Class CertificateChainValidator

java.lang.Object

com.itextpdf.signatures.validation.CertificateChainValidator

public class CertificateChainValidator
extends Object

Validator class, which is expected to be used for certificates chain validation.

Field Summary

Fields

Modifier and Type	Field	Description
(package private) static final String	CERTIFICATE_CHECK
(package private) static final String	CERTIFICATE_TRUSTED
(package private) static final String	CERTIFICATE_TRUSTED_FOR_DIFFERENT_CONTEXT
private final IssuingCertificateRetriever	certificateRetriever
(package private) static final String	EXPIRED_CERTIFICATE
(package private) static final String	EXTENSION_MISSING
(package private) static final String	EXTENSIONS_CHECK
(package private) static final String	ISSUER_CANNOT_BE_VERIFIED
(package private) static final String	ISSUER_MISSING
(package private) static final String	ISSUER_RETRIEVAL_FAILED
(package private) static final String	ISSUER_VERIFICATION_FAILED
(package private) static final String	NOT_YET_VALID_CERTIFICATE
private final SignatureValidationProperties	properties
(package private) static final String	REVOCATION_VALIDATION_FAILED
private final RevocationDataValidator	revocationDataValidator
(package private) static final String	TRUSTSTORE_RETRIEVAL_FAILED
(package private) static final String	VALIDITY_CHECK
(package private) static final String	VALIDITY_PERIOD_CHECK_FAILED

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	CertificateChainValidator(ValidatorChainBuilder builder)	Create new instance of CertificateChainValidator.

Method Summary

Modifier and Type	Method	Description
private boolean	checkIfCertIsTrusted(ValidationReport result, ValidationContext context, X509Certificate certificate)
private boolean	stopValidation(ValidationReport result, ValidationContext context)
ValidationReport	validate(ValidationReport result, ValidationContext context, X509Certificate certificate, Date validationDate)	Validate given certificate using provided validation date and required extensions.
private ValidationReport	validate(ValidationReport result, ValidationContext context, X509Certificate certificate, Date validationDate, int certificateChainSize)
ValidationReport	validateCertificate(ValidationContext context, X509Certificate certificate, Date validationDate)	Validate given certificate using provided validation date and required extensions.
private void	validateChain(ValidationReport result, ValidationContext context, X509Certificate certificate, Date validationDate, int certificateChainSize)
private void	validateRequiredExtensions(ValidationReport result, ValidationContext context, X509Certificate certificate, int certificateChainSize)
private void	validateRevocationData(ValidationReport report, ValidationContext context, X509Certificate certificate, Date validationDate)
private void	validateValidityPeriod(ValidationReport result, X509Certificate certificate, Date validationDate)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CERTIFICATE_CHECK

static final String CERTIFICATE_CHECK

See Also:

• Constant Field Values

VALIDITY_CHECK

static final String VALIDITY_CHECK

See Also:

• Constant Field Values

EXTENSIONS_CHECK

static final String EXTENSIONS_CHECK

See Also:

• Constant Field Values

CERTIFICATE_TRUSTED

static final String CERTIFICATE_TRUSTED

See Also:

• Constant Field Values

CERTIFICATE_TRUSTED_FOR_DIFFERENT_CONTEXT

static final String CERTIFICATE_TRUSTED_FOR_DIFFERENT_CONTEXT

See Also:

• Constant Field Values

EXTENSION_MISSING

static final String EXTENSION_MISSING

See Also:

• Constant Field Values

ISSUER_MISSING

static final String ISSUER_MISSING

See Also:

• Constant Field Values

EXPIRED_CERTIFICATE

static final String EXPIRED_CERTIFICATE

See Also:

• Constant Field Values

NOT_YET_VALID_CERTIFICATE

static final String NOT_YET_VALID_CERTIFICATE

See Also:

• Constant Field Values

ISSUER_CANNOT_BE_VERIFIED

static final String ISSUER_CANNOT_BE_VERIFIED

See Also:

• Constant Field Values

ISSUER_VERIFICATION_FAILED

static final String ISSUER_VERIFICATION_FAILED

See Also:

• Constant Field Values

ISSUER_RETRIEVAL_FAILED

static final String ISSUER_RETRIEVAL_FAILED

See Also:

• Constant Field Values

TRUSTSTORE_RETRIEVAL_FAILED

static final String TRUSTSTORE_RETRIEVAL_FAILED

See Also:

• Constant Field Values

REVOCATION_VALIDATION_FAILED

static final String REVOCATION_VALIDATION_FAILED

See Also:

• Constant Field Values

VALIDITY_PERIOD_CHECK_FAILED

static final String VALIDITY_PERIOD_CHECK_FAILED

See Also:

• Constant Field Values

properties

private final SignatureValidationProperties properties

certificateRetriever

private final IssuingCertificateRetriever certificateRetriever

revocationDataValidator

private final RevocationDataValidator revocationDataValidator

Constructor Details

CertificateChainValidator

protected CertificateChainValidator(ValidatorChainBuilder builder)

Create new instance of CertificateChainValidator.

Parameters:

builder - See ValidatorChainBuilder

Method Details

validateCertificate

public ValidationReport validateCertificate(ValidationContext context,
 X509Certificate certificate,
 Date validationDate)

Validate given certificate using provided validation date and required extensions.

Parameters:

context - the validation context in which to validate the certificate chain

certificate - X509Certificate to be validated

validationDate - Date against which certificate is expected to be validated. Usually signing date

Returns:

ValidationReport which contains detailed validation results.

validate

public ValidationReport validate(ValidationReport result,
 ValidationContext context,
 X509Certificate certificate,
 Date validationDate)

Validate given certificate using provided validation date and required extensions. Result is added into provided report.

Parameters:

result - ValidationReport which is populated with detailed validation results

context - the context in which to perform the validation

certificate - X509Certificate to be validated

validationDate - Date against which certificate is expected to be validated. Usually signing date

Returns:

ValidationReport which contains both provided and new validation results.

validate

private ValidationReport validate(ValidationReport result,
 ValidationContext context,
 X509Certificate certificate,
 Date validationDate,
 int certificateChainSize)

checkIfCertIsTrusted

private boolean checkIfCertIsTrusted(ValidationReport result,
 ValidationContext context,
 X509Certificate certificate)

stopValidation

private boolean stopValidation(ValidationReport result,
 ValidationContext context)

validateValidityPeriod

private void validateValidityPeriod(ValidationReport result,
 X509Certificate certificate,
 Date validationDate)

validateRequiredExtensions

private void validateRequiredExtensions(ValidationReport result,
 ValidationContext context,
 X509Certificate certificate,
 int certificateChainSize)

validateRevocationData

private void validateRevocationData(ValidationReport report,
 ValidationContext context,
 X509Certificate certificate,
 Date validationDate)

validateChain

private void validateChain(ValidationReport result,
 ValidationContext context,
 X509Certificate certificate,
 Date validationDate,
 int certificateChainSize)