1 /*

     2  * Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.  Oracle designates this

     8  * particular file as subject to the "Classpath" exception as provided

     9  * by Oracle in the LICENSE file that accompanied this code.

    10  *

    11  * This code is distributed in the hope that it will be useful, but WITHOUT

    12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    14  * version 2 for more details (a copy is included in the LICENSE file that

    15  * accompanied this code).

    16  *

    17  * You should have received a copy of the GNU General Public License version

    18  * 2 along with this work; if not, write to the Free Software Foundation,

    19  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    20  *

    21  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    22  * or visit www.oracle.com if you need additional information or have any

    23  * questions.

    24  */

    25 

    26 package sun.security.util;

    27 

    28 import java.security.Timestamp;

    29 import java.security.cert.X509Certificate;

    30 import java.util.Date;

    31 

    32 /**

    33  * This class is a wrapper for keeping state and passing objects between PKIX,

    34  * AlgorithmChecker, and DisabledAlgorithmConstraints.

    35  */

    36 public class CertConstraintParameters {

    37     // A certificate being passed to check against constraints.

    38     private final X509Certificate cert;

    39     // This is true if the trust anchor in the certificate chain matches a cert

    40     // in AnchorCertificates

    41     private final boolean trustedMatch;

    42     // PKIXParameter date

    43     private final Date pkixDate;

    44     // Timestamp of the signed JAR file

    45     private final Timestamp jarTimestamp;

    46 

    47     public CertConstraintParameters(X509Certificate c, boolean match,

    48             Date pkixdate, Timestamp jarTime) {

    49         cert = c;

    50         trustedMatch = match;

    51         pkixDate = pkixdate;

    52         jarTimestamp = jarTime;

    53     }

    54 

    55     public CertConstraintParameters(X509Certificate c) {

    56         this(c, false, null, null);

    57     }

    58 

    59     // Returns if the trust anchor has a match if anchor checking is enabled.

    60     public boolean isTrustedMatch() {

    61         return trustedMatch;

    62     }

    63 

    64     public X509Certificate getCertificate() {

    65         return cert;

    66     }

    67 

    68     public Date getPKIXParamDate() {

    69         return pkixDate;

    70     }

    71 

    72     public Timestamp getJARTimestamp() {

    73         return jarTimestamp;

    74     }

    75 

    76 }