org.openeuler.sun.security.provider.certpath

类 AlgorithmChecker

java.lang.Object

java.security.cert.PKIXCertPathChecker

org.openeuler.sun.security.provider.certpath.AlgorithmChecker

所有已实现的接口:

Cloneable, CertPathChecker

public final class AlgorithmChecker
extends PKIXCertPathChecker

A PKIXCertPathChecker implementation to check whether a specified certificate contains the required algorithm constraints.

Certificate fields such as the subject public key, the signature algorithm, key usage, extended key usage, etc. need to conform to the specified algorithm constraints.

另请参阅:

PKIXCertPathChecker, PKIXParameters

字段概要

字段

限定符和类型	字段和说明
private TrustAnchor	anchor
private static sun.security.util.DisabledAlgorithmConstraints	certPathDefaultConstraints
private AlgorithmConstraints	constraints
private Date	date
private static sun.security.util.Debug	debug
private static Set<CryptoPrimitive>	KU_PRIMITIVE_SET
private PublicKey	prevPubKey
private static Set<CryptoPrimitive>	SIGNATURE_PRIMITIVE_SET
private PublicKey	trustedPubKey
private String	variant

构造器概要

构造器

构造器和说明
AlgorithmChecker(AlgorithmConstraints constraints, String variant) Create a new AlgorithmChecker with the given AlgorithmConstraints and String variant.
AlgorithmChecker(TrustAnchor anchor, AlgorithmConstraints constraints, Date date, String variant) Create a new AlgorithmChecker with the given TrustAnchor, AlgorithmConstraints, Date, and String variant.
AlgorithmChecker(TrustAnchor anchor, Date pkixdate, String variant) Create a new AlgorithmChecker with the given TrustAnchor, PKIXParameter date, and varient
AlgorithmChecker(TrustAnchor anchor, String variant) Create a new AlgorithmChecker with the given TrustAnchor and String variant.

方法概要

限定符和类型	方法和说明
void	check(Certificate cert, Collection<String> unresolvedCritExts)
(专用程序包) static void	check(PublicKey key, sun.security.x509.AlgorithmId algorithmId, String variant, TrustAnchor anchor) Check the signature algorithm with the specified public key.
(专用程序包) static void	check(PublicKey key, X509CRL crl, String variant, TrustAnchor anchor) Check the signature algorithm with the specified public key.
Set<String>	getSupportedExtensions()
void	init(boolean forward)
boolean	isForwardCheckingSupported()
(专用程序包) void	trySetTrustAnchor(TrustAnchor anchor) Try to set the trust anchor of the checker.

从类继承的方法 java.security.cert.PKIXCertPathChecker

check, clone

从类继承的方法 java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

debug

private static final sun.security.util.Debug debug

constraints

private final AlgorithmConstraints constraints

trustedPubKey

private final PublicKey trustedPubKey

date

private final Date date

prevPubKey

private PublicKey prevPubKey

variant

private final String variant

anchor

private TrustAnchor anchor

SIGNATURE_PRIMITIVE_SET

private static final Set<CryptoPrimitive> SIGNATURE_PRIMITIVE_SET

KU_PRIMITIVE_SET

private static final Set<CryptoPrimitive> KU_PRIMITIVE_SET

certPathDefaultConstraints

private static final sun.security.util.DisabledAlgorithmConstraints certPathDefaultConstraints

构造器详细资料

AlgorithmChecker

public AlgorithmChecker(TrustAnchor anchor,
                        String variant)

Create a new AlgorithmChecker with the given TrustAnchor and String variant.

参数:

anchor - the trust anchor selected to validate the target certificate

variant - the Validator variant of the operation. A null value passed will set it to Validator.GENERIC.

AlgorithmChecker

public AlgorithmChecker(AlgorithmConstraints constraints,
                        String variant)

Create a new AlgorithmChecker with the given AlgorithmConstraints and String variant. Note that this constructor can initialize a variation of situations where the AlgorithmConstraints or Variant maybe known.

参数:

constraints - the algorithm constraints (or null)

variant - the Validator variant of the operation. A null value passed will set it to Validator.GENERIC.

AlgorithmChecker

public AlgorithmChecker(TrustAnchor anchor,
                        AlgorithmConstraints constraints,
                        Date date,
                        String variant)

Create a new AlgorithmChecker with the given TrustAnchor, AlgorithmConstraints, Date, and String variant.

参数:

anchor - the trust anchor selected to validate the target certificate

constraints - the algorithm constraints (or null)

date - the date specified by the PKIXParameters date, or the JAR timestamp if jar files are being validated and the JAR is timestamped. May be null if no timestamp or PKIXParameter date is set.

variant - the Validator variant of the operation. A null value passed will set it to Validator.GENERIC.

AlgorithmChecker

public AlgorithmChecker(TrustAnchor anchor,
                        Date pkixdate,
                        String variant)

Create a new AlgorithmChecker with the given TrustAnchor, PKIXParameter date, and varient

参数:

anchor - the trust anchor selected to validate the target certificate

pkixdate - Date the constraints are checked against. The value is either the PKIXParameters date or null for the current date.

variant - the Validator variant of the operation. A null value passed will set it to Validator.GENERIC.

方法详细资料

init

public void init(boolean forward)
          throws CertPathValidatorException

指定者:

init 在接口中 CertPathChecker

指定者:

init 在类中 PKIXCertPathChecker

抛出:

CertPathValidatorException

isForwardCheckingSupported

public boolean isForwardCheckingSupported()

指定者:

isForwardCheckingSupported 在接口中 CertPathChecker

指定者:

isForwardCheckingSupported 在类中 PKIXCertPathChecker

getSupportedExtensions

public Set<String> getSupportedExtensions()

指定者:

getSupportedExtensions 在类中 PKIXCertPathChecker

check

public void check(Certificate cert,
                  Collection<String> unresolvedCritExts)
           throws CertPathValidatorException

指定者:

check 在类中 PKIXCertPathChecker

抛出:

CertPathValidatorException

trySetTrustAnchor

void trySetTrustAnchor(TrustAnchor anchor)

Try to set the trust anchor of the checker.

If there is no trust anchor specified and the checker has not started, set the trust anchor.

参数:

anchor - the trust anchor selected to validate the target certificate

check

static void check(PublicKey key,
                  X509CRL crl,
                  String variant,
                  TrustAnchor anchor)
           throws CertPathValidatorException

Check the signature algorithm with the specified public key.

参数:

key - the public key to verify the CRL signature

crl - the target CRL

variant - the Validator variant of the operation. A null value passed will set it to Validator.GENERIC.

anchor - the trust anchor selected to validate the CRL issuer

抛出:

CertPathValidatorException

check

static void check(PublicKey key,
                  sun.security.x509.AlgorithmId algorithmId,
                  String variant,
                  TrustAnchor anchor)
           throws CertPathValidatorException

Check the signature algorithm with the specified public key.

参数:

key - the public key to verify the CRL signature

algorithmId - signature algorithm Algorithm ID

variant - the Validator variant of the operation. A null value passed will set it to Validator.GENERIC.

anchor - the trust anchor selected to validate the public key

抛出:

CertPathValidatorException