org.bouncycastle.x509
Class ExtendedPKIXBuilderParameters
public class ExtendedPKIXBuilderParameters
This class contains extended parameters for PKIX certification path builders.
Object | clone() - Makes a copy of this
PKIXParameters object.
|
Set | getExcludedCerts() - Excluded certificates are not used for building a certification path.
|
static ExtendedPKIXParameters | getInstance(PKIXParameters pkixParams) - Returns an instance of
ExtendedPKIXParameters which can be
safely casted to ExtendedPKIXBuilderParameters .
|
int | getMaxPathLength() - Returns the value of the maximum number of intermediate non-self-issued
certificates in the certification path.
|
void | setExcludedCerts(Set excludedCerts) - Sets the excluded certificates which are not used for building a
certification path.
|
void | setMaxPathLength(int maxPathLength) - Sets the maximum number of intermediate non-self-issued certificates in a
certification path.
|
protected void | setParams(PKIXParameters params) - Can alse handle
ExtendedPKIXBuilderParameters and
PKIXBuilderParameters .
|
addAddionalStore , addStore , clone , getAdditionalStores , getAttrCertCheckers , getInstance , getNecessaryACAttributes , getProhibitedACAttributes , getStores , getTargetConstraints , getTrustedACIssuers , getValidityModel , isAdditionalLocationsEnabled , isUseDeltasEnabled , setAdditionalLocationsEnabled , setAttrCertCheckers , setCertStores , setNecessaryACAttributes , setParams , setProhibitedACAttributes , setStores , setTargetCertConstraints , setTargetConstraints , setTrustedACIssuers , setUseDeltasEnabled , setValidityModel |
ExtendedPKIXBuilderParameters
public ExtendedPKIXBuilderParameters(Set trustAnchors,
Selector targetConstraints)
throws InvalidAlgorithmParameterException
Creates an instance of
PKIXBuilderParameters
with the
specified
Set
of most-trusted CAs. Each element of the set
is a
TrustAnchor
.
Note that the
Set
is copied to protect against subsequent
modifications.
trustAnchors
- a Set
of TrustAnchor
stargetConstraints
- a Selector
specifying the
constraints on the target certificate or attribute
certificate.
clone
public Object clone()
Makes a copy of this PKIXParameters
object. Changes to the
copy will not affect the original and vice versa.
- clone in interface ExtendedPKIXParameters
- a copy of this
PKIXParameters
object
getExcludedCerts
public Set getExcludedCerts()
Excluded certificates are not used for building a certification path.
The returned set is immutable.
- Returns the excluded certificates.
getInstance
public static ExtendedPKIXParameters getInstance(PKIXParameters pkixParams)
Returns an instance of
ExtendedPKIXParameters
which can be
safely casted to
ExtendedPKIXBuilderParameters
.
This method can be used to get a copy from other
PKIXBuilderParameters
,
PKIXParameters
,
and
ExtendedPKIXParameters
instances.
- getInstance in interface ExtendedPKIXParameters
pkixParams
- The PKIX parameters to create a copy of.
- An
ExtendedPKIXBuilderParameters
instance.
getMaxPathLength
public int getMaxPathLength()
Returns the value of the maximum number of intermediate non-self-issued
certificates in the certification path.
- the maximum number of non-self-issued intermediate certificates
in the certification path, or -1 if no limit exists.
setExcludedCerts
public void setExcludedCerts(Set excludedCerts)
Sets the excluded certificates which are not used for building a
certification path. If the
Set
is
null
an
empty set is assumed.
The given set is cloned to protect it against subsequent modifications.
excludedCerts
- The excluded certificates to set.
setMaxPathLength
public void setMaxPathLength(int maxPathLength)
Sets the maximum number of intermediate non-self-issued certificates in a
certification path. The PKIX
CertPathBuilder
must not
build paths longer then this length.
A value of 0 implies that the path can only contain a single certificate.
A value of -1 does not limit the length. The default length is 5.
The basic constraints extension of a CA certificate overrides this value
if smaller.
maxPathLength
- the maximum number of non-self-issued intermediate
certificates in the certification path
setParams
protected void setParams(PKIXParameters params)
Can alse handle ExtendedPKIXBuilderParameters
and
PKIXBuilderParameters
.
- setParams in interface ExtendedPKIXParameters
params
- Parameters to set.
org.bouncycastle.x509.ExtendedPKIXParameters.setParams(java.security.cert.PKIXParameters)