprecated.

notifications

protected List[] notifications

Deprecated.

errors

protected List[] errors

Deprecated.

trustAnchor

protected TrustAnchor trustAnchor

Deprecated.

subjectPublicKey

protected PublicKey subjectPublicKey

Deprecated.

policyTree

protected PolicyNode policyTree

Deprecated.

CERTIFICATE_POLICIES

protected static final String CERTIFICATE_POLICIES

BASIC_CONSTRAINTS

protected static final String BASIC_CONSTRAINTS

POLICY_MAPPINGS

protected static final String POLICY_MAPPINGS

SUBJECT_ALTERNATIVE_NAME

protected static final String SUBJECT_ALTERNATIVE_NAME

NAME_CONSTRAINTS

protected static final String NAME_CONSTRAINTS

KEY_USAGE

protected static final String KEY_USAGE

INHIBIT_ANY_POLICY

protected static final String INHIBIT_ANY_POLICY

ISSUING_DISTRIBUTION_POINT

protected static final String ISSUING_DISTRIBUTION_POINT

DELTA_CRL_INDICATOR

protected static final String DELTA_CRL_INDICATOR

POLICY_CONSTRAINTS

protected static final String POLICY_CONSTRAINTS

CRL_NUMBER

protected static final String CRL_NUMBER

ANY_POLICY

protected static final String ANY_POLICY

See Also:

• Constant Field Values

KEY_CERT_SIGN

protected static final int KEY_CERT_SIGN

See Also:

• Constant Field Values

CRL_SIGN

protected static final int CRL_SIGN

See Also:

• Constant Field Values

crlReasons

protected static final String[] crlReasons

Constructor Details

PKIXCertPathReviewer

public PKIXCertPathReviewer(CertPath certPath,
 PKIXParameters params)
                     throws CertPathReviewerException

Deprecated.

Creates a PKIXCertPathReviewer and initializes it with the given CertPath and PKIXParameters params

Parameters:

certPath - the CertPath to validate

params - the PKIXParameters to use

Throws:

CertPathReviewerException - if the certPath is empty

PKIXCertPathReviewer

public PKIXCertPathReviewer()

Deprecated.

Creates an empty PKIXCertPathReviewer. Don't forget to call init() to initialize the object.

Method Details

init

public void init(CertPath certPath,
 PKIXParameters params)
          throws CertPathReviewerException

Deprecated.

Initializes the PKIXCertPathReviewer with the given CertPath and PKIXParameters params

Parameters:

certPath - the CertPath to validate

params - the PKIXParameters to use

Throws:

CertPathReviewerException - if the certPath is empty

IllegalStateException - if the PKIXCertPathReviewer is already initialized

getCertPath

public CertPath getCertPath()

Deprecated.

Returns:

the CertPath that was validated

getCertPathSize

public int getCertPathSize()

Deprecated.

Returns:

the size of the CertPath

getErrors

public List[] getErrors()

Deprecated.

Returns an Array of Lists which contains a List of global error messages and a List of error messages for each certificate in the path. The global error List is at index 0. The error lists for each certificate at index 1 to n. The error messages are of type.

Returns:

the Array of Lists which contain the error messages

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

getErrors

public List getErrors(int index)

Deprecated.

Returns an List of error messages for the certificate at the given index in the CertPath. If index == -1 then the list of global errors is returned with errors not specific to a certificate.

Parameters:

index - the index of the certificate in the CertPath

Returns:

List of error messages for the certificate

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

getNotifications

public List[] getNotifications()

Deprecated.

Returns an Array of Lists which contains a List of global notification messages and a List of botification messages for each certificate in the path. The global notificatio List is at index 0. The notification lists for each certificate at index 1 to n. The error messages are of type.

Returns:

the Array of Lists which contain the notification messages

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

getNotifications

public List getNotifications(int index)

Deprecated.

Returns an List of notification messages for the certificate at the given index in the CertPath. If index == -1 then the list of global notifications is returned with notifications not specific to a certificate.

Parameters:

index - the index of the certificate in the CertPath

Returns:

List of notification messages for the certificate

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

getPolicyTree

public PolicyNode getPolicyTree()

Deprecated.

Returns:

the valid policy tree, null if no valid policy exists.

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

getSubjectPublicKey

public PublicKey getSubjectPublicKey()

Deprecated.

Returns:

the PublicKey if the last certificate in the CertPath

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

getTrustAnchor

public TrustAnchor getTrustAnchor()

Deprecated.

Returns:

the TrustAnchor for the CertPath, null if no valid TrustAnchor was found.

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

isValidCertPath

public boolean isValidCertPath()

Deprecated.

Returns:

if the CertPath is valid

Throws:

IllegalStateException - if the PKIXCertPathReviewer was not initialized

addNotification

protected void addNotification(ErrorBundle msg)

Deprecated.

addNotification

protected void addNotification(ErrorBundle msg,
 int index)

Deprecated.

addError

protected void addError(ErrorBundle msg)

Deprecated.

addError

protected void addError(ErrorBundle msg,
 int index)

Deprecated.

doChecks

protected void doChecks()

Deprecated.

checkRevocation

protected void checkRevocation(PKIXParameters paramsPKIX,
 X509Certificate cert,
 Date validDate,
 X509Certificate sign,
 PublicKey workingPublicKey,
 Vector crlDistPointUrls,
 Vector ocspUrls,
 int index)
                        throws CertPathReviewerException

Deprecated.

Throws:

CertPathReviewerException

checkCRLs

protected void checkCRLs(PKIXParameters paramsPKIX,
 X509Certificate cert,
 Date validDate,
 X509Certificate sign,
 PublicKey workingPublicKey,
 Vector crlDistPointUrls,
 int index)
                  throws CertPathReviewerException

Deprecated.

Throws:

CertPathReviewerException

getCRLDistUrls

protected Vector getCRLDistUrls(CRLDistPoint crlDistPoints)

Deprecated.

getOCSPUrls

protected Vector getOCSPUrls(AuthorityInformationAccess authInfoAccess)

Deprecated.

getTrustAnchors

protected Collection getTrustAnchors(X509Certificate cert,
 Set trustanchors)
                              throws CertPathReviewerException

Deprecated.

Throws:

CertPathReviewerException

getEncodedIssuerPrincipal

protected static X500Principal getEncodedIssuerPrincipal(Object cert)

Returns the issuer of an attribute certificate or certificate.

Parameters:

cert - The attribute certificate or certificate.

Returns:

The issuer as X500Principal.

getValidityDate

protected static Date getValidityDate(PKIXParameters paramsPKIX,
 Date currentDate)

getSubjectPrincipal

protected static X500Principal getSubjectPrincipal(X509Certificate cert)

isSelfIssued

protected static boolean isSelfIssued(X509Certificate cert)

getExtensionValue

protected static ASN1Primitive getExtensionValue(X509Extension ext,
 String oid)
                                          throws AnnotatedException

Extract the value of the given extension, if it exists.

Parameters:

ext - The extension object.

oid - The object identifier to obtain.

Throws:

AnnotatedException - if the extension cannot be read.

getIssuerPrincipal

protected static X500Principal getIssuerPrincipal(X509CRL crl)

getAlgorithmIdentifier

protected static AlgorithmIdentifier getAlgorithmIdentifier(PublicKey key)
                                                     throws CertPathValidatorException

Throws:

CertPathValidatorException

getQualifierSet

protected static final Set getQualifierSet(ASN1Sequence qualifiers)
                                    throws CertPathValidatorException

Throws:

CertPathValidatorException

removePolicyNode

protected static PKIXPolicyNode removePolicyNode(PKIXPolicyNode validPolicyTree,
 List[] policyNodes,
 PKIXPolicyNode _node)

processCertD1i

protected static boolean processCertD1i(int index,
 List[] policyNodes,
 ASN1ObjectIdentifier pOid,
 Set pq)

processCertD1ii

protected static void processCertD1ii(int index,
 List[] policyNodes,
 ASN1ObjectIdentifier _poid,
 Set _pq)

prepareNextCertB1

protected static void prepareNextCertB1(int i,
 List[] policyNodes,
 String id_p,
 Map m_idp,
 X509Certificate cert)
                                 throws AnnotatedException,
CertPathValidatorException

Throws:

AnnotatedException

CertPathValidatorException

prepareNextCertB2

protected static PKIXPolicyNode prepareNextCertB2(int i,
 List[] policyNodes,
 String id_p,
 PKIXPolicyNode validPolicyTree)

isAnyPolicy

protected static boolean isAnyPolicy(Set policySet)

findCertificates

protected static Collection findCertificates(X509CertStoreSelector certSelect,
 List certStores)
                                      throws AnnotatedException

Return a Collection of all certificates or attribute certificates found in the X509Store's that are matching the certSelect criteriums.

Parameters:

certSelect - a Selector object that will be used to select the certificates

certStores - a List containing only X509Store objects. These are used to search for certificates.

Returns:

a Collection of all found X509Certificate or X509AttributeCertificate objects. May be empty but never null.

Throws:

AnnotatedException

findCertificates

protected static Collection findCertificates(PKIXCertStoreSelector certSelect,
 List certStores)
                                      throws AnnotatedException

Throws:

AnnotatedException

findCertificates

protected static Collection findCertificates(X509AttributeCertStoreSelector certSelect,
 List certStores)
                                      throws AnnotatedException

Throws:

AnnotatedException

getCertStatus

protected static void getCertStatus(Date validDate,
 X509CRL crl,
 Object cert,
 org.bouncycastle.x509.CertStatus certStatus)
                             throws AnnotatedException

Throws:

AnnotatedException

getNextWorkingKey

protected static PublicKey getNextWorkingKey(List certs,
 int index)
                                      throws CertPathValidatorException

Return the next working key inheriting DSA parameters if necessary.

This methods inherits DSA parameters from the indexed certificate or previous certificates in the certificate chain to the returned PublicKey. The list is searched upwards, meaning the end certificate is at position 0 and previous certificates are following.

If the indexed certificate does not contain a DSA key this method simply returns the public key. If the DSA key already contains DSA parameters the key is also only returned.

Parameters:

certs - The certification path.

index - The index of the certificate which contains the public key which should be extended with DSA parameters.

Returns:

The public key of the certificate in list position index extended with DSA parameters if applicable.

Throws:

CertPathValidatorException - if DSA parameters cannot be inherited.

verifyX509Certificate

protected static void verifyX509Certificate(X509Certificate cert,
 PublicKey publicKey,
 String sigProvider)
                                     throws GeneralSecurityException

Throws:

GeneralSecurityException