org.bouncycastle.cert.plants

Class MerkleTreeCertificateValidator.ValidationParams

java.lang.Object

org.bouncycastle.cert.plants.MerkleTreeCertificateValidator.ValidationParams

Enclosing class:

MerkleTreeCertificateValidator

public static class MerkleTreeCertificateValidator.ValidationParams
extends java.lang.Object

Parameters supplied by the relying party for certificate validation.

authorityInfo is optional. When non-null it pins the validator to the CA's published MTCCertificationAuthority extension and enforces:

• The cert's serial number lies within the CA's authorized range [authorityInfo.getMinSerial(), authorityInfo.getMaxSerial()] (Section 5.5 / 7.2).
• The hashFunction OID matches authorityInfo.getLogHash() (Section 7.1).

authorityInfo.getSigAlg() is the CA cosigner's published signature algorithm. MTCSignatureVerifier.getAlgorithm() surfaces the MTC algorithm string a registered verifier is bound to, but the draft does not pin OID identifiers for the plain (r||s) ECDSA forms, so the validator does not map sigAlg to that string itself. Callers building the provider for the CA cosigner remain responsible for checking the verifier they register against authorityInfo.getSigAlg().

Constructor Summary

Constructors

Constructor and Description
ValidationParams(MTCCosignerVerifierProvider cosignerVerifierProvider, java.util.List<MerkleTreeCertificateValidator.TrustedSubtree> trustedSubtrees, java.util.List<MerkleTreeCertificateValidator.RevokedRange> revokedRanges, int minCosignatures, MerkleTreeHash hashFunction, org.bouncycastle.asn1.x509.MTCCertificationAuthority authorityInfo)
ValidationParams(MTCCosignerVerifierProvider cosignerVerifierProvider, MerkleTreeHash hashFunction, int minCosignatures, org.bouncycastle.asn1.x509.MTCCertificationAuthority authorityInfo) Convenience constructor for the common case where the relying party has no pre-distributed trusted subtrees and no revocations to apply.
ValidationParams(MTCCosignerVerifierProvider cosignerVerifierProvider, MerkleTreeHash hashFunction, java.util.List<MerkleTreeCertificateValidator.TrustedSubtree> trustedSubtrees, java.util.List<MerkleTreeCertificateValidator.RevokedRange> revokedRanges, int minCosignatures)

Method Summary

Modifier and Type	Method and Description
org.bouncycastle.asn1.x509.MTCCertificationAuthority	getAuthorityInfo()
MTCCosignerVerifierProvider	getCosignerVerifierProvider()
MerkleTreeHash	getHashFunction()
int	getMinCosignatures()
java.util.List<MerkleTreeCertificateValidator.RevokedRange>	getRevokedRanges()
java.util.List<MerkleTreeCertificateValidator.TrustedSubtree>	getTrustedSubtrees()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ValidationParams

public ValidationParams(MTCCosignerVerifierProvider cosignerVerifierProvider,
                        MerkleTreeHash hashFunction,
                        java.util.List<MerkleTreeCertificateValidator.TrustedSubtree> trustedSubtrees,
                        java.util.List<MerkleTreeCertificateValidator.RevokedRange> revokedRanges,
                        int minCosignatures)

ValidationParams

public ValidationParams(MTCCosignerVerifierProvider cosignerVerifierProvider,
                        MerkleTreeHash hashFunction,
                        int minCosignatures,
                        org.bouncycastle.asn1.x509.MTCCertificationAuthority authorityInfo)

Convenience constructor for the common case where the relying party has no pre-distributed trusted subtrees and no revocations to apply. Defaults trustedSubtrees and revokedRanges to empty lists.

ValidationParams

public ValidationParams(MTCCosignerVerifierProvider cosignerVerifierProvider,
                        java.util.List<MerkleTreeCertificateValidator.TrustedSubtree> trustedSubtrees,
                        java.util.List<MerkleTreeCertificateValidator.RevokedRange> revokedRanges,
                        int minCosignatures,
                        MerkleTreeHash hashFunction,
                        org.bouncycastle.asn1.x509.MTCCertificationAuthority authorityInfo)

Method Detail

getCosignerVerifierProvider

public MTCCosignerVerifierProvider getCosignerVerifierProvider()

getTrustedSubtrees

public java.util.List<MerkleTreeCertificateValidator.TrustedSubtree> getTrustedSubtrees()

getRevokedRanges

public java.util.List<MerkleTreeCertificateValidator.RevokedRange> getRevokedRanges()

getMinCosignatures

public int getMinCosignatures()

getHashFunction

public MerkleTreeHash getHashFunction()

getAuthorityInfo

public org.bouncycastle.asn1.x509.MTCCertificationAuthority getAuthorityInfo()