java.security.cert

Class TrustAnchor


public class TrustAnchor
extends Object

An ultimately-trusted certificate to serve as the root of a certificate chain.

Constructor Summary

TrustAnchor(String caName, PublicKey caKey, byte[] nameConstraints)
Create a new trust anchor from a certificate authority's distinguished name, public key, and (optional) name constraints.
TrustAnchor(X509Certificate trustedCert, byte[] nameConstraints)
Create a new trust anchor from a certificate and (optional) name constraints.

Method Summary

String
getCAName()
Return the certificate authority's distinguished name, or null if none was specified.
PublicKey
getCAPublicKey()
Return the certificate authority's public key, or null if none was specified.
byte[]
getNameConstraints()
Return the encoded name constraints, or null if none was specified.
X509Certificate
getTrustedCert()
Return the trusted certificate, or null if none was specified.
String
toString()
Return a printable representation of this trust anchor.

Methods inherited from class java.lang.Object

clone, equals, extends Object> getClass, finalize, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TrustAnchor

public TrustAnchor(String caName,
                   PublicKey caKey,
                   byte[] nameConstraints)
Create a new trust anchor from a certificate authority's distinguished name, public key, and (optional) name constraints.

If the nameConstraints argument in non-null, it will be copied to prevent modification.


TrustAnchor

public TrustAnchor(X509Certificate trustedCert,
                   byte[] nameConstraints)
Create a new trust anchor from a certificate and (optional) name constraints.

If the nameConstraints argument in non-null, it will be copied to prevent modification.

Parameters:
trustedCert - The trusted certificate.
nameConstraints - The encoded nameConstraints.

Method Details

getCAName

public final String getCAName()
Return the certificate authority's distinguished name, or null if none was specified.
Returns:
The CA's distinguished name.

getCAPublicKey

public final PublicKey getCAPublicKey()
Return the certificate authority's public key, or null if none was specified.
Returns:
The CA's public key.

getNameConstraints

public final byte[] getNameConstraints()
Return the encoded name constraints, or null if none was specified.

The name constraints byte array is copied when this method is called to prevent modification.

Returns:
The encoded name constraints.

getTrustedCert

public final X509Certificate getTrustedCert()
Return the trusted certificate, or null if none was specified.
Returns:
The trusted certificate.

toString

public String toString()
Return a printable representation of this trust anchor.
Overrides:
toString in interface Object
Returns:
The printable representation.

TrustAnchor.java -- an ultimately-trusted certificate. Copyright (C) 2003, 2004 Free Software Foundation, Inc. This file is part of GNU Classpath. GNU Classpath is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version. GNU Classpath is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with GNU Classpath; see the file COPYING. If not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. Linking this library statically or dynamically with other modules is making a combined work based on this library. Thus, the terms and conditions of the GNU General Public License cover the whole combination. As a special exception, the copyright holders of this library give you permission to link this library with independent modules to produce an executable, regardless of the license terms of these independent modules, and to copy and distribute the resulting executable under terms of your choice, provided that you also meet, for each linked independent module, the terms and conditions of the license of that module. An independent module is a module which is not derived from or based on this library. If you modify this library, you may extend this exception to your version of the library, but you are not obligated to do so. If you do not wish to do so, delete this exception statement from your version.