org.apache.cxf.transport.https
Class CertConstraints

java.lang.Object
  org.apache.cxf.transport.https.CertConstraints

public class CertConstraints
extends java.lang.Object

This class represents a set of constraints that can be placed on an X.509 certificate, in the form of a regular expression on a SubjectDN or IssuerDN. A CertConstraints object is initialized using a CertificateConstraintsType, which has a definition in schema and is so generated.

Nested Class Summary

static class

CertConstraints.Combinator

Constructor Summary

CertConstraints(java.util.List<java.lang.String> subjectConstraints, CertConstraints.Combinator subjectConstraintsCombinator, java.util.List<java.lang.String> issuerConstraints, CertConstraints.Combinator issuerConstraintsCombinator)
Create a CertificateConstraints from a CertificateConstraintsType specification

Method Summary

boolean

matches(java.security.cert.X509Certificate cert)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertConstraints

public CertConstraints(java.util.List<java.lang.String> subjectConstraints,
                       CertConstraints.Combinator subjectConstraintsCombinator,
                       java.util.List<java.lang.String> issuerConstraints,
                       CertConstraints.Combinator issuerConstraintsCombinator)
                throws java.util.regex.PatternSyntaxException

Create a CertificateConstraints from a CertificateConstraintsType specification

Throws:

java.util.regex.PatternSyntaxException

Method Detail

matches

public boolean matches(java.security.cert.X509Certificate cert)

Returns:

true if the certificate's SubjectDN matches the constraints defined in the subject DNConstraints and the certificate's IssuerDN matches the issuer DNConstraints; false, otherwise