Package eu.europa.esig.dss.spi.tsl

Class TrustedListsCertificateSource

java.lang.Object

eu.europa.esig.dss.spi.x509.CommonCertificateSource

eu.europa.esig.dss.spi.x509.CommonTrustedCertificateSource

eu.europa.esig.dss.spi.tsl.TrustedListsCertificateSource

All Implemented Interfaces:

TrustedCertificateSourceWithTime, TrustPropertiesCertificateSource, CertificateSource, TrustedCertificateSource, Serializable

public class TrustedListsCertificateSource
extends CommonTrustedCertificateSource
implements TrustPropertiesCertificateSource

This class allows injection of trusted certificates from Trusted Lists

See Also:

• Serialized Form

Field Summary

Fields inherited from class eu.europa.esig.dss.spi.x509.CommonCertificateSource

certificateMatcher

Constructor Summary

Constructors

Constructor	Description
TrustedListsCertificateSource()	The default constructor.

Method Summary

Modifier and Type	Method	Description
CertificateToken	addCertificate(CertificateToken certificate)	This method is not applicable for this kind of certificate source.
List<String>	getAlternativeCRLUrls(CertificateToken trustAnchor)	Returns a list of alternative CRL access point Urls for certificates issued by the current trust anchor
List<String>	getAlternativeOCSPUrls(CertificateToken trustAnchor)	Returns a list of alternative OCSP access point Urls for certificates issued by the current trust anchor
CertificateSourceType	getCertificateSourceType()	This method returns the certificate source type associated to the implementation class.
int	getNumberOfTrustedEntityKeys()	Gets the number of trusted entity keys (public key + subject name)
TLValidationJobSummary	getSummary()	Gets TL Validation job summary
List<TrustProperties>	getTrustServices(CertificateToken token)	Returns TrustProperties for the given certificate, when applicable
CertificateTrustTime	getTrustTime(CertificateToken token)	Returns trust time period for the given certificate, when the certificate is considered as a trust anchor.
boolean	isTrusted(CertificateToken certificateToken)	This method checks if a given certificate is trusted
boolean	isTrustedAtTime(CertificateToken certificateToken, Date controlTime)	This method checks if a given certificate is trusted at the controlTime
void	setSummary(TLValidationJobSummary summary)	Sets TL Validation job summary
void	setTrustPropertiesByCertificates(Map<CertificateToken,List<TrustProperties>> trustPropertiesByCerts)	The method allows to fill the CertificateSource
void	setTrustTimeByCertificates(Map<CertificateToken,List<CertificateTrustTime>> trustTimeByCertificate)	The method allows to fill the CertificateSource with trusted time periods

Methods inherited from class eu.europa.esig.dss.spi.x509.CommonTrustedCertificateSource

importAsTrusted

Methods inherited from class eu.europa.esig.dss.spi.x509.CommonCertificateSource

doesCertificateReferenceMatch, findTokensFromCertRef, getByCertificateDigest, getByEntityKey, getByPublicKey, getBySignerIdentifier, getBySki, getBySubject, getCertificates, getEntities, getNumberOfCertificates, getNumberOfEntities, isAllSelfSigned, isCertificateSourceEqual, isCertificateSourceEquivalent, isKnown, removeCertificate, reset

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface eu.europa.esig.dss.spi.x509.CertificateSource

findTokensFromCertRef, getByCertificateDigest, getByEntityKey, getByPublicKey, getBySignerIdentifier, getBySki, getBySubject, getCertificates, getEntities, isAllSelfSigned, isCertificateSourceEqual, isCertificateSourceEquivalent, isKnown

Constructor Details

TrustedListsCertificateSource

public TrustedListsCertificateSource()

The default constructor.

Method Details

getSummary

public TLValidationJobSummary getSummary()

Gets TL Validation job summary

Specified by:

getSummary in interface TrustPropertiesCertificateSource

Returns:

TLValidationJobSummary

setSummary

public void setSummary(TLValidationJobSummary summary)

Sets TL Validation job summary

Specified by:

setSummary in interface TrustPropertiesCertificateSource

Parameters:

summary - TLValidationJobSummary

getCertificateSourceType

public CertificateSourceType getCertificateSourceType()

Description copied from interface: CertificateSource

This method returns the certificate source type associated to the implementation class.

Specified by:

getCertificateSourceType in interface CertificateSource

Overrides:

getCertificateSourceType in class CommonTrustedCertificateSource

Returns:

the certificate origin

addCertificate

public CertificateToken addCertificate(CertificateToken certificate)

This method is not applicable for this kind of certificate source. You should use setTrustPropertiesByCertificates(java.util.Map<eu.europa.esig.dss.model.x509.CertificateToken, java.util.List<eu.europa.esig.dss.model.tsl.TrustProperties>>)

Specified by:

addCertificate in interface CertificateSource

Overrides:

addCertificate in class CommonCertificateSource

Parameters:

certificate - the certificate you have to trust

Returns:

the corresponding certificate token

setTrustPropertiesByCertificates

public void setTrustPropertiesByCertificates(Map<CertificateToken,List<TrustProperties>> trustPropertiesByCerts)

Description copied from interface: TrustPropertiesCertificateSource

The method allows to fill the CertificateSource

Specified by:

setTrustPropertiesByCertificates in interface TrustPropertiesCertificateSource

Parameters:

trustPropertiesByCerts - map between CertificateTokens and a list of TrustProperties

getTrustServices

public List<TrustProperties> getTrustServices(CertificateToken token)

Description copied from interface: TrustPropertiesCertificateSource

Returns TrustProperties for the given certificate, when applicable

Specified by:

getTrustServices in interface TrustPropertiesCertificateSource

Parameters:

token - CertificateToken

Returns:

a list of TrustProperties

setTrustTimeByCertificates

public void setTrustTimeByCertificates(Map<CertificateToken,List<CertificateTrustTime>> trustTimeByCertificate)

Description copied from interface: TrustPropertiesCertificateSource

The method allows to fill the CertificateSource with trusted time periods

Specified by:

setTrustTimeByCertificates in interface TrustPropertiesCertificateSource

Parameters:

trustTimeByCertificate - map between CertificateTokens and a list of CertificateTrustTimes

getTrustTime

public CertificateTrustTime getTrustTime(CertificateToken token)

Description copied from interface: TrustedCertificateSourceWithTime

Returns trust time period for the given certificate, when the certificate is considered as a trust anchor. For an unbounded period of trust time, returns a CertificateTrustTime with empty values. When the certificate is not trusted at any time, returns not trusted CertificateTrustTime entry.

Specified by:

getTrustTime in interface TrustedCertificateSourceWithTime

Parameters:

token - CertificateToken

Returns:

CertificateTrustTime

isTrustedAtTime

public boolean isTrustedAtTime(CertificateToken certificateToken,
 Date controlTime)

Description copied from interface: CertificateSource

This method checks if a given certificate is trusted at the controlTime

Specified by:

isTrustedAtTime in interface CertificateSource

Overrides:

isTrustedAtTime in class CommonCertificateSource

Parameters:

certificateToken - the certificate to be tested

controlTime - Date

Returns:

true if the certificate is trusted

getAlternativeOCSPUrls

public List<String> getAlternativeOCSPUrls(CertificateToken trustAnchor)

Description copied from interface: TrustedCertificateSource

Returns a list of alternative OCSP access point Urls for certificates issued by the current trust anchor

Specified by:

getAlternativeOCSPUrls in interface TrustedCertificateSource

Overrides:

getAlternativeOCSPUrls in class CommonTrustedCertificateSource

Parameters:

trustAnchor - CertificateToken

Returns:

a list of Strings

getAlternativeCRLUrls

public List<String> getAlternativeCRLUrls(CertificateToken trustAnchor)

Description copied from interface: TrustedCertificateSource

Returns a list of alternative CRL access point Urls for certificates issued by the current trust anchor

Specified by:

getAlternativeCRLUrls in interface TrustedCertificateSource

Overrides:

getAlternativeCRLUrls in class CommonTrustedCertificateSource

Parameters:

trustAnchor - CertificateToken

Returns:

a list of Strings

isTrusted

public boolean isTrusted(CertificateToken certificateToken)

Description copied from interface: CertificateSource

This method checks if a given certificate is trusted

Specified by:

isTrusted in interface CertificateSource

Overrides:

isTrusted in class CommonTrustedCertificateSource

Parameters:

certificateToken - the certificate to be tested

Returns:

true if the certificate is trusted

getNumberOfTrustedEntityKeys

public int getNumberOfTrustedEntityKeys()

Gets the number of trusted entity keys (public key + subject name)

Returns:

the number of trusted entity keys (public key + subject name)