Package org.globus.gsi.trustmanager
Class SigningPolicyChecker
java.lang.Object
org.globus.gsi.trustmanager.SigningPolicyChecker
- All Implemented Interfaces:
CertificateChecker
This checks to make sure the Distinguished Name in the certificate is valid according to the signing policy.
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoid
invoke
(X509Certificate cert, GSIConstants.CertificateType certType) Validate DN against the signing policyprivate boolean
if a certificate is not a CA or if it is not a proxy, return true.
-
Field Details
-
policyStore
-
-
Constructor Details
-
SigningPolicyChecker
-
-
Method Details
-
invoke
public void invoke(X509Certificate cert, GSIConstants.CertificateType certType) throws CertPathValidatorException Validate DN against the signing policy- Specified by:
invoke
in interfaceCertificateChecker
- Parameters:
cert
- The certificate to check.certType
- The type of certificate to check.- Throws:
CertPathValidatorException
- if the certificate is invalid according to the signing policy.
-
requireSigningPolicyCheck
if a certificate is not a CA or if it is not a proxy, return true.- Parameters:
certType
- The type of Certificate being queried.- Returns:
- True if the CertificateType requires a Signing Policy check.
-