Package org.globus.gsi.trustmanager
Class SigningPolicyChecker
- java.lang.Object
-
- org.globus.gsi.trustmanager.SigningPolicyChecker
-
- All Implemented Interfaces:
CertificateChecker
public class SigningPolicyChecker extends java.lang.Object implements CertificateChecker
This checks to make sure the Distinguished Name in the certificate is valid according to the signing policy.
-
-
Field Summary
Fields Modifier and Type Field Description private SigningPolicyStore
policyStore
-
Constructor Summary
Constructors Constructor Description SigningPolicyChecker(SigningPolicyStore policyStore)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
invoke(java.security.cert.X509Certificate cert, GSIConstants.CertificateType certType)
Validate DN against the signing policyprivate boolean
requireSigningPolicyCheck(GSIConstants.CertificateType certType)
if a certificate is not a CA or if it is not a proxy, return true.
-
-
-
Field Detail
-
policyStore
private SigningPolicyStore policyStore
-
-
Constructor Detail
-
SigningPolicyChecker
public SigningPolicyChecker(SigningPolicyStore policyStore)
-
-
Method Detail
-
invoke
public void invoke(java.security.cert.X509Certificate cert, GSIConstants.CertificateType certType) throws java.security.cert.CertPathValidatorException
Validate DN against the signing policy- Specified by:
invoke
in interfaceCertificateChecker
- Parameters:
cert
- The certificate to check.certType
- The type of certificate to check.- Throws:
java.security.cert.CertPathValidatorException
- if the certificate is invalid according to the signing policy.
-
requireSigningPolicyCheck
private boolean requireSigningPolicyCheck(GSIConstants.CertificateType certType)
if a certificate is not a CA or if it is not a proxy, return true.- Parameters:
certType
- The type of Certificate being queried.- Returns:
- True if the CertificateType requires a Signing Policy check.
-
-