public static final class AttestationTrustSource.TrustRootsResult
extends java.lang.Object
This primarily consists of a set of trust root certificates - see trustRoots(Set) - but may also:
CertStore of additional CRLs and/or intermediate certificates to use
during certificate path validation - see certStore(CertStore);
enableRevocationChecking(boolean); and/or
policyTreeValidator(Predicate).
| Modifier and Type | Class and Description |
|---|---|
static class |
AttestationTrustSource.TrustRootsResult.TrustRootsResultBuilder |
| Modifier and Type | Method and Description |
|---|---|
static AttestationTrustSource.TrustRootsResult.TrustRootsResultBuilder.Step1 |
builder() |
boolean |
equals(java.lang.Object o) |
java.util.Optional<java.security.cert.CertStore> |
getCertStore()
A
CertStore of additional CRLs and/or intermediate certificates to use during
certificate path validation, if any. |
java.util.Optional<java.util.function.Predicate<java.security.cert.PolicyNode>> |
getPolicyTreeValidator()
If non-null, the PolicyQualifiersRejected flag will be set to false during certificate path
validation.
|
@NonNull java.util.Set<java.security.cert.X509Certificate> |
getTrustRoots()
A set of attestation root certificates trusted to certify the relevant attestation statement.
|
int |
hashCode() |
boolean |
isEnableRevocationChecking()
Whether certificate revocation should be checked during certificate path validation.
|
AttestationTrustSource.TrustRootsResult.TrustRootsResultBuilder |
toBuilder() |
java.lang.String |
toString() |
public java.util.Optional<java.security.cert.CertStore> getCertStore()
CertStore of additional CRLs and/or intermediate certificates to use during
certificate path validation, if any. This will not be used if trustRoots is empty.
Any certificates included in this CertStore are NOT considered trusted; they will
be trusted only if they chain to any of the trustRoots.
The default is null.
public java.util.Optional<java.util.function.Predicate<java.security.cert.PolicyNode>> getPolicyTreeValidator()
PKIXParameters.setPolicyQualifiersRejected(boolean).
The given Predicate will be used to validate the policy tree. The Predicate should return true if the policy tree is acceptable, and false
otherwise.
Depending on your "PKIX" JCA provider configuration, this may be required if
any certificate in the certificate path contains a certificate policies extension marked
critical. If this is not set, then such a certificate will be rejected by the certificate
path validator from the default provider.
Consult the Java
PKI Programmer's Guide for how to use the PolicyNode argument of the Predicate.
The default is null.
public static AttestationTrustSource.TrustRootsResult.TrustRootsResultBuilder.Step1 builder()
@NonNull public @NonNull java.util.Set<java.security.cert.X509Certificate> getTrustRoots()
public boolean isEnableRevocationChecking()
public AttestationTrustSource.TrustRootsResult.TrustRootsResultBuilder toBuilder()
public boolean equals(java.lang.Object o)
equals in class java.lang.Objectpublic int hashCode()
hashCode in class java.lang.Objectpublic java.lang.String toString()
toString in class java.lang.Object