| Package | Description |
|---|---|
| com.entrust.toolkit |
Contains various high-level classes that provide Toolkit JCA cryptographic provider initialization,
an Entrust User representation, a key/certificate source, a certificate set representation,
JNI initialization capabilities, PKCS #7 encoding and decoding, CMS and PKCS#7 User related
utilities, transaction counting, and an XML trust manager.
|
| com.entrust.toolkit.archive |
Contains classes for reading and writing files in the legacy Entrust Archive format.
|
| com.entrust.toolkit.exceptions | |
| com.entrust.toolkit.x509 |
Contains the Entrust certification validation mechanism as well as
other classes related to X.509.
|
| com.entrust.toolkit.x509.certstore |
Contains the certificate stores and classes used during certificate path
building.
|
| com.entrust.toolkit.x509.revocation |
Contains the Entrust revocation checking mechanism and revocation
stores.
|
| iaik.cms | |
| iaik.pkcs.pkcs7 | |
| iaik.security.smime | |
| iaik.smime |
| Modifier and Type | Method and Description |
|---|---|
void |
User.addTrustedCertificate(X509Certificate trustedCert,
boolean revcheck)
Adds a trusted certificate from an address book, for example.
|
X509Certificate[] |
User.validate(X509Certificate certificate)
Validates an X.509 certificate.
|
| Modifier and Type | Method and Description |
|---|---|
CertificationException |
ArchiveResults.getEncryptionCertificateException()
Returns any exception thrown when validating the encryption
certificate of the Archive creator.
|
CertificationException |
ArchiveResults.getVerificationCertificateException()
Returns any exception thrown when validating the verification
certificate of the Archive signer.
|
| Modifier and Type | Class and Description |
|---|---|
class |
CertificationRootException
This exception is thrown to indicate that no chain from the certificate
that is validated to the root of trust exists.
|
class |
CertificationSignatureException
This exception is thrown to indicate that the signature of a certificate
or CRL fails verification.
|
class |
ExtensionException
This is the superclass of all extensions thrown by extension testlets that
indicate a failure in certificate chain, CRL or CRL entry validation.
|
class |
LifespanException |
class |
RevocationException
This exception indicates that a certificate has been revoked.
|
class |
RevocationWarningException
This exception represents a revocation warning.
|
| Modifier and Type | Method and Description |
|---|---|
X509Certificate[] |
CertVerifier.validate(X509Certificate certificate)
Validates an X.509 certificate.
|
X509Certificate[] |
CertVerifier.validate(X509Certificate certificate,
java.util.Date validationTime)
Validates an X.509 certificate at a given point in time.
|
| Modifier and Type | Method and Description |
|---|---|
CertificateSet |
ArchiveCertCache.findCerts(GeneralName location)
Generalized version of findCerts.
|
CertificateSet |
CACrossCertCS.findCerts(GeneralName location)
Generalized version of findCerts.
|
CertificateSet |
CertificateGraph.findCerts(GeneralName location)
Generalized version of findCerts.
|
CertificateSet |
CertificateStore.findCerts(GeneralName location)
Returns all certificates for the entity specified in
location. |
CertificateSet |
CollectionCS.findCerts(GeneralName location)
Generalized version of findCerts.
|
CertificateSet |
HTTPCS.findCerts(GeneralName location)
Generalized version of findCerts.
|
CertificateSet |
CACrossCertCS.findCerts(java.security.Principal dn)
Returns all certificates for the entity specified in
dn. |
abstract CertificateSet |
CertificateStore.findCerts(java.security.Principal dn)
Returns all certificates for the entity specified in
dn. |
CertificateSet |
HTTPCS.findCerts(java.security.Principal dn)
This method is not supported by this class, as a DN has
nothing to do with an HTTP address.
|
CertificateSet |
CapiCS.findCerts(java.security.Principal dn)
Look for certificates containing the specified DN in CAPI.
|
CertificateSet |
CollectionCS.findExtensionCerts(X509Certificate certificate,
ObjectID accessMethod,
ObjectID infoAccess)
Search through all certificate stores for certificates located at the
AIA ca-Issuers accessLocation.
|
X509Certificate[] |
CollectionCS.validate(X509Certificate certificate)
Validates an X.509 certificate.
|
X509Certificate[] |
CollectionCS.validate(X509Certificate certificate,
java.util.Date validationTime)
Validates an X.509 certificate at a given point in time.
|
| Modifier and Type | Method and Description |
|---|---|
void |
CollectionRS.check(X509Certificate cert)
Checks the revocation status of the supplied certificate.
|
void |
MultiOCSPLocalRevocationChecker.check(X509Certificate cert)
This method checks revocation of the given certificate.
|
void |
OCSPRevocationChecker.check(X509Certificate certificate)
This method will check Revocation of the given certificate using OCSP.
|
void |
RevocationChecker.check(X509Certificate cert)
A method used to check revocation of a specific certificate.
|
void |
RevocationManager.check(X509Certificate cert)
Checks the revocation status of the given cert starting with the first revocation checker in the ordered
list of revocation checkers.
|
void |
RevocationTrustCache.check(X509Certificate cert)
Convienance method for checking revocation of a signle certificate
|
void |
CollectionRS.check(X509Certificate[] chain)
Determines whether any of the certifcates in the chain have been revoked.
|
void |
MultiOCSPLocalRevocationChecker.check(X509Certificate[] chain)
This method checks revocation of the given certificate chain.
|
void |
OCSPRevocationChecker.check(X509Certificate[] chain)
Given a certificate chain, this method will check Revocation on the chain
using OCSP.
|
void |
RevocationChecker.check(X509Certificate[] chain)
Determines whether any of the certifcates in the chain have been revoked.
|
void |
RevocationManager.check(X509Certificate[] chain)
Determines whether any of the certifcates in the chain have been revoked.
|
void |
RevocationTrustCache.check(X509Certificate[] chain)
Checks whether all certificates contained in the chain are in the
RevocationTrustCache.
|
void |
CollectionRS.check(X509Certificate cert,
X509Certificate[] chain)
Checks the revocation status of a certificate.
|
void |
MultiOCSPLocalRevocationChecker.check(X509Certificate cert,
X509Certificate[] chain)
This method checks revocation of the given certificate.
|
void |
OCSPRevocationChecker.check(X509Certificate cert,
X509Certificate[] chain)
The Main method of checking whether the certificate is revoked in the OCSP revocation checkers.
|
void |
RevocationChecker.check(X509Certificate cert,
X509Certificate[] chain)
Determines whether the given certificate has been revoked.
|
void |
RevocationManager.check(X509Certificate cert,
X509Certificate[] chain)
Checks the revocation status of the given cert starting with the first revocation checker in the ordered
list of revocation checkers.
|
void |
RevocationTrustCache.check(X509Certificate cert,
X509Certificate[] chain)
Checks whether the given certificate is in the RevocationTrustCache.
|
void |
CollectionRS.check(X509Certificate cert,
X509Certificate[] chain,
int position)
Checks the revocation status of a certificate.
|
void |
MultiOCSPLocalRevocationChecker.check(X509Certificate cert,
X509Certificate[] chain,
int position)
This method checks revocation of the given certificate.
|
void |
OCSPRevocationChecker.check(X509Certificate certificate,
X509Certificate[] chain,
int position)
This method will check Revocation of the given certificate using OCSP.
|
void |
RevocationChecker.check(X509Certificate cert,
X509Certificate[] chain,
int position)
A convience method that carries the position of the certificate in the chain,
May be useful for speeding up Issuer certificate searches depending which
revocation checker is in use.
|
void |
RevocationManager.check(X509Certificate cert,
X509Certificate[] chain,
int position)
Checks the revocation status of the given cert starting with the first revocation checker in the ordered
list of revocation checkers.
|
void |
RevocationTrustCache.check(X509Certificate cert,
X509Certificate[] chain,
int position)
This method does not need to use the position of certificate in the chain.
|
protected abstract GeneralName |
RevocationStore.getCrlsByType(java.util.Collection crls,
CRLType crlType,
GeneralNames dpDistributionPoint)
Retrieves all CRLs of the indicated type that exist at the indicated
distrubution point.
|
| Modifier and Type | Method and Description |
|---|---|
X509Certificate |
SignedDataStream.verifyAndValidate(int signerInfoIndex,
CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedDataStream object at the indicated index. |
SignerInfo |
SignedDataStream.verifyAndValidate(X509Certificate signerCert,
CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedDataStream object and corresponds to the indicated
signer certificate. |
| Modifier and Type | Method and Description |
|---|---|
X509Certificate |
SignedDataStream.verifyAndValidate(int signerInfoIndex,
CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedDataStream object at the indicated index. |
SignerInfo |
SignedDataStream.verifyAndValidate(X509Certificate signerCert,
CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedDataStream object and corresponds to the indicated
signer certificate. |
| Modifier and Type | Method and Description |
|---|---|
X509Certificate |
SignedContent.verifyAndValidate(CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedContent object. |
SignerInfo |
SignedContent.verifyAndValidate(X509Certificate signerCert,
CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedContent using the indicated signer certificate. |
| Modifier and Type | Method and Description |
|---|---|
X509Certificate |
SignedContent.verifyAndValidate(int signerInfoIndex,
CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedContent object at the indicated index. |
SignerInfo |
SignedContent.verifyAndValidate(X509Certificate signerCert,
CertVerifier certVerifier)
Verifies and validates the SignerInfo structure that exists in this
SignedContent object and corresponds to the indicated
signer certificate. |