Package | Description |
---|---|
eu.emi.security.authn.x509 |
Contains API of the library.
|
eu.emi.security.authn.x509.helpers.ns |
Contains implementation of local namespace policy rules for trusted certificate authorities
(using Globus and EuGridPMA syntax), which are exclusively used by the
OpensslCertChainValidator
Warning: this package contains internal implementation of the library. |
eu.emi.security.authn.x509.helpers.pkipath |
Helper classes for internal, low level, logic of certificate path validation.
|
Modifier and Type | Method and Description |
---|---|
List<ValidationError> |
ValidationResult.getErrors()
Returns list of problems found.
|
Modifier and Type | Method and Description |
---|---|
boolean |
ValidationErrorListener.onValidationError(ValidationError error)
Invoked upon validation error during chain processing.
|
Modifier and Type | Method and Description |
---|---|
void |
ValidationResult.addErrors(List<ValidationError> errors)
Adds specified errors to this result (may change valid flag).
|
void |
ValidationResult.setErrors(List<ValidationError> errors) |
Constructor and Description |
---|
ValidationResult(boolean valid,
List<ValidationError> errors)
Constructor used when no information about unresolved extensions is provided.
|
ValidationResult(boolean valid,
List<ValidationError> errors,
Set<String> unresolvedCriticalExtensions,
List<X509Certificate> validChain)
Constructor used to provide a full information set about validation problem.
|
Modifier and Type | Method and Description |
---|---|
List<ValidationError> |
NamespaceChecker.check(X509Certificate[] chain)
Checks all certificates in the chain whether they are correct w.r.t. namespace policies
which are configured.
|
Modifier and Type | Method and Description |
---|---|
static ValidationError |
BCErrorMapper.map(org.bouncycastle.i18n.ErrorBundle error,
int pos,
X509Certificate[] cc) |
Modifier and Type | Method and Description |
---|---|
protected List<ValidationError> |
BCCertPathValidator.convertErrors(List<?>[] bcErrorsA,
boolean ignoreProxyErrors,
int positionDelta,
X509Certificate[] cc) |
List<ValidationError> |
ValidationErrorException.getErrors() |
Modifier and Type | Method and Description |
---|---|
void |
ValidationErrorException.addError(ValidationError e) |
protected boolean |
AbstractValidator.notifyListeners(ValidationError error)
Notifies all registered listeners.
|
Modifier and Type | Method and Description |
---|---|
void |
ValidationErrorException.addErrors(List<ValidationError> errors) |
protected void |
BCCertPathValidator.checkLastCNNameRule(X500Principal srcP,
X500Principal issuerP,
List<ValidationError> errors,
int position,
X509Certificate[] proxyChain) |
protected List<X509Certificate> |
BCCertPathValidator.checkNonProxyChain(X509Certificate[] baseChain,
ExtPKIXParameters2 params,
List<ValidationError> errors,
Set<String> unresolvedExtensions,
int posDelta,
X509Certificate[] cc)
Performs checking of the chain which has no proxies (or at least should not have proxies),
using
FixedBCPKIXCertPathReviewer . |
protected void |
BCCertPathValidator.checkPairWithProxy(X509Certificate issuerCert,
X509Certificate proxyCert,
List<ValidationError> errors,
int position,
X509Certificate[] proxyChain,
Date validationTime)
Checks if the certificate passed as the 2nd argument is a correct proxy
certificate including checks w.r.t. chain rules with the certificate passed
as the 1st argument being its issuing certificate.
|
protected void |
BCCertPathValidator.checkProxyChainMain(X509Certificate[] proxyChain,
List<ValidationError> errors,
Set<String> unresolvedExtensions,
Date validDate)
Performs a validation loop of the proxy chain checking each pair in chain
for the rules not otherwise verified by the base check.
|
protected void |
BCCertPathValidator.checkProxyChainWithBC(X509Certificate[] proxyChain,
Set<TrustAnchor> trustAnchor,
List<ValidationError> errors,
Set<String> unresolvedExtensions)
Checks chain with proxies, starting with the EEC using X.509 path validation.
|
protected void |
BCCertPathValidator.checkProxyTime(X509Certificate proxyCert,
Date validationTime,
X509Certificate[] proxyChain,
List<ValidationError> errors,
int position) |
protected void |
AbstractValidator.processErrorList(List<ValidationError> errors) |
void |
ValidationErrorException.setError(List<ValidationError> errors) |
Constructor and Description |
---|
ValidationErrorException(ValidationError e) |
Copyright © 2012-2017 European Middleware Initiative. All Rights Reserved.