com.entrust.toolkit.x509.testlets

Class SubjectAltNameCertTestlet

java.lang.Object

com.entrust.toolkit.x509.testlets.SubjectAltNameCertTestlet

All Implemented Interfaces:

CertTestlet, ExtensionTestlet

public class SubjectAltNameCertTestlet
extends java.lang.Object
implements CertTestlet

This class implements a testlet for the X.509 certificate extension SubjectAltName. This testlet checks: 1) If the extension is flagged critical, at least one of the name forms that is present shall be recognized and processed, otherwise the certificate shall be considered invalid. 2) If we failed to recognize and process any name in this extension, ExtensionException will be thrown if a) the extension is critical, OR b) no DN in the subject field of the cert or the DN is an empty Name, OR c) NameConstraints extension process against the name type we failed to parse.

Constructor Summary

Constructors

Constructor and Description
SubjectAltNameCertTestlet()

Method Summary

Modifier and Type	Method and Description
void	init(X509Certificate[] certChain, TestletDataSet dataSet) Initializes the certificate extension testlet when a new certificate chain is to be validated.
void	notify(V3Extension extension, TestletDataSet dataSet) Notifies the testlet that the extension for which the testlet is registered has been found in the certificate or CRL.
void	reset(TestletDataSet dataSet) Resets the temporary validation data.
void	validate(X509Certificate cert, TestletDataSet dataSet) Validates the certificate based on the certificate extensions found in this, or previous, certificates.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SubjectAltNameCertTestlet

public SubjectAltNameCertTestlet()

Method Detail

init

public void init(X509Certificate[] certChain,
                 TestletDataSet dataSet)

Description copied from interface: CertTestlet

Initializes the certificate extension testlet when a new certificate chain is to be validated.

Specified by:

init in interface CertTestlet

Parameters:

certChain - the certificate chain to be validated

dataSet - a set in which the testlet can store temporary data for validation

notify

public void notify(V3Extension extension,
                   TestletDataSet dataSet)

Description copied from interface: ExtensionTestlet

Notifies the testlet that the extension for which the testlet is registered has been found in the certificate or CRL.

Specified by:

notify in interface ExtensionTestlet

Parameters:

extension - the extension found in the certificate

dataSet - a set in which the testlet can store temporary data for validation

validate

public void validate(X509Certificate cert,
                     TestletDataSet dataSet)
              throws ExtensionException

Description copied from interface: CertTestlet

Validates the certificate based on the certificate extensions found in this, or previous, certificates.

Specified by:

validate in interface CertTestlet

Parameters:

cert - the certificate to validate

dataSet - a set in which the testlet can store temporary data for validation

Throws:

ExtensionException - thrown if validation fails

reset

public void reset(TestletDataSet dataSet)

Description copied from interface: ExtensionTestlet

Resets the temporary validation data.

Specified by:

reset in interface ExtensionTestlet

Parameters:

dataSet - a set in which the testlet can store temporary data for validation