Class ExtendedKeyUsageExtension

java.lang.Object

com.itextpdf.signatures.validation.extensions.CertificateExtension

com.itextpdf.signatures.validation.extensions.ExtendedKeyUsageExtension

public class ExtendedKeyUsageExtension
extends CertificateExtension

Class representing "Extended Key Usage" extension.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACTUAL
static final String	ANY_EXTENDED_KEY_USAGE_OID
static final String	CLIENT_AUTH
static final String	CODE_SIGNING
static final String	ERROR_OCCURRED_DURING_RETRIEVAL
private String	errorMessage
static final String	EXPECTED_KEY_USAGES
private final List<String>	extendedKeyUsageOids
private static final IBouncyCastleFactory	FACTORY
static final String	NO_EXTENDED_KEY_USAGES_WERE_FOUND
static final String	OCSP_SIGNING
static final String	TIME_STAMPING

Fields inherited from class CertificateExtension

EXCEPTION_OCCURRED, EXPECTED_EXTENSION_ID_AND_VALUE, EXTENSION_NOT_FOUND, FOUND_VALUE

Constructor Summary

Constructors

Constructor	Description
ExtendedKeyUsageExtension(List<String> extendedKeyUsageOids)	Create new ExtendedKeyUsageExtension instance.

Method Summary

Modifier and Type	Method	Description
private static IKeyPurposeId[]	createKeyPurposeIds(List<String> extendedKeyUsageOids)
boolean	existsInCertificate(X509Certificate certificate)	Check if this extension is present in the provided certificate.
String	getMessage()	Returns a message with extra information about the check.

Methods inherited from class CertificateExtension

equals, getExtensionOid, getExtensionValue, hashCode

Methods inherited from class Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Field Details

ANY_EXTENDED_KEY_USAGE_OID

public static final String ANY_EXTENDED_KEY_USAGE_OID

See Also:

• Constant Field Values

TIME_STAMPING

public static final String TIME_STAMPING

See Also:

• Constant Field Values

OCSP_SIGNING

public static final String OCSP_SIGNING

See Also:

• Constant Field Values

CODE_SIGNING

public static final String CODE_SIGNING

See Also:

• Constant Field Values

CLIENT_AUTH

public static final String CLIENT_AUTH

See Also:

• Constant Field Values

FACTORY

private static final IBouncyCastleFactory FACTORY

EXPECTED_KEY_USAGES

public static final String EXPECTED_KEY_USAGES

See Also:

• Constant Field Values

ACTUAL

public static final String ACTUAL

See Also:

• Constant Field Values

NO_EXTENDED_KEY_USAGES_WERE_FOUND

public static final String NO_EXTENDED_KEY_USAGES_WERE_FOUND

See Also:

• Constant Field Values

ERROR_OCCURRED_DURING_RETRIEVAL

public static final String ERROR_OCCURRED_DURING_RETRIEVAL

See Also:

• Constant Field Values

extendedKeyUsageOids

private final List<String> extendedKeyUsageOids

errorMessage

private String errorMessage

Constructor Details

ExtendedKeyUsageExtension

public ExtendedKeyUsageExtension(List<String> extendedKeyUsageOids)

Create new ExtendedKeyUsageExtension instance.

Parameters:

extendedKeyUsageOids - strings List, representing extended key usages OIDs

Method Details

existsInCertificate

public boolean existsInCertificate(X509Certificate certificate)

Check if this extension is present in the provided certificate. In case of ExtendedKeyUsageExtension, check if this extended key usage OIDs are present. Other values may be present as well.

Overrides:

existsInCertificate in class CertificateExtension

Parameters:

certificate - X509Certificate in which this extension shall be present

Returns:

true if all OIDs are present in certificate extension, false otherwise

createKeyPurposeIds

private static IKeyPurposeId[] createKeyPurposeIds(List<String> extendedKeyUsageOids)

getMessage

public String getMessage()

Description copied from class: CertificateExtension

Returns a message with extra information about the check.

Overrides:

getMessage in class CertificateExtension

Returns:

a message with extra information about the check.