0N/A/*
2362N/A * Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.
0N/A * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
0N/A *
0N/A * This code is free software; you can redistribute it and/or modify it
0N/A * under the terms of the GNU General Public License version 2 only, as
2362N/A * published by the Free Software Foundation. Oracle designates this
0N/A * particular file as subject to the "Classpath" exception as provided
2362N/A * by Oracle in the LICENSE file that accompanied this code.
0N/A *
0N/A * This code is distributed in the hope that it will be useful, but WITHOUT
0N/A * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
0N/A * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
0N/A * version 2 for more details (a copy is included in the LICENSE file that
0N/A * accompanied this code).
0N/A *
0N/A * You should have received a copy of the GNU General Public License version
0N/A * 2 along with this work; if not, write to the Free Software Foundation,
0N/A * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
0N/A *
2362N/A * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
2362N/A * or visit www.oracle.com if you need additional information or have any
2362N/A * questions.
0N/A */
0N/A
0N/Apackage sun.security.provider.certpath;
0N/A
3063N/Aimport java.security.cert.Certificate;
3063N/Aimport java.security.cert.X509Certificate;
3063N/Aimport java.security.cert.CertPathValidatorException;
3063N/Aimport java.security.cert.PKIXCertPathChecker;
0N/Aimport java.util.Set;
0N/Aimport java.util.Collection;
0N/Aimport sun.security.util.Debug;
0N/Aimport sun.security.util.UntrustedCertificates;
0N/A
0N/A/**
0N/A * A <code>PKIXCertPathChecker</code> implementation to check whether a
0N/A * specified certificate is distrusted.
0N/A *
0N/A * @see PKIXCertPathChecker
0N/A * @see PKIXParameters
0N/A */
0N/Afinal public class UntrustedChecker extends PKIXCertPathChecker {
0N/A
0N/A private static final Debug debug = Debug.getInstance("certpath");
0N/A
0N/A /**
0N/A * Default Constructor
0N/A */
0N/A public UntrustedChecker() {
0N/A // blank
0N/A }
0N/A
0N/A @Override
0N/A public void init(boolean forward) throws CertPathValidatorException {
0N/A // Note that this class supports both forward and reverse modes.
0N/A }
0N/A
0N/A @Override
0N/A public boolean isForwardCheckingSupported() {
0N/A // Note that this class supports both forward and reverse modes.
0N/A return true;
0N/A }
0N/A
0N/A @Override
0N/A public Set<String> getSupportedExtensions() {
0N/A return null;
0N/A }
0N/A
0N/A @Override
0N/A public void check(Certificate cert,
0N/A Collection<String> unresolvedCritExts)
0N/A throws CertPathValidatorException {
0N/A
0N/A X509Certificate currCert = (X509Certificate)cert;
0N/A
0N/A if (UntrustedCertificates.isUntrusted(currCert)) {
0N/A if (debug != null) {
0N/A debug.println("UntrustedChecker: untrusted certificate " +
0N/A currCert.getSubjectX500Principal());
0N/A }
0N/A
0N/A throw new CertPathValidatorException(
0N/A "Untrusted certificate: " + currCert.getSubjectX500Principal());
0N/A }
0N/A }
0N/A}
0N/A
0N/A