Class SigningPolicyChecker

  • All Implemented Interfaces:
    CertificateChecker

    public class SigningPolicyChecker
    extends java.lang.Object
    implements CertificateChecker
    This checks to make sure the Distinguished Name in the certificate is valid according to the signing policy.
    • Constructor Detail

    • Method Detail

      • invoke

        public void invoke​(java.security.cert.X509Certificate cert,
                           GSIConstants.CertificateType certType)
                    throws java.security.cert.CertPathValidatorException
        Validate DN against the signing policy
        Specified by:
        invoke in interface CertificateChecker
        Parameters:
        cert - The certificate to check.
        certType - The type of certificate to check.
        Throws:
        java.security.cert.CertPathValidatorException - if the certificate is invalid according to the signing policy.
      • requireSigningPolicyCheck

        private boolean requireSigningPolicyCheck​(GSIConstants.CertificateType certType)
        if a certificate is not a CA or if it is not a proxy, return true.
        Parameters:
        certType - The type of Certificate being queried.
        Returns:
        True if the CertificateType requires a Signing Policy check.