iaik.ixsil.keyinfo.x509

Interface X509TrustManagerInterface

All Known Implementing Classes:

Trustmanager, X509TrustManagerDummyImpl

public interface X509TrustManagerInterface

This interface declares all methods which are expected from the KeyProviderInterface implementation for X509 stuff KeyProviderImplX509Data in order to manage trust regarding X509 certificates.

Method Summary

Modifier and Type	Method and Description
java.security.cert.X509Certificate	getCertificate(byte[] subjectKeyIdentifierValue) Provides the certificate which is unambigously identified by the specified parameter.
java.security.cert.X509Certificate	getCertificate(java.security.Principal issuer, java.math.BigInteger serialNumber) Provides the certificate which is unambigously identified by the specified parameters.
java.security.cert.X509Certificate[]	getCertificates(java.security.Principal subject) Provides all certificates whose subject equals the specified parameter.
boolean	isTrusted(java.security.cert.X509Certificate trustCandidate) Decides if a specified certificate "is trusted" by the trust management system.
void	putCertificates(java.security.cert.X509Certificate[] certificates) Hands over a bunch of certificates to the trust management system in order to be stored for later use.
void	putCRL(java.security.cert.X509CRL cRL) Hands over a certificate revocation list to the trust management system in order to be stored there.

Method Detail

putCertificates

void putCertificates(java.security.cert.X509Certificate[] certificates)
              throws X509TrustManagerException

Hands over a bunch of certificates to the trust management system in order to be stored for later use.

Parameters:

certificates - The bunch of certificates to be stored. May be null.

Throws:

X509TrustManagerException - if putting the certificates into the trust management system fails for any reason.

putCRL

void putCRL(java.security.cert.X509CRL cRL)
     throws X509TrustManagerException

Hands over a certificate revocation list to the trust management system in order to be stored there.

Parameters:

cRL - The certificate revocation list. May be null.

Throws:

X509TrustManagerException - if putting the CRL into the trust management system fails for any reason.

isTrusted

boolean isTrusted(java.security.cert.X509Certificate trustCandidate)
           throws X509TrustManagerException

Decides if a specified certificate "is trusted" by the trust management system. This interface does not make any statements about the trust management system's trust model on wheter a certificate is considered "trusted" or not. For instance the trust management system could try to find a certification path from the particular certificate up to a CA certificate that is explicitely trusted by a profile; additionally it could check that all certificates in the path are valid and that their revocation information has been checked.

Parameters:

trustCandidate - The certificate to be tested. Must not be null.

Returns:

true if the certificate is trusted.

Throws:

X509TrustManagerException - if getting the trust decision fails for any reason.

getCertificate

java.security.cert.X509Certificate getCertificate(java.security.Principal issuer,
                                                  java.math.BigInteger serialNumber)
                                           throws X509TrustManagerException

Provides the certificate which is unambigously identified by the specified parameters.

Parameters:

issuer - The issuer of the certificate. Must not be null.

serialNumber - The serial number of the certificate. Must not be null.

Returns:

the certificate fitting for the specified parameters, or null, if the trust management system does not know this certificate.

Throws:

X509TrustManagerException - if getting the requested certificate fails for any reason.

getCertificate

java.security.cert.X509Certificate getCertificate(byte[] subjectKeyIdentifierValue)
                                           throws X509TrustManagerException

Provides the certificate which is unambigously identified by the specified parameter.

Parameters:

subjectKeyIdentifierValue - The plain (i.e. non-DER-encoded) value of the X509.V3 certificate extension named SubjectKeyIdentifer (OID 2.5.29.14). Must not be null.

Returns:

the certificate fitting for the specified parameters, or null, if the trust management system does not know this certificate.

Throws:

X509TrustManagerException - if getting the requested certificate fails for any reason.

getCertificates

java.security.cert.X509Certificate[] getCertificates(java.security.Principal subject)
                                              throws X509TrustManagerException

Provides all certificates whose subject equals the specified parameter.

Parameters:

subject - The subject of the certificate. Must not be null.

Returns:

an array of at all fitting certificates, or null if there are no fitting certificates.

Throws:

X509TrustManagerException - if getting the requested certificates fails for any reason.