984         builderParams.setAnyPolicyInhibited(params.anyPolicyInhibited());

   984         builderParams.setAnyPolicyInhibited(params.anyPolicyInhibited());

   985         // Policy qualifiers must be rejected, since we don't have

   985         // Policy qualifiers must be rejected, since we don't have

   986         // any way to convey them back to the application.

   986         // any way to convey them back to the application.

   987         // That's the default, so no need to write code.

   987         // That's the default, so no need to write code.

   988         builderParams.setDate(params.date());

   988         builderParams.setDate(params.date());

   992         builderParams.setSigProvider(params.sigProvider());

   990         builderParams.setSigProvider(params.sigProvider());

   993 

   991 

   994         // Skip revocation during this build to detect circular

   992         // Skip revocation during this build to detect circular

   995         // references. But check revocation afterwards, using the

   993         // references. But check revocation afterwards, using the

   996         // key (or any other that works).

   994         // key (or any other that works).

  1114                      -1, BasicReason.UNDETERMINED_REVOCATION_STATUS);

  1112                      -1, BasicReason.UNDETERMINED_REVOCATION_STATUS);

  1115             }

  1113             }

  1116         }

  1114         }

  1117     }

  1115     }

  1118 

  1116 

  1128     /*

  1117     /*

  1129      * This inner class extends the X509CertSelector to add an additional

  1118      * This inner class extends the X509CertSelector to add an additional

  1130      * check to make sure the subject public key isn't on a particular list.

  1119      * check to make sure the subject public key isn't on a particular list.

  1131      * This class is used by buildToNewKey() to make sure the builder doesn't

  1120      * This class is used by buildToNewKey() to make sure the builder doesn't

  1132      * end up with a CertPath to a public key that has already been rejected.

  1121      * end up with a CertPath to a public key that has already been rejected.