Package eu.europa.esig.dss.policy

Class EtsiValidationPolicy

java.lang.Object

eu.europa.esig.dss.policy.EtsiValidationPolicy

All Implemented Interfaces:

ValidationPolicy

public class EtsiValidationPolicy
extends Object
implements ValidationPolicy

This class encapsulates the constraint file that controls the policy to be used during the validation process. It adds the functions to direct access to the file data. It is the implementation of the ETSI TS 102 853 standard.

Constructor Summary

Constructors

Constructor	Description
EtsiValidationPolicy(ConstraintsParameters policy)	Default constructor

Method Summary

Modifier and Type	Method	Description
MultiValuesRule	getAcceptablePDFAProfilesConstraint()	Returns AcceptablePDFAProfiles constraint if present in the policy, null otherwise
LevelRule	getAcceptableRevocationDataFoundConstraint(Context context, SubContext subContext)	Returns acceptable revocation data available constraint
MultiValuesRule	getAcceptedContainerTypesConstraint()	Returns AcceptedContainerTypes constraint if present in the policy, null otherwise
MultiValuesRule	getAcceptedMimeTypeContentsConstraint()	Returns AcceptedMimeTypeContents constraint if present in the policy, null otherwise
MultiValuesRule	getAcceptedZipCommentsConstraint()	Returns AcceptedZipComments constraint if present in the policy, null otherwise
LevelRule	getAllFilesSignedConstraint()	Returns AllFilesSigned constraint if present in the policy, null otherwise
LevelRule	getAnnotationChangesConstraint(Context context)	This constraint checks whether a PDF document contains annotation creation, modification or deletion modifications after the current signature's revisions
LevelRule	getArchiveTimeStampConstraint(Context context)	Indicates if the presence of unsigned property: archive-time-stamp should be checked.
LevelRule	getAtsHashIndexConstraint()	Returns timestamp AtsHashIndex constraint if present in the policy, null otherwise
LevelRule	getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint()	This constraint checks if the certificate is not expired on best-signature-time
LevelRule	getByteRangeAllDocumentConstraint(Context context)	This constraint checks if ByteRange is valid for all signatures and document timestamps within PDF NOTE: applicable only for PAdES
LevelRule	getByteRangeCollisionConstraint(Context context)	This constraint checks if ByteRange does not collide with other signature byte ranges NOTE: applicable only for PAdES
LevelRule	getByteRangeConstraint(Context context)	This constraint checks if ByteRange dictionary is valid NOTE: applicable only for PAdES
LevelRule	getCertificateAuthorityInfoAccessPresentConstraint(Context context, SubContext subContext)	Returns CertificateAuthorityInfoAccessPresent constraint if present in the policy, null otherwise
LevelRule	getCertificateCAConstraint(Context context, SubContext subContext)	Returns certificate CA constraint
MultiValuesRule	getCertificateCommonNameConstraint(Context context, SubContext subContext)	Returns CertificateCommonName constraint if present in the policy, null otherwise
MultiValuesRule	getCertificateCountryConstraint(Context context, SubContext subContext)	Returns CertificateCountry constraint if present in the policy, null otherwise
CryptographicSuite	getCertificateCryptographicConstraint(Context context, SubContext subContext)	This method creates the CryptographicSuite corresponding to the context parameter.
MultiValuesRule	getCertificateEmailConstraint(Context context, SubContext subContext)	Returns CertificateEmail constraint if present in the policy, null otherwise
MultiValuesRule	getCertificateExtendedKeyUsageConstraint(Context context, SubContext subContext)	Returns certificate extended key usage constraint
MultiValuesRule	getCertificateForbiddenExtensionsConstraint(Context context, SubContext subContext)	Returns certificate forbidden extensions constraint
MultiValuesRule	getCertificateGivenNameConstraint(Context context, SubContext subContext)	Returns CertificateGivenName constraint if present in the policy, null otherwise
LevelRule	getCertificateIssuedToLegalPersonConstraint(Context context, SubContext subContext)	Indicates if the end user certificate used in validating the signature is issued to a legal person.
LevelRule	getCertificateIssuedToNaturalPersonConstraint(Context context, SubContext subContext)	Indicates if the end user certificate used in validating the signature is issued to a natural person.
LevelRule	getCertificateIssuerNameConstraint(Context context, SubContext subContext)	Returns certificate IssuerName constraint
MultiValuesRule	getCertificateKeyUsageConstraint(Context context, SubContext subContext)	Returns certificate key usage constraint
MultiValuesRule	getCertificateLocalityConstraint(Context context, SubContext subContext)	Returns CertificateLocality constraint if present in the policy, null otherwise
LevelRule	getCertificateMaxPathLengthConstraint(Context context, SubContext subContext)	Returns certificate MaxPathLength constraint
NumericValueRule	getCertificateMinQcEuLimitValueConstraint(Context context, SubContext subContext)	Indicates the minimal allowed QcEuLimitValue transaction limit for which the end user certificate used for the signature can be used.
NumericValueRule	getCertificateMinQcEuRetentionPeriodConstraint(Context context, SubContext subContext)	Indicates the minimal allowed QC retention period for material information relevant to the use of the end user certificate used for the signature.
LevelRule	getCertificateNameConstraintsConstraint(Context context, SubContext subContext)	Returns certificate NameConstraints constraint
LevelRule	getCertificateNoRevAvailConstraint(Context context, SubContext subContext)	Returns certificate NoRevAvail constraint
LevelRule	getCertificateNotExpiredConstraint(Context context, SubContext subContext)	Returns certificate's validity range constraint
LevelRule	getCertificateNotOnHoldConstraint(Context context, SubContext subContext)	Returns certificate's not onHold constraint
LevelRule	getCertificateNotRevokedConstraint(Context context, SubContext subContext)	Returns certificate's not revoked constraint
LevelRule	getCertificateNotSelfSignedConstraint(Context context, SubContext subContext)	Returns certificate's not self-signed constraint
MultiValuesRule	getCertificateOrganizationIdentifierConstraint(Context context, SubContext subContext)	Returns CertificateOrganizationIdentifier constraint if present in the policy, null otherwise
MultiValuesRule	getCertificateOrganizationNameConstraint(Context context, SubContext subContext)	Returns CertificateOrganizationName constraint if present in the policy, null otherwise
MultiValuesRule	getCertificateOrganizationUnitConstraint(Context context, SubContext subContext)	Returns CertificateOrganizationUnit constraint if present in the policy, null otherwise
MultiValuesRule	getCertificatePolicyIdsConstraint(Context context, SubContext subContext)	Returns CertificatePolicyIds constraint if present in the policy, null otherwise
LevelRule	getCertificatePolicyQualificationIdsConstraint(Context context, SubContext subContext)	Indicates if the CertificatePolicyIds declare the certificate as qualified.
LevelRule	getCertificatePolicySupportedByQSCDIdsConstraint(Context context, SubContext subContext)	Indicates if the CertificatePolicyIds mandate the certificate as to be supported by a secure signature creation device (QSCD).
LevelRule	getCertificatePolicyTreeConstraint(Context context, SubContext subContext)	Returns certificate PolicyTree constraint
MultiValuesRule	getCertificatePS2DQcCompetentAuthorityIdConstraint(Context context, SubContext subContext)	Indicates the acceptable QC PS2D ids for the certificate used for a signature.
MultiValuesRule	getCertificatePS2DQcCompetentAuthorityNameConstraint(Context context, SubContext subContext)	Indicates the acceptable QC PS2D names for the certificate used for a signature.
MultiValuesRule	getCertificatePS2DQcTypeRolesOfPSPConstraint(Context context, SubContext subContext)	Indicates the acceptable QC PS2D roles for the certificate used for a signature.
MultiValuesRule	getCertificatePseudonymConstraint(Context context, SubContext subContext)	Returns CertificatePseudonym constraint if present in the policy, null otherwise
LevelRule	getCertificatePseudoUsageConstraint(Context context, SubContext subContext)	Returns CertificatePseudoUsage constraint if present in the policy, null otherwise
MultiValuesRule	getCertificateQcCCLegislationConstraint(Context context, SubContext subContext)	Indicates the country or set of countries under the legislation of which the certificate is issued as a qualified certificate is present.
LevelRule	getCertificateQCComplianceConstraint(Context context, SubContext subContext)	Indicates if the end user certificate used in validating the signature is QC Compliant.
ValueRule	getCertificateQcEuLimitValueCurrencyConstraint(Context context, SubContext subContext)	Indicates the allowed currency used to specify certificate's QCLimitValue statement.
MultiValuesRule	getCertificateQcEuPDSLocationConstraint(Context context, SubContext subContext)	Indicates the location or set of locations of PKI Disclosure Statements.
LevelRule	getCertificateQcSSCDConstraint(Context context, SubContext subContext)	Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).
MultiValuesRule	getCertificateQcTypeConstraint(Context context, SubContext subContext)	Indicates the certificate is claimed as a certificate of a particular type.
LevelRule	getCertificateRevocationInfoAccessPresentConstraint(Context context, SubContext subContext)	Returns CertificateRevocationInfoAccessPresent constraint if present in the policy, null otherwise
LevelRule	getCertificateSelfSignedConstraint(Context context, SubContext subContext)	Returns certificate's self-signed constraint
MultiValuesRule	getCertificateSemanticsIdentifierConstraint(Context context, SubContext subContext)	Indicates the certificate's QCStatement contains an acceptable semantics identifier.
LevelRule	getCertificateSerialNumberConstraint(Context context, SubContext subContext)	Returns CertificateSerialNumber constraint if present in the policy, null otherwise
LevelRule	getCertificateSignatureConstraint(Context context, SubContext subContext)	Returns certificate's signature constraint
MultiValuesRule	getCertificateStateConstraint(Context context, SubContext subContext)	Returns CertificateState constraint if present in the policy, null otherwise
LevelRule	getCertificateSunsetDateConstraint(Context context, SubContext subContext)	Returns certificate's sunset date constraint
MultiValuesRule	getCertificateSupportedCriticalExtensionsConstraint(Context context, SubContext subContext)	Returns certificate supported critical extensions constraint
MultiValuesRule	getCertificateSurnameConstraint(Context context, SubContext subContext)	Returns CertificateSurname constraint if present in the policy, null otherwise
MultiValuesRule	getCertificateTitleConstraint(Context context, SubContext subContext)	Returns CertificateTitle constraint if present in the policy, null otherwise
MultiValuesRule	getCertifiedRolesConstraint(Context context)	Return the mandated signer role.
MultiValuesRule	getClaimedRoleConstraint(Context context)	Indicates if the unsigned property: claimed-role should be checked.
MultiValuesRule	getCommitmentTypeIndicationConstraint(Context context)	Indicates if the signed property: commitment-type-indication should be checked.
ContainerConstraints	getContainerConstraints()	Returns the constraint used for ASiC Container validation
ValueRule	getContentHintsConstraint(Context context)	Indicates if the signed property: content-hints should be checked.
ValueRule	getContentIdentifierConstraint(Context context)	Indicates if the signed property: content-identifier should be checked.
LevelRule	getContentTimeStampConstraint(Context context)	Indicates if the signed property: content-time-stamp should be checked.
LevelRule	getContentTimeStampMessageImprintConstraint(Context context)	Indicates if the signed property: content-time-stamp message-imprint should be checked.
ValueRule	getContentTypeConstraint(Context context)	Indicates if the signed property: content-type should be checked.
LevelRule	getCounterSignatureConstraint(Context context)	Returns CounterSignature constraint if present in the policy, null otherwise
SignatureConstraints	getCounterSignatureConstraints()	Returns the constraint used for Counter Signature validation
LevelRule	getCRLNextUpdatePresentConstraint(Context context, SubContext subContext)	Returns CRL's nextUpdate present constraint
CryptographicConstraint	getCryptographic()	Returns the common constraint used for cryptographic validation
LevelRule	getDocMDPConstraint(Context context)	This constraint checks if a document contains changes after a signature, against permission rules identified within a /DocMDP dictionary
LevelRule	getDocumentTimeStampConstraint(Context context)	Indicates if the presence of unsigned property: document timestamp should be checked.
EIDAS	getEIDASConstraints()	Returns the constraint used for qualification validation
LevelRule	getEllipticCurveKeySizeConstraint(Context context)	This constraint checks whether a JWA signature has a valid elliptic curve key size
EvidenceRecordConstraints	getEvidenceRecordConstraints()	Returns the constraint used for Evidence Record validation
LevelRule	getEvidenceRecordContainerSignedAndTimestampedFilesCoveredConstraint()	Returns evidence record ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwise
CryptographicSuite	getEvidenceRecordCryptographicConstraint()	This method returns cryptographic constraints for validation of Evidence Record
LevelRule	getEvidenceRecordDataObjectExistenceConstraint()	Returns DataObjectExistence constraint if present in the policy, null otherwise
LevelRule	getEvidenceRecordDataObjectFoundConstraint()	Returns DataObjectFound constraint if present in the policy, null otherwise
LevelRule	getEvidenceRecordDataObjectGroupConstraint()	Returns DataObjectGroup constraint if present in the policy, null otherwise
LevelRule	getEvidenceRecordDataObjectIntactConstraint()	Returns DataObjectIntact constraint if present in the policy, null otherwise
LevelRule	getEvidenceRecordHashTreeRenewalConstraint()	Returns HashTreeRenewal constraint if present in the policy, null otherwise
LevelRule	getEvidenceRecordSignedFilesCoveredConstraint()	Returns SignedFilesCovered constraint if present in the policy, null otherwise
LevelRule	getEvidenceRecordValidConstraint()	Returns whether the evidence record is valid (passed a complete evidence record validation process).
LevelRule	getFieldMDPConstraint(Context context)	This constraint checks if a document contains changes after a signature, against permission rules identified within a /FieldMDP dictionary
LevelRule	getFilenameAdherenceConstraint()	Returns FilenameAdherence constraint if present in the policy, null otherwise
LevelRule	getFormFillChangesConstraint(Context context)	This constraint checks whether a PDF document contains form fill or signing modifications after the current signature's revisions
LevelRule	getFullScopeConstraint()	Returns FullScope constraint if present in the policy, null otherwise
LevelRule	getKeyIdentifierMatch(Context context)	Indicates if the value of 'kid' (key identifier) header parameter matches the signing-certificate used to create the signature
LevelRule	getKeyIdentifierPresent(Context context)	Indicates if the 'kid' (key identifier) header parameter is present within the protected header of the signature
LevelRule	getLTALevelTimeStampConstraint(Context context)	Indicates if the presence of unsigned property: archive-time-stamp or document timestamp covering the validation data If LTALevelTimeStamp element is absent within the constraint file then null is returned.
LevelRule	getManifestEntryNameMatchConstraint(Context context)	Indicates if names of all matching documents match to the manifest entry names
LevelRule	getManifestEntryObjectExistenceConstraint(Context context)	Indicates if the manifested document is found
LevelRule	getManifestEntryObjectGroupConstraint(Context context)	Indicates if all manifest entries have been found
LevelRule	getManifestEntryObjectIntactConstraint(Context context)	Indicates if the manifested document is intact
LevelRule	getManifestFilePresentConstraint()	Returns ManifestFilePresent constraint if present in the policy, null otherwise
LevelRule	getMessageDigestOrSignedPropertiesConstraint(Context context)	Indicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked.
LevelRule	getMimeTypeFilePresentConstraint()	Returns MimeTypeFilePresent constraint if present in the policy, null otherwise
LevelRule	getOCSPNextUpdatePresentConstraint(Context context, SubContext subContext)	Returns OCSP's nextUpdate present constraint
LevelRule	getOCSPResponseCertHashMatchConstraint()	The method returns OCSPCertHashMatch constraint
LevelRule	getOCSPResponseCertHashPresentConstraint()	The method returns OCSPCertHashPresent constraint
LevelRule	getOCSPResponseResponderIdMatchConstraint()	The method returns OCSPResponderIdMatch constraint
LevelRule	getPDFACompliantConstraint()	Returns PDFACompliant constraint if present in the policy, null otherwise
PDFAConstraints	getPDFAConstraints()	Returns the constraint used for ASiC Container validation
LevelRule	getPdfAnnotationOverlapConstraint(Context context)	Indicates if a PDF annotation overlapping check should be proceeded.
LevelRule	getPdfPageDifferenceConstraint(Context context)	Indicates if a PDF page difference check should be proceeded.
LevelRule	getPdfSignatureDictionaryConstraint(Context context)	This constraint checks if signature dictionary is consistent across PDF revisions.
LevelRule	getPdfVisualDifferenceConstraint(Context context)	Indicates if a PDF visual difference check should be proceeded.
String	getPolicyDescription()	Returns the policy description.
String	getPolicyName()	Returns the name of the policy.
LevelRule	getProspectiveCertificateChainConstraint(Context context)	This constraint requests the presence of the trust anchor in the certificate chain.
LevelRule	getReferenceDataExistenceConstraint(Context context)	Indicates if the referenced data is found
LevelRule	getReferenceDataIntactConstraint(Context context)	Indicates if the referenced data is intact
LevelRule	getReferenceDataNameMatchConstraint(Context context)	Indicates if the referenced document names match the manifest entry references
LevelRule	getReferencesToAllCertificateChainPresentConstraint(Context context)	Indicates if the whole certificate chain is covered by the Signing Certificate attribute.
LevelRule	getRevocationAfterCertificateIssuanceConstraint()	The method returns RevocationIssuerKnowsCertificate constraint
RevocationConstraints	getRevocationConstraints()	Returns the constraint used for Revocation validation
LevelRule	getRevocationDataAvailableConstraint(Context context, SubContext subContext)	Returns revocation data available constraint
CertificateApplicabilityRule	getRevocationDataSkipConstraint(Context context, SubContext subContext)	Returns RevocationDataSkip constraint if present in the policy, null otherwise
DurationRule	getRevocationFreshnessConstraint(Context context, SubContext subContext)	Returns revocation data's freshness constraint
LevelRule	getRevocationFreshnessNextUpdateConstraint(Context context, SubContext subContext)	Returns revocation data's freshness for nextUpdate check constraint
LevelRule	getRevocationHasInformationAboutCertificateConstraint()	The method returns RevocationIssuerHasInformationAboutCertificate constraint
LevelRule	getRevocationIssuerKnownConstraint()	The method returns RevocationIssuerKnown constraint
LevelRule	getRevocationIssuerNotExpiredConstraint(Context context, SubContext subContext)	Returns revocation issuer's validity range constraint
LevelRule	getRevocationIssuerValidAtProductionTimeConstraint()	The method returns RevocationIssuerValidAtProductionTime constraint
LevelRule	getRevocationTimeAgainstBestSignatureDurationRule()	Returns RevocationTimeAgainstBestSignatureTime constraint if present in the policy, null otherwise
LevelRule	getSelfIssuedOCSPConstraint()	The method returns SelfIssuedOCSP constraint
LevelRule	getSigFieldLockConstraint(Context context)	This constraint checks if a document contains changes after a signature, against permission rules identified within a /SigFieldLock dictionary
SignatureConstraints	getSignatureConstraints()	Returns the constraint used for Signature validation
CryptographicSuite	getSignatureCryptographicConstraint(Context context)	This method creates the CryptographicSuite corresponding to the context parameter.
LevelRule	getSignatureDuplicatedConstraint(Context context)	Indicates if the signature is not ambiguous
MultiValuesRule	getSignatureFormatConstraint(Context context)	Returns SignatureFormat constraint if present in the policy, null otherwise
LevelRule	getSignatureIntactConstraint(Context context)	Indicates if the signature is intact
MultiValuesRule	getSignaturePolicyConstraint(Context context)	Indicates if the signature policy should be checked.
LevelRule	getSignaturePolicyIdentifiedConstraint(Context context)	Indicates if the signature policy validation should be processed.
LevelRule	getSignaturePolicyPolicyHashValid(Context context)	Indicates if digest present in a SignaturePolicyIdentifier shall match to the extracted policy content
LevelRule	getSignaturePolicyStorePresentConstraint(Context context)	Indicates if a SignaturePolicyStore unsigned attribute, containing a used policy binaries, presence shall be checked
LevelRule	getSignatureTimeStampConstraint(Context context)	Indicates if the presence of unsigned property: signature-time-stamp should be checked.
LevelRule	getSignedFilesPresentConstraint()	Returns SignedFilesPresent constraint if present in the policy, null otherwise
LevelRule	getSignerInformationStoreConstraint(Context context)	This constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdES
LevelRule	getSignerLocationConstraint(Context context)	Indicates if the signed property: signer-location should be checked.
LevelRule	getSigningCertificateAttributePresentConstraint(Context context)	Indicates if the signing certificate attribute is present
LevelRule	getSigningCertificateDigestAlgorithmConstraint(Context context)	Checks if a used DigestAlgorithm in signing-certificate-reference creation matches the corresponding cryptographic constraint
LevelRule	getSigningCertificateDigestValueMatchConstraint(Context context)	Indicates if the signing certificate reference's digest value matches
LevelRule	getSigningCertificateDigestValuePresentConstraint(Context context)	Indicates if the signing certificate reference's digest value is present
LevelRule	getSigningCertificateIssuerSerialMatchConstraint(Context context)	Indicates if the signing certificate reference's issuer serial matches
LevelRule	getSigningCertificateRecognitionConstraint(Context context)	Indicates if signing-certificate has been identified.
LevelRule	getSigningCertificateRefersCertificateChainConstraint(Context context)	Indicates if the Signing Certificate attribute should be checked against the certificate chain.
LevelRule	getSigningDurationRule(Context context)	Indicates if the signed property: signing-time should be checked.
LevelRule	getStructuralValidationConstraint(Context context)	Indicates if the structural validation should be checked.
LevelRule	getThisUpdatePresentConstraint()	The method returns ThisUpdatePresent constraint
LevelRule	getTimestampCoherenceConstraint()	This constraint checks if the timestamp order is coherent
TimestampConstraints	getTimestampConstraints()	Returns the constraint used for Timestamp validation
LevelRule	getTimestampContainerSignedAndTimestampedFilesCoveredConstraint()	Returns timestamp ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwise
DurationRule	getTimestampDelayConstraint()	Returns TimestampDelay constraint if present in the policy, null otherwise
LevelRule	getTimestampTSAGeneralNameContentMatch()	Indicates if the timestamp's TSTInfo.tsa field's value matches the timestamp's issuer distinguishing name when present
LevelRule	getTimestampTSAGeneralNameOrderMatch()	Indicates if the timestamp's TSTInfo.tsa field's value and order match the timestamp's issuer distinguishing name when present
LevelRule	getTimestampTSAGeneralNamePresent()	Indicates if the timestamp's TSTInfo.tsa field is present
LevelRule	getTimestampValidConstraint()	Returns whether the time-stamp is valid (passed either basic signature validation process or past signature validation).
LevelRule	getTLevelTimeStampConstraint(Context context)	Indicates if the presence of unsigned property: signature-time-stamp or document timestamp If TLevelTimeStamp element is absent within the constraint file then null is returned.
DurationRule	getTLFreshnessConstraint()	Returns TLFreshness constraint if present in the policy, null otherwise
LevelRule	getTLNotExpiredConstraint()	Returns TLNotExpired constraint if present in the policy, null otherwise
LevelRule	getTLStructureConstraint()	Returns TLStructure constraint if present in the policy, null otherwise
MultiValuesRule	getTLVersionConstraint()	Returns TLVersion constraint if present in the policy, null otherwise
LevelRule	getTLWellSignedConstraint()	Returns TLWellSigned constraint if present in the policy, null otherwise
MultiValuesRule	getTrustServiceStatusConstraint(Context context)	Returns trusted service status constraint
MultiValuesRule	getTrustServiceTypeIdentifierConstraint(Context context)	Returns trusted service type identifier constraint
LevelRule	getUndefinedChangesConstraint(Context context)	This constraint checks whether a PDF document contains undefined object modifications after the current signature's revisions
LevelRule	getUnicitySigningCertificateAttributeConstraint(Context context)	Indicates if the signing certificate is not ambiguously determines
LevelRule	getUnknownStatusConstraint()	The method returns UnknownStatus constraint
LevelRule	getValidationDataRefsOnlyTimeStampConstraint(Context context)	Indicates if the presence of unsigned property: validation data references only timestamp should be checked.
LevelRule	getValidationDataTimeStampConstraint(Context context)	Indicates if the presence of unsigned property: validation data timestamp should be checked.
ValidationModel	getValidationModel()	Returns the used validation model (default is SHELL).
LevelRule	getZipCommentPresentConstraint()	Returns ZipCommentPresent constraint if present in the policy, null otherwise
boolean	isEIDASConstraintPresent()	Returns if EIDAS constraints present (qualification check shall be performed)
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

EtsiValidationPolicy

public EtsiValidationPolicy(ConstraintsParameters policy)

Default constructor

Parameters:

policy - ConstraintsParameters

Method Details

getSignaturePolicyConstraint

public MultiValuesRule getSignaturePolicyConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signature policy should be checked. If AcceptablePolicies element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.

Specified by:

getSignaturePolicyConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SigningTime element is present in the constraint file, null otherwise.

getSignaturePolicyIdentifiedConstraint

public LevelRule getSignaturePolicyIdentifiedConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signature policy validation should be processed. If SignaturePolicyIdentifier found, but not relevant SignaturePolicy is retrieved, the check fails.

Specified by:

getSignaturePolicyIdentifiedConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SignaturePolicy shall be identified

getSignaturePolicyStorePresentConstraint

public LevelRule getSignaturePolicyStorePresentConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if a SignaturePolicyStore unsigned attribute, containing a used policy binaries, presence shall be checked

Specified by:

getSignaturePolicyStorePresentConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SignaturePolicyStore presence shall be checked

getSignaturePolicyPolicyHashValid

public LevelRule getSignaturePolicyPolicyHashValid(Context context)

Description copied from interface: ValidationPolicy

Indicates if digest present in a SignaturePolicyIdentifier shall match to the extracted policy content

Specified by:

getSignaturePolicyPolicyHashValid in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SignaturePolicyIdentifier digest shall match

getSignatureFormatConstraint

public MultiValuesRule getSignatureFormatConstraint(Context context)

Description copied from interface: ValidationPolicy

Returns SignatureFormat constraint if present in the policy, null otherwise

Specified by:

getSignatureFormatConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

MultiValuesRule if SignatureFormat element is present in the constraint file, null otherwise.

getSignerInformationStoreConstraint

public LevelRule getSignerInformationStoreConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdES

Specified by:

getSignerInformationStoreConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SignerInformationStore element for a given context element is present in the constraint file, null otherwise.

getByteRangeConstraint

public LevelRule getByteRangeConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if ByteRange dictionary is valid NOTE: applicable only for PAdES

Specified by:

getByteRangeConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ByteRange element for a given context element is present in the constraint file, null otherwise.

getByteRangeCollisionConstraint

public LevelRule getByteRangeCollisionConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if ByteRange does not collide with other signature byte ranges NOTE: applicable only for PAdES

Specified by:

getByteRangeCollisionConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ByteRangeCollision element for a given context element is present in the constraint file, null otherwise.

getByteRangeAllDocumentConstraint

public LevelRule getByteRangeAllDocumentConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if ByteRange is valid for all signatures and document timestamps within PDF NOTE: applicable only for PAdES

Specified by:

getByteRangeAllDocumentConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ByteRangeAllDocument element for a given context element is present in the constraint file, null otherwise.

getPdfSignatureDictionaryConstraint

public LevelRule getPdfSignatureDictionaryConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if signature dictionary is consistent across PDF revisions. NOTE: applicable only for PAdES

Specified by:

getPdfSignatureDictionaryConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if PdfSignatureDictionary element for a given context element is present in the constraint file, null otherwise.

getPdfPageDifferenceConstraint

public LevelRule getPdfPageDifferenceConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if a PDF page difference check should be proceeded. If PdfPageDifference element is absent within the constraint file then null is returned.

Specified by:

getPdfPageDifferenceConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if PdfPageDifference element is present in the constraint file, null otherwise.

getPdfAnnotationOverlapConstraint

public LevelRule getPdfAnnotationOverlapConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if a PDF annotation overlapping check should be proceeded. If PdfAnnotationOverlap element is absent within the constraint file then null is returned.

Specified by:

getPdfAnnotationOverlapConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if PdfAnnotationOverlap element is present in the constraint file, null otherwise.

getPdfVisualDifferenceConstraint

public LevelRule getPdfVisualDifferenceConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if a PDF visual difference check should be proceeded. If PdfVisualDifference element is absent within the constraint file then null is returned.

Specified by:

getPdfVisualDifferenceConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if PdfVisualDifference element is present in the constraint file, null otherwise.

getDocMDPConstraint

public LevelRule getDocMDPConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if a document contains changes after a signature, against permission rules identified within a /DocMDP dictionary

Specified by:

getDocMDPConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if DocMDP element is present in the constraint file, null otherwise.

getFieldMDPConstraint

public LevelRule getFieldMDPConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if a document contains changes after a signature, against permission rules identified within a /FieldMDP dictionary

Specified by:

getFieldMDPConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if FieldMDP element is present in the constraint file, null otherwise.

getSigFieldLockConstraint

public LevelRule getSigFieldLockConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks if a document contains changes after a signature, against permission rules identified within a /SigFieldLock dictionary

Specified by:

getSigFieldLockConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SigFieldLock element is present in the constraint file, null otherwise.

getFormFillChangesConstraint

public LevelRule getFormFillChangesConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks whether a PDF document contains form fill or signing modifications after the current signature's revisions

Specified by:

getFormFillChangesConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if FormFillChanges element is present in the constraint file, null otherwise.

getAnnotationChangesConstraint

public LevelRule getAnnotationChangesConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks whether a PDF document contains annotation creation, modification or deletion modifications after the current signature's revisions

Specified by:

getAnnotationChangesConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if AnnotationChanges element is present in the constraint file, null otherwise.

getUndefinedChangesConstraint

public LevelRule getUndefinedChangesConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks whether a PDF document contains undefined object modifications after the current signature's revisions

Specified by:

getUndefinedChangesConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if UndefinedChanges element is present in the constraint file, null otherwise.

getStructuralValidationConstraint

public LevelRule getStructuralValidationConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the structural validation should be checked. If StructuralValidation element is absent within the constraint file then null is returned.

Specified by:

getStructuralValidationConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if StructuralValidation element is present in the constraint file, null otherwise.

getSigningCertificateRefersCertificateChainConstraint

public LevelRule getSigningCertificateRefersCertificateChainConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the Signing Certificate attribute should be checked against the certificate chain. If SigningCertificateRefersCertificateChain element is absent within the constraint file then null is returned.

Specified by:

getSigningCertificateRefersCertificateChainConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SigningCertificateRefersCertificateChain element is present in the constraint file, null otherwise.

getReferencesToAllCertificateChainPresentConstraint

public LevelRule getReferencesToAllCertificateChainPresentConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the whole certificate chain is covered by the Signing Certificate attribute. If ReferencesToAllCertificateChainPresent element is absent within the constraint file then null is returned.

Specified by:

getReferencesToAllCertificateChainPresentConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ReferencesToAllCertificateChainPresent element is present in the constraint file, null otherwise.

getSigningCertificateDigestAlgorithmConstraint

public LevelRule getSigningCertificateDigestAlgorithmConstraint(Context context)

Description copied from interface: ValidationPolicy

Checks if a used DigestAlgorithm in signing-certificate-reference creation matches the corresponding cryptographic constraint

Specified by:

getSigningCertificateDigestAlgorithmConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SigningCertificateDigestAlgorithm for a given context element is present in the constraint file, null otherwise.

getSigningDurationRule

public LevelRule getSigningDurationRule(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: signing-time should be checked. If SigningTime element is absent within the constraint file then null is returned.

Specified by:

getSigningDurationRule in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SigningTime element is present in the constraint file, null otherwise.

getContentTypeConstraint

public ValueRule getContentTypeConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: content-type should be checked. If ContentType element is absent within the constraint file then null is returned.

Specified by:

getContentTypeConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

ValueRule if ContentType element is present in the constraint file, null otherwise.

getCounterSignatureConstraint

public LevelRule getCounterSignatureConstraint(Context context)

Description copied from interface: ValidationPolicy

Returns CounterSignature constraint if present in the policy, null otherwise

Specified by:

getCounterSignatureConstraint in interface ValidationPolicy

Parameters:

context - ContextDiagnosticDataFacade

Returns:

LevelRule if CounterSignature element is present in the constraint file, null otherwise.

getSignatureTimeStampConstraint

public LevelRule getSignatureTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the presence of unsigned property: signature-time-stamp should be checked. If SignatureTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getSignatureTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SignatureTimeStamp element is present in the constraint file, null otherwise.

getValidationDataTimeStampConstraint

public LevelRule getValidationDataTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the presence of unsigned property: validation data timestamp should be checked. If ValidationDataTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getValidationDataTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ValidationDataTimeStamp element is present in the constraint file, null otherwise.

getValidationDataRefsOnlyTimeStampConstraint

public LevelRule getValidationDataRefsOnlyTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the presence of unsigned property: validation data references only timestamp should be checked. If ValidationDataRefsOnlyTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getValidationDataRefsOnlyTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ValidationDataRefsOnlyTimeStamp element is present in the constraint file, null otherwise.

getArchiveTimeStampConstraint

public LevelRule getArchiveTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the presence of unsigned property: archive-time-stamp should be checked. If ArchiveTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getArchiveTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ArchiveTimeStamp element is present in the constraint file, null otherwise.

getDocumentTimeStampConstraint

public LevelRule getDocumentTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the presence of unsigned property: document timestamp should be checked. If DocumentTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getDocumentTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if DocumentTimeStamp element is present in the constraint file, null otherwise.

getTLevelTimeStampConstraint

public LevelRule getTLevelTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the presence of unsigned property: signature-time-stamp or document timestamp If TLevelTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getTLevelTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if TLevelTimeStamp element is present in the constraint file, null otherwise.

getLTALevelTimeStampConstraint

public LevelRule getLTALevelTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the presence of unsigned property: archive-time-stamp or document timestamp covering the validation data If LTALevelTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getLTALevelTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if LTALevelTimeStamp element is present in the constraint file, null otherwise.

getContentHintsConstraint

public ValueRule getContentHintsConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: content-hints should be checked. If ContentHints element is absent within the constraint file then null is returned.

Specified by:

getContentHintsConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

ValueRule if ContentHints element is present in the constraint file, null otherwise.

getContentIdentifierConstraint

public ValueRule getContentIdentifierConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: content-identifier should be checked. If ContentIdentifier element is absent within the constraint file then null is returned.

Specified by:

getContentIdentifierConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

ValueRule if ContentIdentifier element is present in the constraint file, null otherwise.

getMessageDigestOrSignedPropertiesConstraint

public LevelRule getMessageDigestOrSignedPropertiesConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked. If the relative element is absent within the constraint file then null is returned.

Specified by:

getMessageDigestOrSignedPropertiesConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if message-digests/SignedProperties element is present in the constraint file, null otherwise.

getEllipticCurveKeySizeConstraint

public LevelRule getEllipticCurveKeySizeConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint checks whether a JWA signature has a valid elliptic curve key size

Specified by:

getEllipticCurveKeySizeConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if EllipticCurveKeySize element is present in the constraint file, null otherwise.

getCommitmentTypeIndicationConstraint

public MultiValuesRule getCommitmentTypeIndicationConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: commitment-type-indication should be checked. If CommitmentTypeIndication element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.

Specified by:

getCommitmentTypeIndicationConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

MultiValuesRule if CommitmentTypeIndication element is present in the constraint file, null otherwise.

getSignerLocationConstraint

public LevelRule getSignerLocationConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: signer-location should be checked. If SignerLocation element is absent within the constraint file then null is returned.

Specified by:

getSignerLocationConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SignerLocation element is present in the constraint file, null otherwise.

getClaimedRoleConstraint

public MultiValuesRule getClaimedRoleConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the unsigned property: claimed-role should be checked. If ClaimedRoles element is absent within the constraint file then null is returned.

Specified by:

getClaimedRoleConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

MultiValuesRule if ClaimedRoles element is present in the constraint file, null otherwise.

getCertifiedRolesConstraint

public MultiValuesRule getCertifiedRolesConstraint(Context context)

Description copied from interface: ValidationPolicy

Return the mandated signer role.

Specified by:

getCertifiedRolesConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

MultiValuesRule

getPolicyName

public String getPolicyName()

Description copied from interface: ValidationPolicy

Returns the name of the policy.

Specified by:

getPolicyName in interface ValidationPolicy

Returns:

String

getPolicyDescription

public String getPolicyDescription()

Description copied from interface: ValidationPolicy

Returns the policy description.

Specified by:

getPolicyDescription in interface ValidationPolicy

Returns:

String

getSignatureCryptographicConstraint

public CryptographicSuite getSignatureCryptographicConstraint(Context context)

Description copied from interface: ValidationPolicy

This method creates the CryptographicSuite corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.

Specified by:

getSignatureCryptographicConstraint in interface ValidationPolicy

Parameters:

context - The context of the signature cryptographic constraints: MainSignature, Timestamp, Revocation

Returns:

CryptographicSuite if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.

getCertificateCryptographicConstraint

public CryptographicSuite getCertificateCryptographicConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

This method creates the CryptographicSuite corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.

Specified by:

getCertificateCryptographicConstraint in interface ValidationPolicy

Parameters:

context - The context of the signature cryptographic constraints: MainSignature, Timestamp, Revocation

subContext - the sub context of the signature cryptographic constraints: EMPTY (signature itself), SigningCertificate, CACertificate

Returns:

CryptographicSuite if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.

getCertificateCAConstraint

public LevelRule getCertificateCAConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate CA constraint

Specified by:

getCertificateCAConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if CA for a given context element is present in the constraint file, null otherwise.

getCertificateIssuerNameConstraint

public LevelRule getCertificateIssuerNameConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate IssuerName constraint

Specified by:

getCertificateIssuerNameConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if IssuerName for a given context element is present in the constraint file, null otherwise.

getCertificateMaxPathLengthConstraint

public LevelRule getCertificateMaxPathLengthConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate MaxPathLength constraint

Specified by:

getCertificateMaxPathLengthConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if MaxPathLength for a given context element is present in the constraint file, null otherwise.

getCertificateKeyUsageConstraint

public MultiValuesRule getCertificateKeyUsageConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate key usage constraint

Specified by:

getCertificateKeyUsageConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if key-usage for a given context element is present in the constraint file, null otherwise.

getCertificateExtendedKeyUsageConstraint

public MultiValuesRule getCertificateExtendedKeyUsageConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate extended key usage constraint

Specified by:

getCertificateExtendedKeyUsageConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if extended key-usage for a given context element is present in the constraint file, null otherwise.

getCertificatePolicyTreeConstraint

public LevelRule getCertificatePolicyTreeConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate PolicyTree constraint

Specified by:

getCertificatePolicyTreeConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if PolicyTree for a given context element is present in the constraint file, null otherwise.

getCertificateNameConstraintsConstraint

public LevelRule getCertificateNameConstraintsConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate NameConstraints constraint

Specified by:

getCertificateNameConstraintsConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if NameConstraints for a given context element is present in the constraint file, null otherwise.

getCertificateNoRevAvailConstraint

public LevelRule getCertificateNoRevAvailConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate NoRevAvail constraint

Specified by:

getCertificateNoRevAvailConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if NoRevAvail for a given context element is present in the constraint file, null otherwise.

getCertificateSupportedCriticalExtensionsConstraint

public MultiValuesRule getCertificateSupportedCriticalExtensionsConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate supported critical extensions constraint

Specified by:

getCertificateSupportedCriticalExtensionsConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if SupportedCriticalExtensions constraint for a given context element is present in the constraint file,null otherwise.

getCertificateForbiddenExtensionsConstraint

public MultiValuesRule getCertificateForbiddenExtensionsConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate forbidden extensions constraint

Specified by:

getCertificateForbiddenExtensionsConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if ForbiddenExtensions constraint for a given context element is present in the constraint file,null otherwise.

getCertificateSurnameConstraint

public MultiValuesRule getCertificateSurnameConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateSurname constraint if present in the policy, null otherwise

Specified by:

getCertificateSurnameConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateSurname element is present in the constraint file, null otherwise.

getCertificateGivenNameConstraint

public MultiValuesRule getCertificateGivenNameConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateGivenName constraint if present in the policy, null otherwise

Specified by:

getCertificateGivenNameConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateGivenName element is present in the constraint file, null otherwise.

getCertificateCommonNameConstraint

public MultiValuesRule getCertificateCommonNameConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateCommonName constraint if present in the policy, null otherwise

Specified by:

getCertificateCommonNameConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateCommonName element is present in the constraint file, null otherwise.

getCertificatePseudonymConstraint

public MultiValuesRule getCertificatePseudonymConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificatePseudonym constraint if present in the policy, null otherwise

Specified by:

getCertificatePseudonymConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificatePseudonym element is present in the constraint file, null otherwise.

getCertificateTitleConstraint

public MultiValuesRule getCertificateTitleConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateTitle constraint if present in the policy, null otherwise

Specified by:

getCertificateTitleConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateTitle element is present in the constraint file, null otherwise.

getCertificateEmailConstraint

public MultiValuesRule getCertificateEmailConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateEmail constraint if present in the policy, null otherwise

Specified by:

getCertificateEmailConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateEmail element is present in the constraint file, null otherwise.

getCertificateCountryConstraint

public MultiValuesRule getCertificateCountryConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateCountry constraint if present in the policy, null otherwise

Specified by:

getCertificateCountryConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateCountry element is present in the constraint file, null otherwise.

getCertificateLocalityConstraint

public MultiValuesRule getCertificateLocalityConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateLocality constraint if present in the policy, null otherwise

Specified by:

getCertificateLocalityConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateLocality element is present in the constraint file, null otherwise.

getCertificateStateConstraint

public MultiValuesRule getCertificateStateConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateState constraint if present in the policy, null otherwise

Specified by:

getCertificateStateConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateState element is present in the constraint file, null otherwise.

getCertificateOrganizationIdentifierConstraint

public MultiValuesRule getCertificateOrganizationIdentifierConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateOrganizationIdentifier constraint if present in the policy, null otherwise

Specified by:

getCertificateOrganizationIdentifierConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateOrganizationIdentifier element is present in the constraint file, null otherwise.

getCertificateOrganizationNameConstraint

public MultiValuesRule getCertificateOrganizationNameConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateOrganizationName constraint if present in the policy, null otherwise

Specified by:

getCertificateOrganizationNameConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateOrganizationName element is present in the constraint file, null otherwise.

getCertificateOrganizationUnitConstraint

public MultiValuesRule getCertificateOrganizationUnitConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateOrganizationUnit constraint if present in the policy, null otherwise

Specified by:

getCertificateOrganizationUnitConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificateOrganizationUnit element is present in the constraint file, null otherwise.

getCertificatePseudoUsageConstraint

public LevelRule getCertificatePseudoUsageConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificatePseudoUsage constraint if present in the policy, null otherwise

Specified by:

getCertificatePseudoUsageConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if CertificatePseudoUsage element is present in the constraint file, null otherwise.

getCertificateSerialNumberConstraint

public LevelRule getCertificateSerialNumberConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateSerialNumber constraint if present in the policy, null otherwise

Specified by:

getCertificateSerialNumberConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if CertificateSerialNumber element is present in the constraint file, null otherwise.

getCertificateNotExpiredConstraint

public LevelRule getCertificateNotExpiredConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate's validity range constraint

Specified by:

getCertificateNotExpiredConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if NotExpired constraint for a given certificate context is present in the constraint file, null otherwise.

getCertificateSunsetDateConstraint

public LevelRule getCertificateSunsetDateConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate's sunset date constraint

Specified by:

getCertificateSunsetDateConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if SunsetDate constraint for a given certificate context is present in the constraint file, null otherwise.

getProspectiveCertificateChainConstraint

public LevelRule getProspectiveCertificateChainConstraint(Context context)

Description copied from interface: ValidationPolicy

This constraint requests the presence of the trust anchor in the certificate chain.

Specified by:

getProspectiveCertificateChainConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ProspectiveCertificateChain element for a given context element is present in the constraint file, null otherwise.

getCertificateAuthorityInfoAccessPresentConstraint

public LevelRule getCertificateAuthorityInfoAccessPresentConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateAuthorityInfoAccessPresent constraint if present in the policy, null otherwise

Specified by:

getCertificateAuthorityInfoAccessPresentConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if CertificateAuthorityInfoAccessPresent element is present in the constraint file, null otherwise.

getRevocationDataSkipConstraint

public CertificateApplicabilityRule getRevocationDataSkipConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns RevocationDataSkip constraint if present in the policy, null otherwise

Specified by:

getRevocationDataSkipConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if RevocationDataSkip element is present in the constraint file, null otherwise.

getCertificateRevocationInfoAccessPresentConstraint

public LevelRule getCertificateRevocationInfoAccessPresentConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificateRevocationInfoAccessPresent constraint if present in the policy, null otherwise

Specified by:

getCertificateRevocationInfoAccessPresentConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if CertificateRevocationInfoAccessPresent element is present in the constraint file, null otherwise.

getCertificateSignatureConstraint

public LevelRule getCertificateSignatureConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate's signature constraint

Specified by:

getCertificateSignatureConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if Signature for a given context element is present in the constraint file, null otherwise.

getUnknownStatusConstraint

public LevelRule getUnknownStatusConstraint()

Description copied from interface: ValidationPolicy

The method returns UnknownStatus constraint

Specified by:

getUnknownStatusConstraint in interface ValidationPolicy

Returns:

LevelRule

getThisUpdatePresentConstraint

public LevelRule getThisUpdatePresentConstraint()

Description copied from interface: ValidationPolicy

The method returns ThisUpdatePresent constraint

Specified by:

getThisUpdatePresentConstraint in interface ValidationPolicy

Returns:

LevelRule

getRevocationIssuerKnownConstraint

public LevelRule getRevocationIssuerKnownConstraint()

Description copied from interface: ValidationPolicy

The method returns RevocationIssuerKnown constraint

Specified by:

getRevocationIssuerKnownConstraint in interface ValidationPolicy

Returns:

LevelRule

getRevocationIssuerValidAtProductionTimeConstraint

public LevelRule getRevocationIssuerValidAtProductionTimeConstraint()

Description copied from interface: ValidationPolicy

The method returns RevocationIssuerValidAtProductionTime constraint

Specified by:

getRevocationIssuerValidAtProductionTimeConstraint in interface ValidationPolicy

Returns:

LevelRule

getRevocationAfterCertificateIssuanceConstraint

public LevelRule getRevocationAfterCertificateIssuanceConstraint()

Description copied from interface: ValidationPolicy

The method returns RevocationIssuerKnowsCertificate constraint

Specified by:

getRevocationAfterCertificateIssuanceConstraint in interface ValidationPolicy

Returns:

LevelRule

getRevocationHasInformationAboutCertificateConstraint

public LevelRule getRevocationHasInformationAboutCertificateConstraint()

Description copied from interface: ValidationPolicy

The method returns RevocationIssuerHasInformationAboutCertificate constraint

Specified by:

getRevocationHasInformationAboutCertificateConstraint in interface ValidationPolicy

Returns:

LevelRule

getOCSPResponseResponderIdMatchConstraint

public LevelRule getOCSPResponseResponderIdMatchConstraint()

Description copied from interface: ValidationPolicy

The method returns OCSPResponderIdMatch constraint

Specified by:

getOCSPResponseResponderIdMatchConstraint in interface ValidationPolicy

Returns:

LevelRule

getOCSPResponseCertHashPresentConstraint

public LevelRule getOCSPResponseCertHashPresentConstraint()

Description copied from interface: ValidationPolicy

The method returns OCSPCertHashPresent constraint

Specified by:

getOCSPResponseCertHashPresentConstraint in interface ValidationPolicy

Returns:

LevelRule

getOCSPResponseCertHashMatchConstraint

public LevelRule getOCSPResponseCertHashMatchConstraint()

Description copied from interface: ValidationPolicy

The method returns OCSPCertHashMatch constraint

Specified by:

getOCSPResponseCertHashMatchConstraint in interface ValidationPolicy

Returns:

LevelRule

getSelfIssuedOCSPConstraint

public LevelRule getSelfIssuedOCSPConstraint()

Description copied from interface: ValidationPolicy

The method returns SelfIssuedOCSP constraint

Specified by:

getSelfIssuedOCSPConstraint in interface ValidationPolicy

Returns:

LevelRule

getRevocationDataAvailableConstraint

public LevelRule getRevocationDataAvailableConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns revocation data available constraint

Specified by:

getRevocationDataAvailableConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if RevocationDataAvailable for a given context element is present in the constraint file, null otherwise.

getAcceptableRevocationDataFoundConstraint

public LevelRule getAcceptableRevocationDataFoundConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns acceptable revocation data available constraint

Specified by:

getAcceptableRevocationDataFoundConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if AcceptableRevocationDataFound for a given context element is present in the constraint file, null otherwise.

getCRLNextUpdatePresentConstraint

public LevelRule getCRLNextUpdatePresentConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CRL's nextUpdate present constraint

Specified by:

getCRLNextUpdatePresentConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if CRLNextUpdatePresent for a given context element is present in the constraint file, null otherwise.

getOCSPNextUpdatePresentConstraint

public LevelRule getOCSPNextUpdatePresentConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns OCSP's nextUpdate present constraint

Specified by:

getOCSPNextUpdatePresentConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if OCSPNextUpdatePresent for a given context element is present in the constraint file, null otherwise.

getRevocationFreshnessConstraint

public DurationRule getRevocationFreshnessConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns revocation data's freshness constraint

Specified by:

getRevocationFreshnessConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

DurationRule if RevocationFreshness for a given context element is present in the constraint file, null otherwise.

getRevocationFreshnessNextUpdateConstraint

public LevelRule getRevocationFreshnessNextUpdateConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns revocation data's freshness for nextUpdate check constraint

Specified by:

getRevocationFreshnessNextUpdateConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if RevocationFreshnessNextUpdate for a given context element is present in the constraint file, null otherwise.

getCertificateNotRevokedConstraint

public LevelRule getCertificateNotRevokedConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate's not revoked constraint

Specified by:

getCertificateNotRevokedConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if Revoked for a given context element is present in the constraint file, null otherwise.

getCertificateNotOnHoldConstraint

public LevelRule getCertificateNotOnHoldConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate's not onHold constraint

Specified by:

getCertificateNotOnHoldConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if OnHold for a given context element is present in the constraint file, null otherwise.

getRevocationIssuerNotExpiredConstraint

public LevelRule getRevocationIssuerNotExpiredConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns revocation issuer's validity range constraint

Specified by:

getRevocationIssuerNotExpiredConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if RevocationIssuerNotExpired constraint for a given certificate context is present in the constraint file, null otherwise.

getCertificateNotSelfSignedConstraint

public LevelRule getCertificateNotSelfSignedConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate's not self-signed constraint

Specified by:

getCertificateNotSelfSignedConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if not self-signed for a given context element is present in the constraint file, null otherwise.

getCertificateSelfSignedConstraint

public LevelRule getCertificateSelfSignedConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns certificate's self-signed constraint

Specified by:

getCertificateSelfSignedConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if self-signed for a given context element is present in the constraint file, null otherwise.

getTrustServiceStatusConstraint

public MultiValuesRule getTrustServiceStatusConstraint(Context context)

Description copied from interface: ValidationPolicy

Returns trusted service status constraint

Specified by:

getTrustServiceStatusConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if trusted service status for a given context element is present in the constraint file, null otherwise.

getTrustServiceTypeIdentifierConstraint

public MultiValuesRule getTrustServiceTypeIdentifierConstraint(Context context)

Description copied from interface: ValidationPolicy

Returns trusted service type identifier constraint

Specified by:

getTrustServiceTypeIdentifierConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if trusted service type identifier for a given context element is present in the constraint file, null otherwise.

getCertificatePolicyIdsConstraint

public MultiValuesRule getCertificatePolicyIdsConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Returns CertificatePolicyIds constraint if present in the policy, null otherwise

Specified by:

getCertificatePolicyIdsConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule if CertificatePolicyIds element is present in the constraint file, null otherwise.

getCertificatePolicyQualificationIdsConstraint

public LevelRule getCertificatePolicyQualificationIdsConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates if the CertificatePolicyIds declare the certificate as qualified.

Specified by:

getCertificatePolicyQualificationIdsConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if PolicyQualificationIds for a given context element is present in the constraint file, null otherwise.

getCertificatePolicySupportedByQSCDIdsConstraint

public LevelRule getCertificatePolicySupportedByQSCDIdsConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates if the CertificatePolicyIds mandate the certificate as to be supported by a secure signature creation device (QSCD).

Specified by:

getCertificatePolicySupportedByQSCDIdsConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if PolicySupportedByQSCDIds for a given context element is present in the constraint file, null otherwise.

getCertificateQCComplianceConstraint

public LevelRule getCertificateQCComplianceConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates if the end user certificate used in validating the signature is QC Compliant.

Specified by:

getCertificateQCComplianceConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if QcCompliance for a given context element is present in the constraint file, null otherwise.

getCertificateQcEuLimitValueCurrencyConstraint

public ValueRule getCertificateQcEuLimitValueCurrencyConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the allowed currency used to specify certificate's QCLimitValue statement.

Specified by:

getCertificateQcEuLimitValueCurrencyConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

NumericValueRule if QcTransactionLimitCurrency for a given context element is present in the constraint file, null otherwise.

getCertificateMinQcEuLimitValueConstraint

public NumericValueRule getCertificateMinQcEuLimitValueConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the minimal allowed QcEuLimitValue transaction limit for which the end user certificate used for the signature can be used.

Specified by:

getCertificateMinQcEuLimitValueConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

NumericValueRule if MinQcTransactionLimit for a given context element is present in the constraint file, null otherwise.

getCertificateMinQcEuRetentionPeriodConstraint

public NumericValueRule getCertificateMinQcEuRetentionPeriodConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the minimal allowed QC retention period for material information relevant to the use of the end user certificate used for the signature.

Specified by:

getCertificateMinQcEuRetentionPeriodConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

NumericValueRule if MinQcRetentionPeriod for a given context element is present in the constraint file, null otherwise.

getCertificateQcSSCDConstraint

public LevelRule getCertificateQcSSCDConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).

Specified by:

getCertificateQcSSCDConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if QcSSCD for a given context element is present in the constraint file, null otherwise.

getCertificateQcEuPDSLocationConstraint

public MultiValuesRule getCertificateQcEuPDSLocationConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the location or set of locations of PKI Disclosure Statements.

Specified by:

getCertificateQcEuPDSLocationConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule the the location or set of locations of PKI Disclosure Statements

getCertificateQcTypeConstraint

public MultiValuesRule getCertificateQcTypeConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the certificate is claimed as a certificate of a particular type.

Specified by:

getCertificateQcTypeConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule the types that the certificate is claimed to be of

getCertificateQcCCLegislationConstraint

public MultiValuesRule getCertificateQcCCLegislationConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the country or set of countries under the legislation of which the certificate is issued as a qualified certificate is present. NOTE: in order to verify the EU compliance, the value shall be empty (no QcCCLegislation is allowed)

Specified by:

getCertificateQcCCLegislationConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule the country or set of countries under the legislation of which the certificate is issued as a qualified certificate

getCertificateIssuedToNaturalPersonConstraint

public LevelRule getCertificateIssuedToNaturalPersonConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates if the end user certificate used in validating the signature is issued to a natural person.

Specified by:

getCertificateIssuedToNaturalPersonConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if IssuedToNaturalPerson for a given context element is present in the constraint file, null otherwise.

getCertificateIssuedToLegalPersonConstraint

public LevelRule getCertificateIssuedToLegalPersonConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates if the end user certificate used in validating the signature is issued to a legal person.

Specified by:

getCertificateIssuedToLegalPersonConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if IssuedToLegalPerson for a given context element is present in the constraint file, null otherwise.

getCertificateSemanticsIdentifierConstraint

public MultiValuesRule getCertificateSemanticsIdentifierConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the certificate's QCStatement contains an acceptable semantics identifier.

Specified by:

getCertificateSemanticsIdentifierConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

LevelRule if SemanticsIdentifier for a given context element is present in the constraint file, null otherwise.

getCertificatePS2DQcTypeRolesOfPSPConstraint

public MultiValuesRule getCertificatePS2DQcTypeRolesOfPSPConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the acceptable QC PS2D roles for the certificate used for a signature.

Specified by:

getCertificatePS2DQcTypeRolesOfPSPConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule the set of acceptable QC PS2D roles

getCertificatePS2DQcCompetentAuthorityNameConstraint

public MultiValuesRule getCertificatePS2DQcCompetentAuthorityNameConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the acceptable QC PS2D names for the certificate used for a signature.

Specified by:

getCertificatePS2DQcCompetentAuthorityNameConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule the set of acceptable QC PS2D names

getCertificatePS2DQcCompetentAuthorityIdConstraint

public MultiValuesRule getCertificatePS2DQcCompetentAuthorityIdConstraint(Context context,
 SubContext subContext)

Description copied from interface: ValidationPolicy

Indicates the acceptable QC PS2D ids for the certificate used for a signature.

Specified by:

getCertificatePS2DQcCompetentAuthorityIdConstraint in interface ValidationPolicy

Parameters:

context - Context

subContext - SubContext

Returns:

MultiValuesRule the set of acceptable QC PS2D ids

getSigningCertificateRecognitionConstraint

public LevelRule getSigningCertificateRecognitionConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if signing-certificate has been identified.

Specified by:

getSigningCertificateRecognitionConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if Recognition for a given context element is present in the constraint file, null otherwise.

getSigningCertificateAttributePresentConstraint

public LevelRule getSigningCertificateAttributePresentConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signing certificate attribute is present

Specified by:

getSigningCertificateAttributePresentConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if SigningCertificateAttribute for a given context element is present in the constraint file, null otherwise.

getUnicitySigningCertificateAttributeConstraint

public LevelRule getUnicitySigningCertificateAttributeConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signing certificate is not ambiguously determines

Specified by:

getUnicitySigningCertificateAttributeConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if UnicitySigningCertificate for a given context element is present in the constraint file, null otherwise.

getSigningCertificateDigestValuePresentConstraint

public LevelRule getSigningCertificateDigestValuePresentConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signing certificate reference's digest value is present

Specified by:

getSigningCertificateDigestValuePresentConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if DigestValuePresent for a given context element is present in the constraint file, null otherwise.

getSigningCertificateDigestValueMatchConstraint

public LevelRule getSigningCertificateDigestValueMatchConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signing certificate reference's digest value matches

Specified by:

getSigningCertificateDigestValueMatchConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if DigestValueMatch for a given context element is present in the constraint file, null otherwise.

getSigningCertificateIssuerSerialMatchConstraint

public LevelRule getSigningCertificateIssuerSerialMatchConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signing certificate reference's issuer serial matches

Specified by:

getSigningCertificateIssuerSerialMatchConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if IssuerSerialMatch for a given context element is present in the constraint file, null otherwise.

getKeyIdentifierPresent

public LevelRule getKeyIdentifierPresent(Context context)

Description copied from interface: ValidationPolicy

Indicates if the 'kid' (key identifier) header parameter is present within the protected header of the signature

Specified by:

getKeyIdentifierPresent in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if KeyIdentifierPresent for a given context element is present in the constraint file, null otherwise.

getKeyIdentifierMatch

public LevelRule getKeyIdentifierMatch(Context context)

Description copied from interface: ValidationPolicy

Indicates if the value of 'kid' (key identifier) header parameter matches the signing-certificate used to create the signature

Specified by:

getKeyIdentifierMatch in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if KeyIdentifierMatch for a given context element is present in the constraint file, null otherwise.

getReferenceDataExistenceConstraint

public LevelRule getReferenceDataExistenceConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the referenced data is found

Specified by:

getReferenceDataExistenceConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ReferenceDataExistence for a given context element is present in the constraint file, null otherwise.

getReferenceDataIntactConstraint

public LevelRule getReferenceDataIntactConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the referenced data is intact

Specified by:

getReferenceDataIntactConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ReferenceDataIntact for a given context element is present in the constraint file, null otherwise.

getReferenceDataNameMatchConstraint

public LevelRule getReferenceDataNameMatchConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the referenced document names match the manifest entry references

Specified by:

getReferenceDataNameMatchConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ReferenceDataNameMatch for a given context element is present in the constraint file, null otherwise.

getManifestEntryObjectExistenceConstraint

public LevelRule getManifestEntryObjectExistenceConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the manifested document is found

Specified by:

getManifestEntryObjectExistenceConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ManifestEntryObjectExistence for a given context element is present in the constraint file, null otherwise.

getManifestEntryObjectIntactConstraint

public LevelRule getManifestEntryObjectIntactConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the manifested document is intact

Specified by:

getManifestEntryObjectIntactConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ManifestEntryObjectIntact for a given context element is present in the constraint file, null otherwise.

getManifestEntryObjectGroupConstraint

public LevelRule getManifestEntryObjectGroupConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if all manifest entries have been found

Specified by:

getManifestEntryObjectGroupConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ManifestEntryObjectGroup for a given context element is present in the constraint file, null otherwise.

getManifestEntryNameMatchConstraint

public LevelRule getManifestEntryNameMatchConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if names of all matching documents match to the manifest entry names

Specified by:

getManifestEntryNameMatchConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ManifestEntryNameMatch for a given context element is present in the constraint file, null otherwise.

getSignatureIntactConstraint

public LevelRule getSignatureIntactConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signature is intact

Specified by:

getSignatureIntactConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

SignatureDataIntact if SignatureIntact for a given context element is present in the constraint file, null otherwise.

getSignatureDuplicatedConstraint

public LevelRule getSignatureDuplicatedConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signature is not ambiguous

Specified by:

getSignatureDuplicatedConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

SignatureDuplicated if SignatureDuplicated for a given context element is present in the constraint file, null otherwise.

getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint

public LevelRule getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint()

Description copied from interface: ValidationPolicy

This constraint checks if the certificate is not expired on best-signature-time

Specified by:

getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint in interface ValidationPolicy

Returns:

LevelRule if BestSignatureTimeBeforeExpirationDateOfSigningCertificate element is present in the constraint file, null otherwise.

getRevocationTimeAgainstBestSignatureDurationRule

public LevelRule getRevocationTimeAgainstBestSignatureDurationRule()

Description copied from interface: ValidationPolicy

Returns RevocationTimeAgainstBestSignatureTime constraint if present in the policy, null otherwise

Specified by:

getRevocationTimeAgainstBestSignatureDurationRule in interface ValidationPolicy

Returns:

LevelRule if RevocationTimeAgainstBestSignatureTime element is present in the constraint file, null otherwise.

getTimestampCoherenceConstraint

public LevelRule getTimestampCoherenceConstraint()

Description copied from interface: ValidationPolicy

This constraint checks if the timestamp order is coherent

Specified by:

getTimestampCoherenceConstraint in interface ValidationPolicy

Returns:

LevelRule if TimestampCoherence element is present in the constraint file, null otherwise.

getTimestampDelayConstraint

public DurationRule getTimestampDelayConstraint()

Description copied from interface: ValidationPolicy

Returns TimestampDelay constraint if present in the policy, null otherwise

Specified by:

getTimestampDelayConstraint in interface ValidationPolicy

Returns:

DurationRule if TimestampDelay element is present in the constraint file, null otherwise.

getTimestampValidConstraint

public LevelRule getTimestampValidConstraint()

Description copied from interface: ValidationPolicy

Returns whether the time-stamp is valid (passed either basic signature validation process or past signature validation). If TimestampValid element is absent within the constraint file then null is returned.

Specified by:

getTimestampValidConstraint in interface ValidationPolicy

Returns:

LevelRule if TimestampValid element is present in the constraint file, null otherwise.

getTimestampTSAGeneralNamePresent

public LevelRule getTimestampTSAGeneralNamePresent()

Description copied from interface: ValidationPolicy

Indicates if the timestamp's TSTInfo.tsa field is present

Specified by:

getTimestampTSAGeneralNamePresent in interface ValidationPolicy

Returns:

LevelRule if TSAGeneralNamePresent for a given context element is present in the constraint file, null otherwise.

getTimestampTSAGeneralNameContentMatch

public LevelRule getTimestampTSAGeneralNameContentMatch()

Description copied from interface: ValidationPolicy

Indicates if the timestamp's TSTInfo.tsa field's value matches the timestamp's issuer distinguishing name when present

Specified by:

getTimestampTSAGeneralNameContentMatch in interface ValidationPolicy

Returns:

LevelRule if TSAGeneralNameContentMatch for a given context element is present in the constraint file, null otherwise.

getTimestampTSAGeneralNameOrderMatch

public LevelRule getTimestampTSAGeneralNameOrderMatch()

Description copied from interface: ValidationPolicy

Indicates if the timestamp's TSTInfo.tsa field's value and order match the timestamp's issuer distinguishing name when present

Specified by:

getTimestampTSAGeneralNameOrderMatch in interface ValidationPolicy

Returns:

LevelRule if TSAGeneralNameOrderMatch for a given context element is present in the constraint file, null otherwise.

getAtsHashIndexConstraint

public LevelRule getAtsHashIndexConstraint()

Description copied from interface: ValidationPolicy

Returns timestamp AtsHashIndex constraint if present in the policy, null otherwise

Specified by:

getAtsHashIndexConstraint in interface ValidationPolicy

Returns:

LevelRule if AtsHashIndex element is present in the constraint file, null otherwise.

getTimestampContainerSignedAndTimestampedFilesCoveredConstraint

public LevelRule getTimestampContainerSignedAndTimestampedFilesCoveredConstraint()

Description copied from interface: ValidationPolicy

Returns timestamp ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwise

Specified by:

getTimestampContainerSignedAndTimestampedFilesCoveredConstraint in interface ValidationPolicy

Returns:

LevelRule if ContainerSignedAndTimestampedFilesCovered element is present in the constraint file, null otherwise.

getFullScopeConstraint

public LevelRule getFullScopeConstraint()

Description copied from interface: ValidationPolicy

Returns FullScope constraint if present in the policy, null otherwise

Specified by:

getFullScopeConstraint in interface ValidationPolicy

Returns:

LevelRule if FullScope element is present in the constraint file, null otherwise.

getContentTimeStampConstraint

public LevelRule getContentTimeStampConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: content-time-stamp should be checked. If ContentTimeStamp element is absent within the constraint file then null is returned.

Specified by:

getContentTimeStampConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ContentTimeStamp element is present in the constraint file, null otherwise.

getContentTimeStampMessageImprintConstraint

public LevelRule getContentTimeStampMessageImprintConstraint(Context context)

Description copied from interface: ValidationPolicy

Indicates if the signed property: content-time-stamp message-imprint should be checked. If ContentTimeStampMessageImprint element is absent within the constraint file then null is returned.

Specified by:

getContentTimeStampMessageImprintConstraint in interface ValidationPolicy

Parameters:

context - Context

Returns:

LevelRule if ContentTimeStampMessageImprint element is present in the constraint file, null otherwise.

getEvidenceRecordValidConstraint

public LevelRule getEvidenceRecordValidConstraint()

Description copied from interface: ValidationPolicy

Returns whether the evidence record is valid (passed a complete evidence record validation process). If EvidenceRecordValid element is absent within the constraint file then null is returned.

Specified by:

getEvidenceRecordValidConstraint in interface ValidationPolicy

Returns:

LevelRule if EvidenceRecordValid element is present in the constraint file, null otherwise.

getEvidenceRecordDataObjectExistenceConstraint

public LevelRule getEvidenceRecordDataObjectExistenceConstraint()

Description copied from interface: ValidationPolicy

Returns DataObjectExistence constraint if present in the policy, null otherwise

Specified by:

getEvidenceRecordDataObjectExistenceConstraint in interface ValidationPolicy

Returns:

LevelRule if DataObjectExistence element is present

getEvidenceRecordDataObjectIntactConstraint

public LevelRule getEvidenceRecordDataObjectIntactConstraint()

Description copied from interface: ValidationPolicy

Returns DataObjectIntact constraint if present in the policy, null otherwise

Specified by:

getEvidenceRecordDataObjectIntactConstraint in interface ValidationPolicy

Returns:

LevelRule if DataObjectIntact element is present

getEvidenceRecordDataObjectFoundConstraint

public LevelRule getEvidenceRecordDataObjectFoundConstraint()

Description copied from interface: ValidationPolicy

Returns DataObjectFound constraint if present in the policy, null otherwise

Specified by:

getEvidenceRecordDataObjectFoundConstraint in interface ValidationPolicy

Returns:

LevelRule if DataObjectFound element is present

getEvidenceRecordDataObjectGroupConstraint

public LevelRule getEvidenceRecordDataObjectGroupConstraint()

Description copied from interface: ValidationPolicy

Returns DataObjectGroup constraint if present in the policy, null otherwise

Specified by:

getEvidenceRecordDataObjectGroupConstraint in interface ValidationPolicy

Returns:

LevelRule if DataObjectGroup element is present

getEvidenceRecordSignedFilesCoveredConstraint

public LevelRule getEvidenceRecordSignedFilesCoveredConstraint()

Description copied from interface: ValidationPolicy

Returns SignedFilesCovered constraint if present in the policy, null otherwise

Specified by:

getEvidenceRecordSignedFilesCoveredConstraint in interface ValidationPolicy

Returns:

LevelRule if SignedFilesCovered element is present in the constraint file, null otherwise.

getEvidenceRecordContainerSignedAndTimestampedFilesCoveredConstraint

public LevelRule getEvidenceRecordContainerSignedAndTimestampedFilesCoveredConstraint()

Description copied from interface: ValidationPolicy

Returns evidence record ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwise

Specified by:

getEvidenceRecordContainerSignedAndTimestampedFilesCoveredConstraint in interface ValidationPolicy

Returns:

LevelRule if ContainerSignedAndTimestampedFilesCovered element is present in the constraint file, null otherwise.

getEvidenceRecordHashTreeRenewalConstraint

public LevelRule getEvidenceRecordHashTreeRenewalConstraint()

Description copied from interface: ValidationPolicy

Returns HashTreeRenewal constraint if present in the policy, null otherwise

Specified by:

getEvidenceRecordHashTreeRenewalConstraint in interface ValidationPolicy

Returns:

LevelRule if HashTreeRenewal element is present

getEvidenceRecordCryptographicConstraint

public CryptographicSuite getEvidenceRecordCryptographicConstraint()

Description copied from interface: ValidationPolicy

This method returns cryptographic constraints for validation of Evidence Record

Specified by:

getEvidenceRecordCryptographicConstraint in interface ValidationPolicy

Returns:

CryptographicSuite

getAcceptedContainerTypesConstraint

public MultiValuesRule getAcceptedContainerTypesConstraint()

Description copied from interface: ValidationPolicy

Returns AcceptedContainerTypes constraint if present in the policy, null otherwise

Specified by:

getAcceptedContainerTypesConstraint in interface ValidationPolicy

Returns:

MultiValuesRule if AcceptedContainerTypes element is present in the constraint file, null otherwise.

getZipCommentPresentConstraint

public LevelRule getZipCommentPresentConstraint()

Description copied from interface: ValidationPolicy

Returns ZipCommentPresent constraint if present in the policy, null otherwise

Specified by:

getZipCommentPresentConstraint in interface ValidationPolicy

Returns:

LevelRule if ZipCommentPresent element is present in the constraint file, null otherwise.

getAcceptedZipCommentsConstraint

public MultiValuesRule getAcceptedZipCommentsConstraint()

Description copied from interface: ValidationPolicy

Returns AcceptedZipComments constraint if present in the policy, null otherwise

Specified by:

getAcceptedZipCommentsConstraint in interface ValidationPolicy

Returns:

MultiValuesRule if AcceptedZipComments element is present in the constraint file, null otherwise.

getMimeTypeFilePresentConstraint

public LevelRule getMimeTypeFilePresentConstraint()

Description copied from interface: ValidationPolicy

Returns MimeTypeFilePresent constraint if present in the policy, null otherwise

Specified by:

getMimeTypeFilePresentConstraint in interface ValidationPolicy

Returns:

LevelRule if MimeTypeFilePresent element is present in the constraint file, null otherwise.

getAcceptedMimeTypeContentsConstraint

public MultiValuesRule getAcceptedMimeTypeContentsConstraint()

Description copied from interface: ValidationPolicy

Returns AcceptedMimeTypeContents constraint if present in the policy, null otherwise

Specified by:

getAcceptedMimeTypeContentsConstraint in interface ValidationPolicy

Returns:

MultiValuesRule if AcceptedMimeTypeContents element is present in the constraint file, null otherwise.

getManifestFilePresentConstraint

public LevelRule getManifestFilePresentConstraint()

Description copied from interface: ValidationPolicy

Returns ManifestFilePresent constraint if present in the policy, null otherwise

Specified by:

getManifestFilePresentConstraint in interface ValidationPolicy

Returns:

LevelRule if ManifestFilePresent element is present in the constraint file, null otherwise.

getSignedFilesPresentConstraint

public LevelRule getSignedFilesPresentConstraint()

Description copied from interface: ValidationPolicy

Returns SignedFilesPresent constraint if present in the policy, null otherwise

Specified by:

getSignedFilesPresentConstraint in interface ValidationPolicy

Returns:

LevelRule if SignedFilesPresent element is present in the constraint file, null otherwise.

getFilenameAdherenceConstraint

public LevelRule getFilenameAdherenceConstraint()

Description copied from interface: ValidationPolicy

Returns FilenameAdherence constraint if present in the policy, null otherwise

Specified by:

getFilenameAdherenceConstraint in interface ValidationPolicy

Returns:

LevelRule if FilenameAdherence element is present in the constraint file, null otherwise.

getAllFilesSignedConstraint

public LevelRule getAllFilesSignedConstraint()

Description copied from interface: ValidationPolicy

Returns AllFilesSigned constraint if present in the policy, null otherwise

Specified by:

getAllFilesSignedConstraint in interface ValidationPolicy

Returns:

LevelRule if AllFilesSigned element is present in the constraint file, null otherwise.

getAcceptablePDFAProfilesConstraint

public MultiValuesRule getAcceptablePDFAProfilesConstraint()

Description copied from interface: ValidationPolicy

Returns AcceptablePDFAProfiles constraint if present in the policy, null otherwise

Specified by:

getAcceptablePDFAProfilesConstraint in interface ValidationPolicy

Returns:

LevelRule if AcceptablePDFAProfiles element is present in the constraint file, null otherwise.

getPDFACompliantConstraint

public LevelRule getPDFACompliantConstraint()

Description copied from interface: ValidationPolicy

Returns PDFACompliant constraint if present in the policy, null otherwise

Specified by:

getPDFACompliantConstraint in interface ValidationPolicy

Returns:

LevelRule if PDFACompliant element is present in the constraint file, null otherwise.

isEIDASConstraintPresent

public boolean isEIDASConstraintPresent()

Description copied from interface: ValidationPolicy

Returns if EIDAS constraints present (qualification check shall be performed)

Specified by:

isEIDASConstraintPresent in interface ValidationPolicy

Returns:

TRUE if EIDAS constraint present, FALSE otherwise

getTLFreshnessConstraint

public DurationRule getTLFreshnessConstraint()

Description copied from interface: ValidationPolicy

Returns TLFreshness constraint if present in the policy, null otherwise

Specified by:

getTLFreshnessConstraint in interface ValidationPolicy

Returns:

LevelRule if TLFreshness element is present in the constraint file, null otherwise.

getTLWellSignedConstraint

public LevelRule getTLWellSignedConstraint()

Description copied from interface: ValidationPolicy

Returns TLWellSigned constraint if present in the policy, null otherwise

Specified by:

getTLWellSignedConstraint in interface ValidationPolicy

Returns:

LevelRule if TLWellSigned element is present in the constraint file, null otherwise.

getTLNotExpiredConstraint

public LevelRule getTLNotExpiredConstraint()

Description copied from interface: ValidationPolicy

Returns TLNotExpired constraint if present in the policy, null otherwise

Specified by:

getTLNotExpiredConstraint in interface ValidationPolicy

Returns:

LevelRule if TLNotExpired element is present in the constraint file, null otherwise.

getTLVersionConstraint

public MultiValuesRule getTLVersionConstraint()

Description copied from interface: ValidationPolicy

Returns TLVersion constraint if present in the policy, null otherwise

Specified by:

getTLVersionConstraint in interface ValidationPolicy

Returns:

MultiValuesRule if TLVersion element is present in the constraint file, null otherwise.

getTLStructureConstraint

public LevelRule getTLStructureConstraint()

Description copied from interface: ValidationPolicy

Returns TLStructure constraint if present in the policy, null otherwise

Specified by:

getTLStructureConstraint in interface ValidationPolicy

Returns:

LevelRule if TLStructure element is present in the constraint file, null otherwise.

getValidationModel

public ValidationModel getValidationModel()

Description copied from interface: ValidationPolicy

Returns the used validation model (default is SHELL). Alternatives are CHAIN and HYBRID

Specified by:

getValidationModel in interface ValidationPolicy

Returns:

the validation model to be used

getSignatureConstraints

public SignatureConstraints getSignatureConstraints()

Returns the constraint used for Signature validation

Returns:

SignatureConstraints

getCounterSignatureConstraints

public SignatureConstraints getCounterSignatureConstraints()

Returns the constraint used for Counter Signature validation

Returns:

SignatureConstraints

getTimestampConstraints

public TimestampConstraints getTimestampConstraints()

Returns the constraint used for Timestamp validation

Returns:

TimestampConstraints

getRevocationConstraints

public RevocationConstraints getRevocationConstraints()

Returns the constraint used for Revocation validation

Returns:

RevocationConstraints

getEvidenceRecordConstraints

public EvidenceRecordConstraints getEvidenceRecordConstraints()

Returns the constraint used for Evidence Record validation

Returns:

EvidenceRecordConstraints

getContainerConstraints

public ContainerConstraints getContainerConstraints()

Returns the constraint used for ASiC Container validation

Returns:

ContainerConstraints

getPDFAConstraints

public PDFAConstraints getPDFAConstraints()

Returns the constraint used for ASiC Container validation

Returns:

ContainerConstraints

getEIDASConstraints

public EIDAS getEIDASConstraints()

Returns the constraint used for qualification validation

Returns:

EIDAS

getCryptographic

public CryptographicConstraint getCryptographic()

Returns the common constraint used for cryptographic validation

Returns:

CryptographicConstraint

toString

public String toString()

Overrides:

toString in class Object