corda / com.r3.corda.networkmanage.common / CertPathChecker

CertPathChecker

class CertPathChecker

This certificate path checkers validates the certificate path by checking whether at least one path consists of the certificate type from the set of valid ones and ends with the root certificate passed in rootCert. Additionally, there is a support for the certificate revocation status validation that can be enabled by setting the checkRevocation flag.

Constructors

<init>

CertPathChecker(rootCert: X509Certificate, checkRevocation: Boolean = false)

This certificate path checkers validates the certificate path by checking whether at least one path consists of the certificate type from the set of valid ones and ends with the root certificate passed in rootCert. Additionally, there is a support for the certificate revocation status validation that can be enabled by setting the checkRevocation flag.

Functions

check

fun check(legalIdentitiesCertPaths: List<CertPath>, vararg validCertRoles: <ERROR CLASS>): Unit

Walks through the provided certificate chain and asserts that at least one certificate in the chain has a role matching of the provided validCertRoles.

validate

fun CertPath.validate(trustAnchor: TrustAnchor, checkRevocation: Boolean = false): PKIXCertPathValidatorResult