public class SigningPolicy
extends java.lang.Object
Constructor and Description |
---|
SigningPolicy(javax.security.auth.x500.X500Principal caSubjectDN,
java.util.List<java.util.regex.Pattern> allowedDNs)
Create a signing policy for the supplied subject which allows subjects whose DNs match one of the supplied
patterns to sign certificates.
|
SigningPolicy(javax.security.auth.x500.X500Principal caSubjectDN,
java.lang.String[] allowedDNs)
Create a signing policy for the supplied subject which allows the supplied list of DNs to sign certificates.
|
Modifier and Type | Method and Description |
---|---|
java.util.List<java.util.regex.Pattern> |
getAllowedDNs()
Return the patterns which identify the valid signing entities.
|
javax.security.auth.x500.X500Principal |
getCASubjectDN()
Get CA subject DN for which this signing policy is defined.
|
boolean |
isPolicyAvailable()
Method to determine if a signing policy is available for a
given DN.
|
boolean |
isValidSubject(javax.security.auth.x500.X500Principal subject)
Ascertains if the subjectDN is valid against this policy.
|
public SigningPolicy(javax.security.auth.x500.X500Principal caSubjectDN, java.lang.String[] allowedDNs)
caSubjectDN
- The DN for the subject to which this policy applies.allowedDNs
- The list of DNs which can sign certs for this subject.public SigningPolicy(javax.security.auth.x500.X500Principal caSubjectDN, java.util.List<java.util.regex.Pattern> allowedDNs)
caSubjectDN
- The DN for the subject to which this policy applies.allowedDNs
- A list of patterns to which to compare signing entity DNs.public javax.security.auth.x500.X500Principal getCASubjectDN()
public boolean isValidSubject(javax.security.auth.x500.X500Principal subject)
subject
- Subject DN to be validatedpublic java.util.List<java.util.regex.Pattern> getAllowedDNs()
public boolean isPolicyAvailable()
Copyright © 2012. All Rights Reserved.