Package eu.europa.esig.dss.pki.x509.aia

Class PKIAIASource

java.lang.Object
eu.europa.esig.dss.pki.x509.aia.PKIAIASource
All Implemented Interfaces:
AIASource, Serializable
public class PKIAIASource extends Object implements AIASource
Implementation of AIASource used to return a list of CA issuers for the provided CertificateToken, available in the current PKI CertEntityRepository.
See Also:

  • Constructor Details

    • PKIAIASource

      public PKIAIASource(CertEntityRepository<? extends CertEntity> certEntityRepository)
      Default constructor to instantiate the PKIAIASource with the given PKI CertEntityRepository
      Parameters:
      certEntityRepository - CertEntityRepository managing the PKI entities

  • Method Details

    • setCompleteCertificateChain

      public void setCompleteCertificateChain(boolean completeCertificateChain)
      Sets whether a complete certificate chain should be returned by the current instance. If set to TRUE, returns a complete certificate chain for the given certificate token. If set to FALSE, returns only the certificate token's issuer certificate. Default: TRUE (returns complete certificate chain)
      Parameters:
      completeCertificateChain - whether a complete certificate chain should be returned

    • getCertificatesByAIA

      public Set<CertificateToken> getCertificatesByAIA(CertificateToken certificateToken)
      Description copied from interface: AIASource
      Loads a set of CertificateTokens accessed by AIA URIs from the provided certificateToken
      Specified by:
      getCertificatesByAIA in interface AIASource
      Parameters:
      certificateToken - CertificateToken to get issuer candidates for
      Returns:
      a set of issuer candidates accessed by AIA URIs

    • canGenerate

      protected boolean canGenerate(CertificateToken certificateToken)
      Returns whether the current implementation is able to produce a CA issuers certificate chain for the given certificateToken
      Parameters:
      certificateToken - CertificateToken to produce a CRL for
      Returns:
      TRUE if the current implementation is able to produce a CA issuers certificate chain for the given certificate, FALSE otherwise

    • getCertificateChain

      protected List<CertificateToken> getCertificateChain(CertificateToken certificateToken)
      Returns a certificate chain for the given certificateToken
      Parameters:
      certificateToken - CertificateToken to get certificate chain for
      Returns:
      a list of CertificateTokens

    • getCertificateIssuer

      protected CertificateToken getCertificateIssuer(CertificateToken certificateToken)
      Returns issuer of the certificateToken
      Parameters:
      certificateToken - CertificateToken to get issuer for
      Returns:
      CertificateToken issuer certificate token, if found

    • getCertEntity

      protected CertEntity getCertEntity(CertificateToken certificateToken)
      Returns a cert entity for the corresponding eu.europa.esig.dss.model.x509.CertificateToken
      Parameters:
      certificateToken - CertificateToken to get the corresponding cert entity
      Returns:
      CertEntity