public class

PKIXAttrCertPathValidatorSpi

extends CertPathValidatorSpi
java.lang.Object
   ↳ java.security.cert.CertPathValidatorSpi
     ↳ org.bouncycastle.jce.provider.PKIXAttrCertPathValidatorSpi

Class Overview

CertPathValidatorSpi implementation for X.509 Attribute Certificates la RFC 3281.

Summary

Public Constructors
PKIXAttrCertPathValidatorSpi()
Public Methods
CertPathValidatorResult engineValidate(CertPath certPath, CertPathParameters params)
Validates an attribute certificate with the given certificate path.
[Expand]
Inherited Methods
From class java.security.cert.CertPathValidatorSpi
From class java.lang.Object

Public Constructors

public PKIXAttrCertPathValidatorSpi ()

Public Methods

public CertPathValidatorResult engineValidate (CertPath certPath, CertPathParameters params)

Validates an attribute certificate with the given certificate path.

params must be an instance of ExtendedPKIXParameters.

The target constraints in the params must be an X509AttributeCertStoreSelector with at least the attribute certificate criterion set. Obey that also target informations may be necessary to correctly validate this attribute certificate.

The attribute certificate issuer must be added to the trusted attribute issuers with setTrustedACIssuers(Set).

Parameters
certPath The certificate path which belongs to the attribute certificate issuer public key certificate.
params The PKIX parameters.
Returns
  • A PKIXCertPathValidatorResult of the result of validating the certPath.
Throws
InvalidAlgorithmParameterException if params is inappropriate for this validator.
CertPathValidatorException if the verification fails.