Java PKIXParameters.getTargetCertConstraints方法代码示例

import java.security.cert.PKIXParameters; //导入方法依赖的package包/类
/**
 * Test #2 for <code>getTargetCertConstraints()</code> method<br>
 * Assertion: note that the <code>CertSelector</code> returned
 * is cloned to protect against subsequent modifications
 * @throws InvalidAlgorithmParameterException
 * @throws IOException
 */
public final void testGetTargetCertConstraints02() throws Exception {
    Set taSet = TestUtils.getTrustAnchorSet();
    if (taSet == null) {
        fail(getName() + ": not performed (could not create test TrustAnchor set)");
    }

    X509CertSelector x509cs = new X509CertSelector();
    PKIXParameters p = new PKIXParameters(taSet);
    p.setTargetCertConstraints(x509cs);
    // get cert selector
    X509CertSelector cs1 = (X509CertSelector)p.getTargetCertConstraints();
    // modify returned selector
    cs1.setIssuer(testIssuer);
    // get cert selector again
    X509CertSelector cs2 = (X509CertSelector)p.getTargetCertConstraints();
    // check that selector is not the same
    assertNotSame("notTheSame", cs1, cs2);
    // check that selector's internal state has
    // not been changed by above modification
    assertFalse("stateNotChanged", testIssuer.equals(cs2.getIssuerAsString()));
}
 

import java.security.cert.PKIXParameters; //导入方法依赖的package包/类
/**
 * Test #2 for <code>setTargetCertConstraints(CertSelector)</code> method<br>
 * Assertion: ... the CertSelector specified is cloned to protect against
 * subsequent modifications
 * @throws IOException
 * @throws InvalidAlgorithmParameterException
 */
public final void testSetTargetCertConstraints02() throws Exception {
    Set taSet = TestUtils.getTrustAnchorSet();
    if (taSet == null) {
        fail(getName() + ": not performed (could not create test TrustAnchor set)");
    }

    X509CertSelector x509cs = new X509CertSelector();
    PKIXParameters p = new PKIXParameters(taSet);
    p.setTargetCertConstraints(x509cs);
    // modify selector
    x509cs.setIssuer(testIssuer);
    // get selector
    X509CertSelector x509cs1 = (X509CertSelector)p.getTargetCertConstraints();
    // check that selector's internal state has
    // not been changed by above modification
    assertFalse(testIssuer.equals(x509cs1.getIssuerAsString()));
}
 

import java.security.cert.PKIXParameters; //导入方法依赖的package包/类
public Builder(PKIXParameters baseParameters)
{
    this.baseParameters = (PKIXParameters)baseParameters.clone();
    CertSelector constraints = baseParameters.getTargetCertConstraints();
    if (constraints != null)
    {
        this.targetConstraints = new PKIXCertStoreSelector.Builder(constraints).build();
    }
    Date checkDate = baseParameters.getDate();
    this.date = (checkDate == null) ? new Date() : checkDate;
    this.revocationEnabled = baseParameters.isRevocationEnabled();
    this.trustAnchors = baseParameters.getTrustAnchors();
}
 

import java.security.cert.PKIXParameters; //导入方法依赖的package包/类
/**
 * Internal method to actually validate a constructed path.
 *
 * @return the valid policy tree
 */
private PolicyNode doValidate(
        TrustAnchor anchor, CertPath cpOriginal,
        ArrayList<X509Certificate> certList, PKIXParameters pkixParam,
        PolicyNodeImpl rootNode) throws CertPathValidatorException
{
    int certPathLen = certList.size();

    basicChecker = new BasicChecker(anchor, testDate, sigProvider, false);
    AlgorithmChecker algorithmChecker = new AlgorithmChecker(anchor);
    KeyChecker keyChecker = new KeyChecker(certPathLen,
        pkixParam.getTargetCertConstraints());
    ConstraintsChecker constraintsChecker =
        new ConstraintsChecker(certPathLen);

    PolicyChecker policyChecker =
        new PolicyChecker(pkixParam.getInitialPolicies(), certPathLen,
                          pkixParam.isExplicitPolicyRequired(),
                          pkixParam.isPolicyMappingInhibited(),
                          pkixParam.isAnyPolicyInhibited(),
                          pkixParam.getPolicyQualifiersRejected(),
                          rootNode);

    ArrayList<PKIXCertPathChecker> certPathCheckers =
        new ArrayList<PKIXCertPathChecker>();
    // add standard checkers that we will be using
    certPathCheckers.add(algorithmChecker);
    certPathCheckers.add(keyChecker);
    certPathCheckers.add(constraintsChecker);
    certPathCheckers.add(policyChecker);
    certPathCheckers.add(basicChecker);

    // only add a revocationChecker if revocation is enabled
    if (pkixParam.isRevocationEnabled()) {

        // Use OCSP if it has been enabled
        if (ocspEnabled) {
            OCSPChecker ocspChecker =
                new OCSPChecker(cpOriginal, pkixParam, onlyEECert);
            certPathCheckers.add(ocspChecker);
        }

        // Always use CRLs
        CrlRevocationChecker revocationChecker = new
            CrlRevocationChecker(anchor, pkixParam, certList, onlyEECert);
        certPathCheckers.add(revocationChecker);
    }

    // add user-specified checkers
    certPathCheckers.addAll(userCheckers);

    PKIXMasterCertPathValidator masterValidator =
        new PKIXMasterCertPathValidator(certPathCheckers);

    masterValidator.validate(cpOriginal, certList);

    return policyChecker.getPolicyTree();
}
 

import java.security.cert.PKIXParameters; //导入方法依赖的package包/类
/**
 * Internal method to actually validate a constructed path.
 *
 * @return the valid policy tree
 */
private PolicyNode doValidate(
        TrustAnchor anchor, CertPath cpOriginal,
        ArrayList<X509Certificate> certList, PKIXParameters pkixParam,
        PolicyNodeImpl rootNode) throws CertPathValidatorException
{
    int certPathLen = certList.size();

    basicChecker = new BasicChecker(anchor, testDate, sigProvider, false);
    AlgorithmChecker algorithmChecker = new AlgorithmChecker(anchor);
    KeyChecker keyChecker = new KeyChecker(certPathLen,
        pkixParam.getTargetCertConstraints());
    ConstraintsChecker constraintsChecker =
        new ConstraintsChecker(certPathLen);

    PolicyChecker policyChecker =
        new PolicyChecker(pkixParam.getInitialPolicies(), certPathLen,
                          pkixParam.isExplicitPolicyRequired(),
                          pkixParam.isPolicyMappingInhibited(),
                          pkixParam.isAnyPolicyInhibited(),
                          pkixParam.getPolicyQualifiersRejected(),
                          rootNode);
    UntrustedChecker untrustedChecker = new UntrustedChecker();

    ArrayList<PKIXCertPathChecker> certPathCheckers =
        new ArrayList<PKIXCertPathChecker>();
    // add standard checkers that we will be using
    certPathCheckers.add(untrustedChecker);
    certPathCheckers.add(algorithmChecker);
    certPathCheckers.add(keyChecker);
    certPathCheckers.add(constraintsChecker);
    certPathCheckers.add(policyChecker);
    certPathCheckers.add(basicChecker);

    // only add a revocationChecker if revocation is enabled
    if (pkixParam.isRevocationEnabled()) {

        // Use OCSP if it has been enabled
        if (ocspEnabled) {
            OCSPChecker ocspChecker =
                new OCSPChecker(cpOriginal, pkixParam, onlyEECert);
            certPathCheckers.add(ocspChecker);
        }

        // Always use CRLs
        CrlRevocationChecker revocationChecker = new
            CrlRevocationChecker(anchor, pkixParam, certList, onlyEECert);
        certPathCheckers.add(revocationChecker);
    }

    // add user-specified checkers
    certPathCheckers.addAll(userCheckers);

    PKIXMasterCertPathValidator masterValidator =
        new PKIXMasterCertPathValidator(certPathCheckers);

    masterValidator.validate(cpOriginal, certList);

    return policyChecker.getPolicyTree();
}