com.entrust.toolkit.x509.testlets

Class BasicConstraintsCertTestlet

java.lang.Object

com.entrust.toolkit.x509.testlets.BasicConstraintsCertTestlet

All Implemented Interfaces:

CertTestlet, ExtensionTestlet

public class BasicConstraintsCertTestlet
extends java.lang.Object
implements CertTestlet

This class implements a CertTestlet to test the BasicConstraints extension of a certificate.

There should be no need for toolkit users to use this class directly.

Constructor Summary

Constructors

Constructor and Description
BasicConstraintsCertTestlet()

Method Summary

Methods

Modifier and Type	Method and Description
void	init(X509Certificate[] certChain, TestletDataSet dataSet) Initialize the testlet with the given chain.
void	notify(V3Extension extension, TestletDataSet dataSet) Notify the testlet of the extension that is about to be validated.
void	reset(TestletDataSet dataSet) Part of the ExtensionTestlet interface, has no effect.
void	validate(X509Certificate cert, TestletDataSet dataSet) Validate that the given certificate does not invalidate the certificate chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BasicConstraintsCertTestlet

public BasicConstraintsCertTestlet()

Method Detail

init

public void init(X509Certificate[] certChain,
        TestletDataSet dataSet)

Initialize the testlet with the given chain.

Specified by:

init in interface CertTestlet

Parameters:

certChain - the certificate chain to be validated.

dataSet - the TestletDataSet to use for the chain validation.

notify

public void notify(V3Extension extension,
          TestletDataSet dataSet)

Notify the testlet of the extension that is about to be validated.

Specified by:

notify in interface ExtensionTestlet

Parameters:

extension - The extension to be validated. This will be an instance of BasicConstraints.

dataSet - the TestletDataSet to use for the chain validation.

See Also:

BasicConstraints

validate

public void validate(X509Certificate cert,
            TestletDataSet dataSet)
              throws ExtensionException

Validate that the given certificate does not invalidate the certificate chain. Checks that the certificate path length is still less than the maximum, and that end user certificates only appear as the last element in a chain.

Note: this method must be called for every certificate in the chain being validated, regardless of whether or not it contains the BasicConstraints extension.

Specified by:

validate in interface CertTestlet

Parameters:

cert - The current certificate being processed.

dataSet - the TestletDataSet to use for the chain validation.

Throws:

ExtensionException - if there is a problem processing the extension, or if the given certificate causes the path to be invalid according to the values in the extension.

reset

public void reset(TestletDataSet dataSet)

Part of the ExtensionTestlet interface, has no effect.

Specified by:

reset in interface ExtensionTestlet

Parameters:

dataSet - ignored.