Interface CertificateValidation

All Known Implementing Classes:

CertificateValidationService, CertificateVerifier

public interface CertificateValidation

Interface responsável pela validação de certificados.

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static enum	CertificateValidation.Validate	Sinaliza quais âncoras deverão ser obtidas na validação do caminho

Method Summary

Modifier and Type	Method	Description
CertPath	generateCertPath(SignatureObject signature, org.bouncycastle.cert.X509AttributeCertificateHolder attributeCertificate, Set<TrustAnchor> trustAnchors)
CertPath	generateCertPath(Certificate certificate, Set<TrustAnchor> trustAnchors)	Cria o caminho de certificação.
CertPath	generateCertPath(org.bouncycastle.cert.X509AttributeCertificateHolder attributeCertificate, Set<TrustAnchor> trustAnchors)
Map<URL, List<X509Certificate>>	getAiaCache()
ValidationResult	validate(CertPath certPath, SignatureObject signatureObject, TrustAnchorProvider trustAnchorProvider, RevocationPolicyProvider revocationPolicyProvider, Date timeReference, boolean verifyAlgorithm, CertificateValidation.Validate validate)	Valida o certificado e seu caminho de certificação
void	validateAttributeCertificateWithReport(SignatureObject signature, X509Certificate signerCertificate, TrustAnchorProvider trustAnchorProvider, RevocationPolicyProvider revocationPolicyProvider, CompleteWriter writer, List<Date> timeReferences)
default <T extends TrustAnchorProvider & RevocationPolicyProvider> void	validateAttributeCertificateWithReport(SignatureObject signature, X509Certificate signerCertificate, T policyInterface, CompleteWriter writer, List<Date> timeReferences)
default ValidationResult	validateWithReport(CertPath certPath, SignatureObject signature, TrustAnchorProvider trustAnchorProvider, RevocationPolicyProvider revocationPolicyProvider, CertificateValidation.Validate validate, List<Date> timeReferences, CompleteWriter signatureReport)
ValidationResult	validateWithReport(CertPath certPath, SignatureObject signature, TrustAnchorProvider trustAnchorProvider, RevocationPolicyProvider revocationPolicyProvider, CertificateValidation.Validate validate, List<Date> timeReferences, CompleteWriter writer, ValidationDataReport attributeValidation)
default <T extends TrustAnchorProvider & RevocationPolicyProvider> ValidationResult	validateWithReport(CertPath certPath, SignatureObject signature, T policyInterface, CertificateValidation.Validate validate, List<Date> timeReferences, CompleteWriter signatureReport)

Method Details

getAiaCache

Map<URL, List<X509Certificate>> getAiaCache()

validateWithReport

default <T extends TrustAnchorProvider & RevocationPolicyProvider>
ValidationResult validateWithReport(CertPath certPath,
 SignatureObject signature,
 T policyInterface,
 CertificateValidation.Validate validate,
 List<Date> timeReferences,
 CompleteWriter signatureReport)

validateWithReport

default ValidationResult validateWithReport(CertPath certPath,
 SignatureObject signature,
 TrustAnchorProvider trustAnchorProvider,
 RevocationPolicyProvider revocationPolicyProvider,
 CertificateValidation.Validate validate,
 List<Date> timeReferences,
 CompleteWriter signatureReport)

validateWithReport

ValidationResult validateWithReport(CertPath certPath,
 SignatureObject signature,
 TrustAnchorProvider trustAnchorProvider,
 RevocationPolicyProvider revocationPolicyProvider,
 CertificateValidation.Validate validate,
 List<Date> timeReferences,
 CompleteWriter writer,
 ValidationDataReport attributeValidation)

validate

ValidationResult validate(CertPath certPath,
 SignatureObject signatureObject,
 TrustAnchorProvider trustAnchorProvider,
 RevocationPolicyProvider revocationPolicyProvider,
 Date timeReference,
 boolean verifyAlgorithm,
 CertificateValidation.Validate validate)
                   throws CRLException

Valida o certificado e seu caminho de certificação

Parameters:

certPath - O caminho de certificados a ser validado

signatureObject - O objeto de assinatura relacionado à validação

trustAnchorProvider - O provedor de âncoras de confiança

revocationPolicyProvider - O provedor de políticas de revogação

timeReference - Data de referência da validação

verifyAlgorithm - sinaliza se os algoritmos de assinatura devem ser validados conforme a ICP-Brasil

Returns:

O resultado da validação

Throws:

CRLException

validateAttributeCertificateWithReport

default <T extends TrustAnchorProvider & RevocationPolicyProvider>
void validateAttributeCertificateWithReport(SignatureObject signature,
 X509Certificate signerCertificate,
 T policyInterface,
 CompleteWriter writer,
 List<Date> timeReferences)

validateAttributeCertificateWithReport

void validateAttributeCertificateWithReport(SignatureObject signature,
 X509Certificate signerCertificate,
 TrustAnchorProvider trustAnchorProvider,
 RevocationPolicyProvider revocationPolicyProvider,
 CompleteWriter writer,
 List<Date> timeReferences)

generateCertPath

CertPath generateCertPath(Certificate certificate,
 Set<TrustAnchor> trustAnchors)

Cria o caminho de certificação.

Parameters:

certificate - O certificado.

trustAnchors - Os trust anchors

Returns:

O caminho de certificação.

generateCertPath

CertPath generateCertPath(org.bouncycastle.cert.X509AttributeCertificateHolder attributeCertificate,
 Set<TrustAnchor> trustAnchors)

generateCertPath

CertPath generateCertPath(SignatureObject signature,
 org.bouncycastle.cert.X509AttributeCertificateHolder attributeCertificate,
 Set<TrustAnchor> trustAnchors)