extendedpkixparameters.html

kjlj oipipi poipoipo ipo [pipoi

<TR BGCOLOR="white" CLASS="TableRowColor">
<TD ALIGN="right" VALIGN="top" WIDTH="1%"><FONT SIZE="-1">
<CODE>&nbsp;void</CODE></FONT></TD>
<TD><CODE><B><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#setTargetCertConstraints(java.security.cert.CertSelector)">setTargetCertConstraints</A></B>(java.security.cert.CertSelector&nbsp;selector)</CODE>

<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sets the required constraints on the target certificate.</TD>
</TR>
<TR BGCOLOR="white" CLASS="TableRowColor">
<TD ALIGN="right" VALIGN="top" WIDTH="1%"><FONT SIZE="-1">
<CODE>&nbsp;void</CODE></FONT></TD>
<TD><CODE><B><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#setTargetConstraints(org.bouncycastle.util.Selector)">setTargetConstraints</A></B>(<A HREF="../../../org/bouncycastle/util/Selector.html" title="interface in org.bouncycastle.util">Selector</A>&nbsp;selector)</CODE>

<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sets the required constraints on the target certificate or attribute
 certificate.</TD>
</TR>
<TR BGCOLOR="white" CLASS="TableRowColor">
<TD ALIGN="right" VALIGN="top" WIDTH="1%"><FONT SIZE="-1">
<CODE>&nbsp;void</CODE></FONT></TD>
<TD><CODE><B><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#setTrustedACIssuers(java.util.Set)">setTrustedACIssuers</A></B>(java.util.Set&nbsp;trustedACIssuers)</CODE>

<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sets the trusted attribute certificate issuers.</TD>
</TR>
<TR BGCOLOR="white" CLASS="TableRowColor">
<TD ALIGN="right" VALIGN="top" WIDTH="1%"><FONT SIZE="-1">
<CODE>&nbsp;void</CODE></FONT></TD>
<TD><CODE><B><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#setUseDeltasEnabled(boolean)">setUseDeltasEnabled</A></B>(boolean&nbsp;useDeltas)</CODE>

<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sets if delta CRLs should be used for checking the revocation status.</TD>
</TR>
<TR BGCOLOR="white" CLASS="TableRowColor">
<TD ALIGN="right" VALIGN="top" WIDTH="1%"><FONT SIZE="-1">
<CODE>&nbsp;void</CODE></FONT></TD>
<TD><CODE><B><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#setValidityModel(int)">setValidityModel</A></B>(int&nbsp;validityModel)</CODE>

<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD>
</TR>
</TABLE>
&nbsp;<A NAME="methods_inherited_from_class_java.security.cert.PKIXParameters"><!-- --></A>
<TABLE BORDER="1" WIDTH="100%" CELLPADDING="3" CELLSPACING="0" SUMMARY="">
<TR BGCOLOR="#EEEEFF" CLASS="TableSubHeadingColor">
<TH ALIGN="left"><B>Methods inherited from class java.security.cert.PKIXParameters</B></TH>
</TR>
<TR BGCOLOR="white" CLASS="TableRowColor">
<TD><CODE>addCertPathChecker, addCertStore, getCertPathCheckers, getCertStores, getDate, getInitialPolicies, getPolicyQualifiersRejected, getSigProvider, getTargetCertConstraints, getTrustAnchors, isAnyPolicyInhibited, isExplicitPolicyRequired, isPolicyMappingInhibited, isRevocationEnabled, setAnyPolicyInhibited, setCertPathCheckers, setDate, setExplicitPolicyRequired, setInitialPolicies, setPolicyMappingInhibited, setPolicyQualifiersRejected, setRevocationEnabled, setSigProvider, setTrustAnchors, toString</CODE></TD>
</TR>
</TABLE>
&nbsp;<A NAME="methods_inherited_from_class_java.lang.Object"><!-- --></A>
<TABLE BORDER="1" WIDTH="100%" CELLPADDING="3" CELLSPACING="0" SUMMARY="">
<TR BGCOLOR="#EEEEFF" CLASS="TableSubHeadingColor">
<TH ALIGN="left"><B>Methods inherited from class java.lang.Object</B></TH>
</TR>
<TR BGCOLOR="white" CLASS="TableRowColor">
<TD><CODE>equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait</CODE></TD>
</TR>
</TABLE>
&nbsp;
<P>

<!-- ============ FIELD DETAIL =========== -->

<A NAME="field_detail"><!-- --></A>
<TABLE BORDER="1" WIDTH="100%" CELLPADDING="3" CELLSPACING="0" SUMMARY="">
<TR BGCOLOR="#CCCCFF" CLASS="TableHeadingColor">
<TH ALIGN="left" COLSPAN="1"><FONT SIZE="+2">
<B>Field Detail</B></FONT></TH>
</TR>
</TABLE>

<A NAME="PKIX_VALIDITY_MODEL"><!-- --></A><H3>
PKIX_VALIDITY_MODEL</H3>
<PRE>
public static final int <B>PKIX_VALIDITY_MODEL</B></PRE>
<DL>
<DD>This is the default PKIX validity model. Actually there are two variants
 of this: The PKIX model and the modified PKIX model. The PKIX model
 verifies that all involved certificates must have been valid at the
 current time. The modified PKIX model verifies that all involved
 certificates were valid at the signing time. Both are indirectly choosen
 with the <CODE>PKIXParameters.setDate(java.util.Date)</CODE> method, so this
 methods sets the Date when <em>all</em> certificates must have been
 valid.
<P>
<DL>
<DT><B>See Also:</B><DD><A HREF="../../../constant-values.html#org.bouncycastle.x509.ExtendedPKIXParameters.PKIX_VALIDITY_MODEL">Constant Field Values</A></DL>
</DL>
<HR>

<A NAME="CHAIN_VALIDITY_MODEL"><!-- --></A><H3>
CHAIN_VALIDITY_MODEL</H3>
<PRE>
public static final int <B>CHAIN_VALIDITY_MODEL</B></PRE>
<DL>
<DD>This model uses the following validity model. Each certificate must have
 been valid at the moment where is was used. That means the end
 certificate must have been valid at the time the signature was done. The
 CA certificate which signed the end certificate must have been valid,
 when the end certificate was signed. The CA (or Root CA) certificate must
 have been valid, when the CA certificate was signed and so on. So the
 <CODE>PKIXParameters.setDate(java.util.Date)</CODE> method sets the time, when
 the <em>end certificate</em> must have been valid. <p/> It is used e.g.
 in the German signature law.
<P>
<DL>
<DT><B>See Also:</B><DD><A HREF="../../../constant-values.html#org.bouncycastle.x509.ExtendedPKIXParameters.CHAIN_VALIDITY_MODEL">Constant Field Values</A></DL>
</DL>

<!-- ========= CONSTRUCTOR DETAIL ======== -->

<A NAME="constructor_detail"><!-- --></A>
<TABLE BORDER="1" WIDTH="100%" CELLPADDING="3" CELLSPACING="0" SUMMARY="">
<TR BGCOLOR="#CCCCFF" CLASS="TableHeadingColor">
<TH ALIGN="left" COLSPAN="1"><FONT SIZE="+2">
<B>Constructor Detail</B></FONT></TH>
</TR>
</TABLE>

<A NAME="ExtendedPKIXParameters(java.util.Set)"><!-- --></A><H3>
ExtendedPKIXParameters</H3>
<PRE>
public <B>ExtendedPKIXParameters</B>(java.util.Set&nbsp;trustAnchors)
                       throws java.security.InvalidAlgorithmParameterException</PRE>
<DL>
<DD>Creates an instance of <code>PKIXParameters</code> with the specified
 <code>Set</code> of most-trusted CAs. Each element of the set is a
 <CODE>TrustAnchor</CODE>. <p/> Note that the <code>Set</code>
 is copied to protect against subsequent modifications.
<P>
<DL>
<DT><B>Parameters:</B><DD><CODE>trustAnchors</CODE> - a <code>Set</code> of <code>TrustAnchor</code>s
<DT><B>Throws:</B>
<DD><CODE>java.security.InvalidAlgorithmParameterException</CODE> - if the specified
             <code>Set</code> is empty.
<DD><CODE>java.lang.NullPointerException</CODE> - if the specified <code>Set</code> is
             <code>null</code>
<DD><CODE>java.lang.ClassCastException</CODE> - if any of the elements in the <code>Set</code>
             is not of type <code>java.security.cert.TrustAnchor</code></DL>
</DL>

<!-- ============ METHOD DETAIL ========== -->

<A NAME="method_detail"><!-- --></A>
<TABLE BORDER="1" WIDTH="100%" CELLPADDING="3" CELLSPACING="0" SUMMARY="">
<TR BGCOLOR="#CCCCFF" CLASS="TableHeadingColor">
<TH ALIGN="left" COLSPAN="1"><FONT SIZE="+2">
<B>Method Detail</B></FONT></TH>
</TR>
</TABLE>

<A NAME="getInstance(java.security.cert.PKIXParameters)"><!-- --></A><H3>
getInstance</H3>
<PRE>
public static <A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html" title="class in org.bouncycastle.x509">ExtendedPKIXParameters</A> <B>getInstance</B>(java.security.cert.PKIXParameters&nbsp;pkixParams)</PRE>
<DL>
<DD>Returns an instance with the parameters of a given
 <code>PKIXParameters</code> object.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>pkixParams</CODE> - The given <code>PKIXParameters</code>
<DT><B>Returns:</B><DD>an extended PKIX params object</DL>
</DD>
</DL>
<HR>

<A NAME="setParams(java.security.cert.PKIXParameters)"><!-- --></A><H3>
setParams</H3>
<PRE>
protected void <B>setParams</B>(java.security.cert.PKIXParameters&nbsp;params)</PRE>
<DL>
<DD>Method to support <code>clone()</code> under J2ME.
 <code>super.clone()</code> does not exist and fields are not copied.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>params</CODE> - Parameters to set. If this are
            <code>ExtendedPKIXParameters</code> they are copied to.</DL>
</DD>
</DL>
<HR>

<A NAME="isUseDeltasEnabled()"><!-- --></A><H3>
isUseDeltasEnabled</H3>
<PRE>
public boolean <B>isUseDeltasEnabled</B>()</PRE>
<DL>
<DD>Defaults to <code>false</code>.
<P>
<DD><DL>

<DT><B>Returns:</B><DD>Returns if delta CRLs should be used.</DL>
</DD>
</DL>
<HR>

<A NAME="setUseDeltasEnabled(boolean)"><!-- --></A><H3>
setUseDeltasEnabled</H3>
<PRE>
public void <B>setUseDeltasEnabled</B>(boolean&nbsp;useDeltas)</PRE>
<DL>
<DD>Sets if delta CRLs should be used for checking the revocation status.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>useDeltas</CODE> - <code>true</code> if delta CRLs should be used.</DL>
</DD>
</DL>
<HR>

<A NAME="getValidityModel()"><!-- --></A><H3>
getValidityModel</H3>
<PRE>
public int <B>getValidityModel</B>()</PRE>
<DL>
<DD><DL>

<DT><B>Returns:</B><DD>Returns the validity model.<DT><B>See Also:</B><DD><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#CHAIN_VALIDITY_MODEL"><CODE>CHAIN_VALIDITY_MODEL</CODE></A>, 
<A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#PKIX_VALIDITY_MODEL"><CODE>PKIX_VALIDITY_MODEL</CODE></A></DL>
</DD>
</DL>
<HR>

<A NAME="setCertStores(java.util.List)"><!-- --></A><H3>
setCertStores</H3>
<PRE>
public void <B>setCertStores</B>(java.util.List&nbsp;stores)</PRE>
<DL>
<DD>Sets the Java CertStore to this extended PKIX parameters.
<P>
<DD><DL>
<DT><B>Overrides:</B><DD><CODE>setCertStores</CODE> in class <CODE>java.security.cert.PKIXParameters</CODE></DL>
</DD>
<DD><DL>

<DT><B>Throws:</B>
<DD><CODE>java.lang.ClassCastException</CODE> - if an element of <code>stores</code> is not
             a <code>CertStore</code>.</DL>
</DD>
</DL>
<HR>

<A NAME="setStores(java.util.List)"><!-- --></A><H3>
setStores</H3>
<PRE>
public void <B>setStores</B>(java.util.List&nbsp;stores)</PRE>
<DL>
<DD>Sets the Bouncy Castle Stores for finding CRLs, certificates, attribute
 certificates or cross certificates.
 <p>
 The <code>List</code> is cloned.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>stores</CODE> - A list of stores to use.
<DT><B>Throws:</B>
<DD><CODE>java.lang.ClassCastException</CODE> - if an element of <code>stores</code> is not
             a <A HREF="../../../org/bouncycastle/util/Store.html" title="interface in org.bouncycastle.util"><CODE>Store</CODE></A>.<DT><B>See Also:</B><DD><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#getStores()"><CODE>getStores()</CODE></A></DL>
</DD>
</DL>
<HR>

<A NAME="addStore(org.bouncycastle.util.Store)"><!-- --></A><H3>
addStore</H3>
<PRE>
public void <B>addStore</B>(<A HREF="../../../org/bouncycastle/util/Store.html" title="interface in org.bouncycastle.util">Store</A>&nbsp;store)</PRE>
<DL>
<DD>Adds a Bouncy Castle <A HREF="../../../org/bouncycastle/util/Store.html" title="interface in org.bouncycastle.util"><CODE>Store</CODE></A> to find CRLs, certificates, attribute
 certificates or cross certificates.
 <p>
 This method should be used to add local stores, like collection based
 X.509 stores, if available. Local stores should be considered first,
 before trying to use additional (remote) locations, because they do not
 need possible additional network traffic.
 <p>
 If <code>store</code> is <code>null</code> it is ignored.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>store</CODE> - The store to add.<DT><B>See Also:</B><DD><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#getStores()"><CODE>getStores()</CODE></A></DL>
</DD>
</DL>
<HR>

<A NAME="addAddionalStore(org.bouncycastle.util.Store)"><!-- --></A><H3>
addAddionalStore</H3>
<PRE>
public void <B>addAddionalStore</B>(<A HREF="../../../org/bouncycastle/util/Store.html" title="interface in org.bouncycastle.util">Store</A>&nbsp;store)</PRE>
<DL>
<DD>Adds a additional Bouncy Castle <A HREF="../../../org/bouncycastle/util/Store.html" title="interface in org.bouncycastle.util"><CODE>Store</CODE></A> to find CRLs, certificates,
 attribute certificates or cross certificates.
 <p>
 You should not use this method. This method is used for adding additional
 X.509 stores, which are used to add (remote) locations, e.g. LDAP, found
 during X.509 object processing, e.g. in certificates or CRLs. This method
 is used in PKIX certification path processing.
 <p>
 If <code>store</code> is <code>null</code> it is ignored.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>store</CODE> - The store to add.<DT><B>See Also:</B><DD><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#getStores()"><CODE>getStores()</CODE></A></DL>
</DD>
</DL>
<HR>

<A NAME="getAdditionalStores()"><!-- --></A><H3>
getAdditionalStores</H3>
<PRE>
public java.util.List <B>getAdditionalStores</B>()</PRE>
<DL>
<DD>Returns an immutable <code>List</code> of additional Bouncy Castle
 <code>Store</code>s used for finding CRLs, certificates, attribute
 certificates or cross certificates.
<P>
<DD><DL>

<DT><B>Returns:</B><DD>an immutable <code>List</code> of additional Bouncy Castle
         <code>Store</code>s. Never <code>null</code>.<DT><B>See Also:</B><DD><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#addAddionalStore(org.bouncycastle.util.Store)"><CODE>addAddionalStore(Store)</CODE></A></DL>
</DD>
</DL>
<HR>

<A NAME="getStores()"><!-- --></A><H3>
getStores</H3>
<PRE>
public java.util.List <B>getStores</B>()</PRE>
<DL>
<DD>Returns an immutable <code>List</code> of Bouncy Castle
 <code>Store</code>s used for finding CRLs, certificates, attribute
 certificates or cross certificates.
<P>
<DD><DL>

<DT><B>Returns:</B><DD>an immutable <code>List</code> of Bouncy Castle
         <code>Store</code>s. Never <code>null</code>.<DT><B>See Also:</B><DD><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#setStores(java.util.List)"><CODE>setStores(List)</CODE></A></DL>
</DD>
</DL>
<HR>

<A NAME="setValidityModel(int)"><!-- --></A><H3>
setValidityModel</H3>
<PRE>
public void <B>setValidityModel</B>(int&nbsp;validityModel)</PRE>
<DL>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>validityModel</CODE> - The validity model to set.<DT><B>See Also:</B><DD><A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#CHAIN_VALIDITY_MODEL"><CODE>CHAIN_VALIDITY_MODEL</CODE></A>, 
<A HREF="../../../org/bouncycastle/x509/ExtendedPKIXParameters.html#PKIX_VALIDITY_MODEL"><CODE>PKIX_VALIDITY_MODEL</CODE></A></DL>
</DD>
</DL>