Package se.swedenconnect.sigval.cert.chain

Class AbstractPathValidator

java.lang.Object

se.swedenconnect.sigval.cert.chain.AbstractPathValidator

All Implemented Interfaces:

Runnable

Direct Known Subclasses:

CertificatePathValidator

public abstract class AbstractPathValidator
extends Object
implements Runnable

Abstract class for implementations of a certificate chain validator

This path validator is designed so that it can be used as the underlying path validator for a certificate validator that implements the inteface of CertificateValidator. This is done by 2 factors:

• Any errors encountered when doing path validation results in en exception (ExtendedCertPathValidatorException. This is an extension of CertPathValidatorException used by the interface
• The result (PathValidationResult) is an extension of the inteface result CertificateValidationResult

Editors note: This library does however not use the CertificateValidator interface as this interface requires implementation of functions where a CRL is provided as input to the validation process. Such procedure is not relevant for this path validator as it builds on the CRLCache implementation instead. To implement this interface you need the function provided in this class in addition to code that can make use of a separately provided CRL.

Author:

Martin Lindström (martin@idsec.se), Stefan Santesson (stefan@idsec.se)

Field Summary

Fields

Modifier and Type	Field	Description
protected CertificateValidityCheckerFactory	certificateValidityCheckerFactory	Provides the certificate validation checker for each instance of certificate validation
protected final CertStore	certStore
protected final List<X509Certificate>	chain
protected final CRLCache	crlCache
static final String	DEFAULT_EVENT_ID
protected final PathBuilder	pathBuilder
protected final X509Certificate	targetCert
protected final List<TrustAnchor>	trustAnchors

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractPathValidator(X509Certificate targetCert, List<X509Certificate> chain, CRLCache crlCache, PathBuilder pathBuilder, List<TrustAnchor> trustAnchors, CertStore certStore, String id, PropertyChangeListener... propertyChangeListeners)	Constructs the chain validator

Method Summary

Modifier and Type	Method	Description
void	run()	Running the validation task as Runnable task and returning result to the callback function of all property change listeners
abstract PathValidationResult	validateCertificatePath()	Validates a certificate path

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_EVENT_ID

public static final String DEFAULT_EVENT_ID

See Also:

• Constant Field Values

certificateValidityCheckerFactory

protected CertificateValidityCheckerFactory certificateValidityCheckerFactory

Provides the certificate validation checker for each instance of certificate validation

crlCache

protected final CRLCache crlCache

pathBuilder

protected final PathBuilder pathBuilder

targetCert

protected final X509Certificate targetCert

chain

protected final List<X509Certificate> chain

trustAnchors

protected final List<TrustAnchor> trustAnchors

certStore

protected final CertStore certStore

Constructor Details

AbstractPathValidator

protected AbstractPathValidator(X509Certificate targetCert,
 List<X509Certificate> chain,
 CRLCache crlCache,
 PathBuilder pathBuilder,
 List<TrustAnchor> trustAnchors,
 CertStore certStore,
 String id,
 PropertyChangeListener... propertyChangeListeners)

Constructs the chain validator

Parameters:

targetCert - the certificate being validated

chain - the supporting chain of certificates which may include the target certificate and root certificates

crlCache - CRL cache providing access to certificate revocation lists

pathBuilder - path builder used to find and verify the path to a trust anchor

trustAnchors - a list of trust anchors that must be used to terminate the validated chain

certStore - certificate store providing complementary intermediary certificates

id - the name of the process returned to registered listeners

propertyChangeListeners - listeners that are notified when the validation process is complete

Method Details

run

public void run()

Running the validation task as Runnable task and returning result to the callback function of all property change listeners

Specified by:

run in interface Runnable

validateCertificatePath

public abstract PathValidationResult validateCertificatePath()
                                                      throws ExtendedCertPathValidatorException

Validates a certificate path

Returns:

PathValidationResult

Throws:

ExtendedCertPathValidatorException - errors encountered while validation certificate path