jdk/src/share/classes/sun/security/provider/certpath/PKIXCertPathValidator.java
changeset 8395 29afb3ec47e2
parent 8163 d9bcc1208691
child 10336 0bb1999251f8
child 11900 9b1d5bef8038
equal deleted inserted replaced
8394:49215a09f282 8395:29afb3ec47e2
   229         }
   229         }
   230 
   230 
   231         AdaptableX509CertSelector issuerSelector =
   231         AdaptableX509CertSelector issuerSelector =
   232                         new AdaptableX509CertSelector();
   232                         new AdaptableX509CertSelector();
   233 
   233 
   234         // check trusted certificate's key usage
       
   235         boolean[] usages = trustedCert.getKeyUsage();
       
   236         if (usages != null) {
       
   237             usages[5] = true;    // keyCertSign
       
   238             issuerSelector.setKeyUsage(usages);
       
   239         }
       
   240 
       
   241         // check trusted certificate's subject
   234         // check trusted certificate's subject
   242         issuerSelector.setSubject(firstCert.getIssuerX500Principal());
   235         issuerSelector.setSubject(firstCert.getIssuerX500Principal());
   243 
   236 
   244         // check the validity period
   237         // check the validity period
   245         issuerSelector.setValidityPeriod(firstCert.getNotBefore(),
   238         issuerSelector.setValidityPeriod(firstCert.getNotBefore(),