Class PKIXPolicyTreeUtil

java.lang.Object
org.bouncycastle.jcajce.PKIXPolicyTreeUtil

public class PKIXPolicyTreeUtil extends Object
Shared RFC 5280 sec. 6.1.3/6.1.4 valid-policy-tree manipulation, single-sourced from the two cert-path stacks that used to carry duplicate copies (the provider's cert path validator/reviewer and the PKIX revocation checker's reviewer). These are the error-reporting-free mechanics of the policy algorithm - each caller keeps its own driver loop and localized diagnostics and calls in here for the tree operations, which raise a plain CertPathValidatorException the caller re-wraps into its own exception/message type.