Package org.bouncycastle.x509
Class ExtendedPKIXBuilderParameters
java.lang.Object
java.security.cert.PKIXParameters
org.bouncycastle.x509.ExtendedPKIXParameters
org.bouncycastle.x509.ExtendedPKIXBuilderParameters
- All Implemented Interfaces:
Cloneable
,CertPathParameters
Deprecated.
use PKIXExtendedBuilderParameters
This class contains extended parameters for PKIX certification path builders.
- See Also:
-
Field Summary
Fields inherited from class org.bouncycastle.x509.ExtendedPKIXParameters
CHAIN_VALIDITY_MODEL, PKIX_VALIDITY_MODEL
-
Constructor Summary
ConstructorDescriptionExtendedPKIXBuilderParameters
(Set trustAnchors, Selector targetConstraints) Deprecated.Creates an instance ofPKIXBuilderParameters
with the specifiedSet
of most-trusted CAs. -
Method Summary
Modifier and TypeMethodDescriptionclone()
Deprecated.Makes a copy of thisPKIXParameters
object.Deprecated.Excluded certificates are not used for building a certification path.static ExtendedPKIXParameters
getInstance
(PKIXParameters pkixParams) Deprecated.Returns an instance ofExtendedPKIXParameters
which can be safely casted toExtendedPKIXBuilderParameters
.int
Deprecated.Returns the value of the maximum number of intermediate non-self-issued certificates in the certification path.void
setExcludedCerts
(Set excludedCerts) Deprecated.Sets the excluded certificates which are not used for building a certification path.void
setMaxPathLength
(int maxPathLength) Deprecated.Sets the maximum number of intermediate non-self-issued certificates in a certification path.protected void
setParams
(PKIXParameters params) Deprecated.Can alse handleExtendedPKIXBuilderParameters
andPKIXBuilderParameters
.Methods inherited from class org.bouncycastle.x509.ExtendedPKIXParameters
addAddionalStore, addAdditionalStore, addStore, getAdditionalStores, getAttrCertCheckers, getNecessaryACAttributes, getProhibitedACAttributes, getStores, getTargetConstraints, getTrustedACIssuers, getValidityModel, isAdditionalLocationsEnabled, isUseDeltasEnabled, setAdditionalLocationsEnabled, setAttrCertCheckers, setCertStores, setNecessaryACAttributes, setProhibitedACAttributes, setStores, setTargetCertConstraints, setTargetConstraints, setTrustedACIssuers, setUseDeltasEnabled, setValidityModel
Methods inherited from class java.security.cert.PKIXParameters
addCertPathChecker, addCertStore, getCertPathCheckers, getCertStores, getDate, getInitialPolicies, getPolicyQualifiersRejected, getSigProvider, getTargetCertConstraints, getTrustAnchors, isAnyPolicyInhibited, isExplicitPolicyRequired, isPolicyMappingInhibited, isRevocationEnabled, setAnyPolicyInhibited, setCertPathCheckers, setDate, setExplicitPolicyRequired, setInitialPolicies, setPolicyMappingInhibited, setPolicyQualifiersRejected, setRevocationEnabled, setSigProvider, setTrustAnchors, toString
-
Constructor Details
-
ExtendedPKIXBuilderParameters
public ExtendedPKIXBuilderParameters(Set trustAnchors, Selector targetConstraints) throws InvalidAlgorithmParameterException Deprecated.Creates an instance ofPKIXBuilderParameters
with the specifiedSet
of most-trusted CAs. Each element of the set is aTrustAnchor
.Note that the
Set
is copied to protect against subsequent modifications.- Parameters:
trustAnchors
- aSet
ofTrustAnchor
stargetConstraints
- aSelector
specifying the constraints on the target certificate or attribute certificate.- Throws:
InvalidAlgorithmParameterException
- iftrustAnchors
is empty.NullPointerException
- iftrustAnchors
isnull
ClassCastException
- if any of the elements oftrustAnchors
is not of typejava.security.cert.TrustAnchor
-
-
Method Details
-
getExcludedCerts
Deprecated.Excluded certificates are not used for building a certification path.The returned set is immutable.
- Returns:
- Returns the excluded certificates.
-
setExcludedCerts
Deprecated.Sets the excluded certificates which are not used for building a certification path. If theSet
isnull
an empty set is assumed.The given set is cloned to protect it against subsequent modifications.
- Parameters:
excludedCerts
- The excluded certificates to set.
-
setMaxPathLength
public void setMaxPathLength(int maxPathLength) Deprecated.Sets the maximum number of intermediate non-self-issued certificates in a certification path. The PKIXCertPathBuilder
must not build paths longer then this length.A value of 0 implies that the path can only contain a single certificate. A value of -1 does not limit the length. The default length is 5.
The basic constraints extension of a CA certificate overrides this value if smaller.
- Parameters:
maxPathLength
- the maximum number of non-self-issued intermediate certificates in the certification path- Throws:
InvalidParameterException
- ifmaxPathLength
is set to a value less than -1- See Also:
-
getMaxPathLength
public int getMaxPathLength()Deprecated.Returns the value of the maximum number of intermediate non-self-issued certificates in the certification path.- Returns:
- the maximum number of non-self-issued intermediate certificates in the certification path, or -1 if no limit exists.
- See Also:
-
setParams
Deprecated.Can alse handleExtendedPKIXBuilderParameters
andPKIXBuilderParameters
.- Overrides:
setParams
in classExtendedPKIXParameters
- Parameters:
params
- Parameters to set.- See Also:
-
clone
Deprecated.Makes a copy of thisPKIXParameters
object. Changes to the copy will not affect the original and vice versa.- Specified by:
clone
in interfaceCertPathParameters
- Overrides:
clone
in classExtendedPKIXParameters
- Returns:
- a copy of this
PKIXParameters
object
-
getInstance
Deprecated.Returns an instance ofExtendedPKIXParameters
which can be safely casted toExtendedPKIXBuilderParameters
.This method can be used to get a copy from other
PKIXBuilderParameters
,PKIXParameters
, andExtendedPKIXParameters
instances.- Parameters:
pkixParams
- The PKIX parameters to create a copy of.- Returns:
- An
ExtendedPKIXBuilderParameters
instance.
-