org.globus.gsi.trustmanager
Class UnsupportedCriticalExtensionChecker

java.lang.Object
  org.globus.gsi.trustmanager.UnsupportedCriticalExtensionChecker

All Implemented Interfaces:

CertificateChecker

public class UnsupportedCriticalExtensionChecker
extends java.lang.Object
implements CertificateChecker

Checks if the certificate includes unsupported critical extensions.

Since:

1.0

Version:

${version}

Constructor Summary

UnsupportedCriticalExtensionChecker()

Method Summary

void	invoke(java.security.cert.X509Certificate cert, GSIConstants.CertificateType certType) Method that checks if there are unsupported critical extension.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UnsupportedCriticalExtensionChecker

public UnsupportedCriticalExtensionChecker()

Method Detail

invoke

public void invoke(java.security.cert.X509Certificate cert,
                   GSIConstants.CertificateType certType)
            throws java.security.cert.CertPathValidatorException

Method that checks if there are unsupported critical extension. Supported ones are only BasicConstrains, KeyUsage, Proxy Certificate (old and new)

Specified by:

invoke in interface CertificateChecker

Parameters:

cert - The certificate to validate.

certType - The type of certificate to validate.

Throws:

java.security.cert.CertPathValidatorException - If any critical extension that is not supported is in the certificate. Anything other than those listed above will trigger the exception.