com.tencent.kona.sun.security.provider.certpath

Class SunCertPathBuilder

java.lang.Object

java.security.cert.CertPathBuilderSpi

com.tencent.kona.sun.security.provider.certpath.SunCertPathBuilder

public final class SunCertPathBuilder
extends java.security.cert.CertPathBuilderSpi

This class builds certification paths in the forward direction.

If successful, it returns a certification path which has successfully satisfied all the constraints and requirements specified in the PKIXBuilderParameters object and has been validated according to the PKIX path validation algorithm defined in RFC 5280.

This implementation uses a depth-first search approach to finding certification paths. If it comes to a point in which it cannot find any more certificates leading to the target OR the path length is too long it backtracks to previous paths until the target has been found or all possible paths have been exhausted.

This implementation is not thread-safe.

Since:

1.4

Constructor Summary

Constructors

Constructor and Description
SunCertPathBuilder() Create an instance of SunCertPathBuilder.

Method Summary

Modifier and Type	Method and Description
java.security.cert.CertPathBuilderResult	engineBuild(java.security.cert.CertPathParameters params) Attempts to build a certification path using the Sun build algorithm from a trusted anchor(s) to a target subject, which must both be specified in the input parameter set.
java.security.cert.CertPathChecker	engineGetRevocationChecker()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SunCertPathBuilder

public SunCertPathBuilder()
                   throws java.security.cert.CertPathBuilderException

Create an instance of SunCertPathBuilder.

Throws:

java.security.cert.CertPathBuilderException - if an error occurs

Method Detail

engineGetRevocationChecker

public java.security.cert.CertPathChecker engineGetRevocationChecker()

Overrides:

engineGetRevocationChecker in class java.security.cert.CertPathBuilderSpi

engineBuild

public java.security.cert.CertPathBuilderResult engineBuild(java.security.cert.CertPathParameters params)
                                                     throws java.security.cert.CertPathBuilderException,
                                                            java.security.InvalidAlgorithmParameterException

Attempts to build a certification path using the Sun build algorithm from a trusted anchor(s) to a target subject, which must both be specified in the input parameter set. This method will attempt to build in the forward direction: from the target to the CA.

The certification path that is constructed is validated according to the PKIX specification.

Specified by:

engineBuild in class java.security.cert.CertPathBuilderSpi

Parameters:

params - the parameter set for building a path. Must be an instance of PKIXBuilderParameters.

Returns:

a certification path builder result.

Throws:

java.security.cert.CertPathBuilderException - Exception thrown if builder is unable to build a complete certification path from the trusted anchor(s) to the target subject.

java.security.InvalidAlgorithmParameterException - if the given parameters are inappropriate for this certification path builder.