com.tencent.kona.sun.security.provider.certpath

Class X509CertificatePair

java.lang.Object

com.tencent.kona.sun.security.provider.certpath.X509CertificatePair

public class X509CertificatePair
extends java.lang.Object

This class represents an X.509 Certificate Pair object, which is primarily used to hold a pair of cross certificates issued between Certification Authorities. The ASN.1 structure is listed below. The forward certificate of the CertificatePair contains a certificate issued to this CA by another CA. The reverse certificate of the CertificatePair contains a certificate issued by this CA to another CA. When both the forward and the reverse certificates are present in the CertificatePair, the issuer name in one certificate shall match the subject name in the other and vice versa, and the subject public key in one certificate shall be capable of verifying the digital signature on the other certificate and vice versa. If a subject public key in one certificate does not contain required key algorithm parameters, then the signature check involving that key is not done.

The ASN.1 syntax for this object is:

 CertificatePair      ::=     SEQUENCE {
      forward [0]     Certificate OPTIONAL,
      reverse [1]     Certificate OPTIONAL
                      -- at least one of the pair shall be present -- }
 

This structure uses EXPLICIT tagging. References: Annex A of X.509(2000), X.509(1997).

Since:

1.4

Constructor Summary

Constructors

Constructor and Description
X509CertificatePair() Creates an empty instance of X509CertificatePair.
X509CertificatePair(java.security.cert.X509Certificate forward, java.security.cert.X509Certificate reverse) Creates an instance of X509CertificatePair.

Method Summary

Modifier and Type	Method and Description
static void	clearCache() Clear the cache for debugging.
static X509CertificatePair	generateCertificatePair(byte[] encoded) Create a X509CertificatePair from its encoding.
byte[]	getEncoded() Return the DER encoded form of the certificate pair.
java.security.cert.X509Certificate	getForward() Returns the forward component of the certificate pair.
java.security.cert.X509Certificate	getReverse() Returns the reverse component of the certificate pair.
void	setForward(java.security.cert.X509Certificate cert) Sets the forward component of the certificate pair.
void	setReverse(java.security.cert.X509Certificate cert) Sets the reverse component of the certificate pair.
java.lang.String	toString() Return a printable representation of the certificate pair.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

X509CertificatePair

public X509CertificatePair()

Creates an empty instance of X509CertificatePair.

X509CertificatePair

public X509CertificatePair(java.security.cert.X509Certificate forward,
                           java.security.cert.X509Certificate reverse)
                    throws java.security.cert.CertificateException

Creates an instance of X509CertificatePair. At least one of the pair must be non-null.

Parameters:

forward - The forward component of the certificate pair which represents a certificate issued to this CA by other CAs.

reverse - The reverse component of the certificate pair which represents a certificate issued by this CA to other CAs.

Throws:

java.security.cert.CertificateException - If an exception occurs.

Method Detail

clearCache

public static void clearCache()

Clear the cache for debugging.

generateCertificatePair

public static X509CertificatePair generateCertificatePair(byte[] encoded)
                                                   throws java.security.cert.CertificateException

Create a X509CertificatePair from its encoding. Uses cache lookup if possible.

Throws:

java.security.cert.CertificateException

setForward

public void setForward(java.security.cert.X509Certificate cert)
                throws java.security.cert.CertificateException

Sets the forward component of the certificate pair.

Throws:

java.security.cert.CertificateException

setReverse

public void setReverse(java.security.cert.X509Certificate cert)
                throws java.security.cert.CertificateException

Sets the reverse component of the certificate pair.

Throws:

java.security.cert.CertificateException

getForward

public java.security.cert.X509Certificate getForward()

Returns the forward component of the certificate pair.

Returns:

The forward certificate, or null if not set.

getReverse

public java.security.cert.X509Certificate getReverse()

Returns the reverse component of the certificate pair.

Returns:

The reverse certificate, or null if not set.

getEncoded

public byte[] getEncoded()
                  throws java.security.cert.CertificateEncodingException

Return the DER encoded form of the certificate pair.

Returns:

The encoded form of the certificate pair.

Throws:

java.security.cert.CertificateEncodingException - If an encoding exception occurs.

toString

public java.lang.String toString()

Return a printable representation of the certificate pair.

Overrides:

toString in class java.lang.Object

Returns:

A String describing the contents of the pair.