Package dev.sigstore.trustroot

Class CertificateAuthority

java.lang.Object

dev.sigstore.trustroot.CertificateAuthority

@Immutable
public abstract class CertificateAuthority
extends java.lang.Object

Constructor Summary

Constructors

Constructor	Description
CertificateAuthority()

Method Summary

Modifier and Type	Method	Description
java.security.cert.TrustAnchor	asTrustAnchor()
static java.util.List<CertificateAuthority>	find(java.util.List<CertificateAuthority> all, java.time.Instant time)	Find a CA by validity time, users of this method will need to then compare the key in the leaf to find the exact CA to validate against
static CertificateAuthority	from(CertificateAuthority proto)
abstract java.security.cert.CertPath	getCertPath()
abstract Subject	getSubject()
abstract java.net.URI	getUri()
abstract ValidFor	getValidFor()
boolean	isCurrent()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateAuthority

public CertificateAuthority()

Method Detail

getCertPath

public abstract java.security.cert.CertPath getCertPath()

getUri

public abstract java.net.URI getUri()

getValidFor

public abstract ValidFor getValidFor()

getSubject

public abstract Subject getSubject()

isCurrent

public boolean isCurrent()

asTrustAnchor

@Lazy
public java.security.cert.TrustAnchor asTrustAnchor()
                                             throws java.security.cert.CertificateException,
                                                    java.security.InvalidAlgorithmParameterException

Throws:

java.security.cert.CertificateException

java.security.InvalidAlgorithmParameterException

from

public static CertificateAuthority from(CertificateAuthority proto)
                                 throws java.security.cert.CertificateException

Throws:

java.security.cert.CertificateException

find

public static java.util.List<CertificateAuthority> find(java.util.List<CertificateAuthority> all,
                                                        java.time.Instant time)

Find a CA by validity time, users of this method will need to then compare the key in the leaf to find the exact CA to validate against

Parameters:

time - the time the CA was expected to be valid (usually tlog entry time)

Returns:

a list of CAs that were valid at time