/*

 * Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package java.security.cert;

import java.security.PublicKey;

/**

 * This class represents the successful result of the PKIX certification

 * path validation algorithm.

 *

 * <p>Instances of {@code PKIXCertPathValidatorResult} are returned by the

 * {@link CertPathValidator#validate validate} method of

 * {@code CertPathValidator} objects implementing the PKIX algorithm.

 *

 * <p> All {@code PKIXCertPathValidatorResult} objects contain the

 * valid policy tree and subject public key resulting from the

 * validation algorithm, as well as a {@code TrustAnchor} describing

 * the certification authority (CA) that served as a trust anchor for the

 * certification path.

 * <p>

 * <b>Concurrent Access</b>

 * <p>

 * Unless otherwise specified, the methods defined in this class are not

 * thread-safe. Multiple threads that need to access a single

 * object concurrently should synchronize amongst themselves and

 * provide the necessary locking. Multiple threads each manipulating

 * separate objects need not synchronize.

 *

 * @see CertPathValidatorResult

 *

 * @since       1.4

 * @author      Yassir Elley

 * @author      Sean Mullan

 */

public class PKIXCertPathValidatorResult implements CertPathValidatorResult {

    private TrustAnchor trustAnchor;

    private PolicyNode policyTree;

    private PublicKey subjectPublicKey;

    /**

     * Creates an instance of {@code PKIXCertPathValidatorResult}

     * containing the specified parameters.

     *

     * @param trustAnchor a {@code TrustAnchor} describing the CA that

     * served as a trust anchor for the certification path

     * @param policyTree the immutable valid policy tree, or {@code null}

     * if there are no valid policies

     * @param subjectPublicKey the public key of the subject

     * @throws NullPointerException if the {@code subjectPublicKey} or

     * {@code trustAnchor} parameters are {@code null}

     */

    public PKIXCertPathValidatorResult(TrustAnchor trustAnchor,

        PolicyNode policyTree, PublicKey subjectPublicKey)

    {

        if (subjectPublicKey == null)

            throw new NullPointerException("subjectPublicKey must be non-null");

        if (trustAnchor == null)

            throw new NullPointerException("trustAnchor must be non-null");

        this.trustAnchor = trustAnchor;

        this.policyTree = policyTree;

        this.subjectPublicKey = subjectPublicKey;

    }

    /**

     * Returns the {@code TrustAnchor} describing the CA that served

     * as a trust anchor for the certification path.

     *

     * @return the {@code TrustAnchor} (never {@code null})

     */

    public TrustAnchor getTrustAnchor() {

        return trustAnchor;

    }

    /**

     * Returns the root node of the valid policy tree resulting from the

     * PKIX certification path validation algorithm. The

     * {@code PolicyNode} object that is returned and any objects that

     * it returns through public methods are immutable.

     *

     * <p>Most applications will not need to examine the valid policy tree.

     * They can achieve their policy processing goals by setting the

     * policy-related parameters in {@code PKIXParameters}. However, more

     * sophisticated applications, especially those that process policy

     * qualifiers, may need to traverse the valid policy tree using the

     * {@link PolicyNode#getParent PolicyNode.getParent} and

     * {@link PolicyNode#getChildren PolicyNode.getChildren} methods.

     *

     * @return the root node of the valid policy tree, or {@code null}

     * if there are no valid policies

     */

    public PolicyNode getPolicyTree() {

        return policyTree;

    }

    /**

     * Returns the public key of the subject (target) of the certification

     * path, including any inherited public key parameters if applicable.

     *

     * @return the public key of the subject (never {@code null})

     */

    public PublicKey getPublicKey() {

        return subjectPublicKey;

    }

    /**

     * Returns a copy of this object.

     *

     * @return the copy

     */

    public Object clone() {

        try {

            return super.clone();

        } catch (CloneNotSupportedException e) {

            /* Cannot happen */

            throw new InternalError(e.toString(), e);

        }

    }

    /**

     * Return a printable representation of this

     * {@code PKIXCertPathValidatorResult}.

     *

     * @return a {@code String} describing the contents of this

     *         {@code PKIXCertPathValidatorResult}

     */

    public String toString() {

        StringBuilder sb = new StringBuilder();

        sb.append("PKIXCertPathValidatorResult: [\n");

        sb.append("  Trust Anchor: " + trustAnchor.toString() + "\n");

        sb.append("  Policy Tree: " + String.valueOf(policyTree) + "\n");

        sb.append("  Subject Public Key: " + subjectPublicKey + "\n");

        sb.append("]");

        return sb.toString();

    }

}