com.tencent.kona.sun.security.validator

Class PKIXValidator

java.lang.Object

com.tencent.kona.sun.security.validator.Validator

com.tencent.kona.sun.security.validator.PKIXValidator

public final class PKIXValidator
extends Validator

Validator implementation built on the PKIX CertPath API. This implementation will be emphasized going forward.

Note that the validate() implementation tries to use a PKIX validator if that appears possible and a PKIX builder otherwise. This increases performance and currently also leads to better exception messages in case of failures.

PKIXValidator objects are immutable once they have been created. Please DO NOT add methods that can change the state of an instance once it has been created.

Field Summary

Fields inherited from class com.tencent.kona.sun.security.validator.Validator

TYPE_PKIX, TYPE_SIMPLE, VAR_CODE_SIGNING, VAR_GENERIC, VAR_JCE_SIGNING, VAR_TLS_CLIENT, VAR_TLS_SERVER, VAR_TSA_SERVER

Method Summary

Modifier and Type	Method and Description
int	getCertPathLength() Returns the length of the last certification path that is validated by CertPathValidator.
java.security.cert.PKIXBuilderParameters	getParameters() Return the PKIX parameters used by this instance.
java.util.Collection<java.security.cert.X509Certificate>	getTrustedCertificates() Returns an immutable Collection of the X509Certificates this instance uses as trust anchors.

Methods inherited from class com.tencent.kona.sun.security.validator.Validator

getInstance, getInstance, getInstance, setValidationDate, validate, validate, validate, validate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getTrustedCertificates

public java.util.Collection<java.security.cert.X509Certificate> getTrustedCertificates()

Description copied from class: Validator

Returns an immutable Collection of the X509Certificates this instance uses as trust anchors.

Specified by:

getTrustedCertificates in class Validator

getCertPathLength

public int getCertPathLength()

Returns the length of the last certification path that is validated by CertPathValidator. This is intended primarily as a callback mechanism for PKIXCertPathCheckers to determine the length of the certification path that is being validated. It is necessary since engineValidate() may modify the length of the path.

Returns:

the length of the last certification path passed to CertPathValidator.validate, or -1 if it has not been invoked yet

getParameters

public java.security.cert.PKIXBuilderParameters getParameters()

Return the PKIX parameters used by this instance. An application may modify the parameters but must make sure not to perform any concurrent validations.