Class ValidationPolicyWithCryptographicSuite
java.lang.Object
eu.europa.esig.dss.validation.policy.ValidationPolicyWithCryptographicSuite
- All Implemented Interfaces:
ValidationPolicy
This class wraps a provided
eu.europa.esig.dss.model.policy.ValidationPolicy
and
eu.europa.esig.dss.model.policy.CryptographicSuite
s, whether applicable.
The class manages the returned data.-
Constructor Summary
ConstructorsConstructorDescriptionValidationPolicyWithCryptographicSuite
(ValidationPolicy validationPolicy) Default constructor to create a validation policy with cryptographic suites wrapper -
Method Summary
Modifier and TypeMethodDescriptionReturns AcceptablePDFAProfiles constraint if present in the policy, null otherwisegetAcceptableRevocationDataFoundConstraint
(Context context, SubContext subContext) Returns acceptable revocation data available constraintReturns AcceptedContainerTypes constraint if present in the policy, null otherwiseReturns AcceptedMimeTypeContents constraint if present in the policy, null otherwiseReturns AcceptedZipComments constraint if present in the policy, null otherwiseReturns AllFilesSigned constraint if present in the policy, null otherwisegetAnnotationChangesConstraint
(Context context) This constraint checks whether a PDF document contains annotation creation, modification or deletion modifications after the current signature's revisionsgetArchiveTimeStampConstraint
(Context context) Indicates if the presence of unsigned property: archive-time-stamp should be checked.Returns timestamp AtsHashIndex constraint if present in the policy, null otherwiseThis constraint checks if the certificate is not expired on best-signature-timegetByteRangeAllDocumentConstraint
(Context context) This constraint checks if ByteRange is valid for all signatures and document timestamps within PDF NOTE: applicable only for PAdESgetByteRangeCollisionConstraint
(Context context) This constraint checks if ByteRange does not collide with other signature byte ranges NOTE: applicable only for PAdESgetByteRangeConstraint
(Context context) This constraint checks if ByteRange dictionary is valid NOTE: applicable only for PAdESgetCertificateAuthorityInfoAccessPresentConstraint
(Context context, SubContext subContext) Returns CertificateAuthorityInfoAccessPresent constraint if present in the policy, null otherwisegetCertificateCAConstraint
(Context context, SubContext subContext) Returns certificate CA constraintgetCertificateCommonNameConstraint
(Context context, SubContext subContext) Returns CertificateCommonName constraint if present in the policy, null otherwisegetCertificateCountryConstraint
(Context context, SubContext subContext) Returns CertificateCountry constraint if present in the policy, null otherwisegetCertificateCryptographicConstraint
(Context context, SubContext subContext) This method creates theCryptographicSuite
corresponding to the context parameter.getCertificateEmailConstraint
(Context context, SubContext subContext) Returns CertificateEmail constraint if present in the policy, null otherwisegetCertificateExtendedKeyUsageConstraint
(Context context, SubContext subContext) Returns certificate extended key usage constraintgetCertificateForbiddenExtensionsConstraint
(Context context, SubContext subContext) Returns certificate forbidden extensions constraintgetCertificateGivenNameConstraint
(Context context, SubContext subContext) Returns CertificateGivenName constraint if present in the policy, null otherwisegetCertificateIssuedToLegalPersonConstraint
(Context context, SubContext subContext) Indicates if the end user certificate used in validating the signature is issued to a legal person.getCertificateIssuedToNaturalPersonConstraint
(Context context, SubContext subContext) Indicates if the end user certificate used in validating the signature is issued to a natural person.getCertificateIssuerNameConstraint
(Context context, SubContext subContext) Returns certificate IssuerName constraintgetCertificateKeyUsageConstraint
(Context context, SubContext subContext) Returns certificate key usage constraintgetCertificateLocalityConstraint
(Context context, SubContext subContext) Returns CertificateLocality constraint if present in the policy, null otherwisegetCertificateMaxPathLengthConstraint
(Context context, SubContext subContext) Returns certificate MaxPathLength constraintgetCertificateMinQcEuLimitValueConstraint
(Context context, SubContext subContext) Indicates the minimal allowed QcEuLimitValue transaction limit for which the end user certificate used for the signature can be used.getCertificateMinQcEuRetentionPeriodConstraint
(Context context, SubContext subContext) Indicates the minimal allowed QC retention period for material information relevant to the use of the end user certificate used for the signature.getCertificateNameConstraintsConstraint
(Context context, SubContext subContext) Returns certificate NameConstraints constraintgetCertificateNoRevAvailConstraint
(Context context, SubContext subContext) Returns certificate NoRevAvail constraintgetCertificateNotExpiredConstraint
(Context context, SubContext subContext) Returns certificate's validity range constraintgetCertificateNotOnHoldConstraint
(Context context, SubContext subContext) Returns certificate's not onHold constraintgetCertificateNotRevokedConstraint
(Context context, SubContext subContext) Returns certificate's not revoked constraintgetCertificateNotSelfSignedConstraint
(Context context, SubContext subContext) Returns certificate's not self-signed constraintgetCertificateOrganizationIdentifierConstraint
(Context context, SubContext subContext) Returns CertificateOrganizationIdentifier constraint if present in the policy, null otherwisegetCertificateOrganizationNameConstraint
(Context context, SubContext subContext) Returns CertificateOrganizationName constraint if present in the policy, null otherwisegetCertificateOrganizationUnitConstraint
(Context context, SubContext subContext) Returns CertificateOrganizationUnit constraint if present in the policy, null otherwisegetCertificatePolicyIdsConstraint
(Context context, SubContext subContext) Returns CertificatePolicyIds constraint if present in the policy, null otherwisegetCertificatePolicyQualificationIdsConstraint
(Context context, SubContext subContext) Indicates if the CertificatePolicyIds declare the certificate as qualified.getCertificatePolicySupportedByQSCDIdsConstraint
(Context context, SubContext subContext) Indicates if the CertificatePolicyIds mandate the certificate as to be supported by a secure signature creation device (QSCD).getCertificatePolicyTreeConstraint
(Context context, SubContext subContext) Returns certificate PolicyTree constraintgetCertificatePS2DQcCompetentAuthorityIdConstraint
(Context context, SubContext subContext) Indicates the acceptable QC PS2D ids for the certificate used for a signature.getCertificatePS2DQcCompetentAuthorityNameConstraint
(Context context, SubContext subContext) Indicates the acceptable QC PS2D names for the certificate used for a signature.getCertificatePS2DQcTypeRolesOfPSPConstraint
(Context context, SubContext subContext) Indicates the acceptable QC PS2D roles for the certificate used for a signature.getCertificatePseudonymConstraint
(Context context, SubContext subContext) Returns CertificatePseudonym constraint if present in the policy, null otherwisegetCertificatePseudoUsageConstraint
(Context context, SubContext subContext) Returns CertificatePseudoUsage constraint if present in the policy, null otherwisegetCertificateQcCCLegislationConstraint
(Context context, SubContext subContext) Indicates the country or set of countries under the legislation of which the certificate is issued as a qualified certificate is present.getCertificateQCComplianceConstraint
(Context context, SubContext subContext) Indicates if the end user certificate used in validating the signature is QC Compliant.getCertificateQcEuLimitValueCurrencyConstraint
(Context context, SubContext subContext) Indicates the allowed currency used to specify certificate's QCLimitValue statement.getCertificateQcEuPDSLocationConstraint
(Context context, SubContext subContext) Indicates the location or set of locations of PKI Disclosure Statements.getCertificateQcSSCDConstraint
(Context context, SubContext subContext) Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).getCertificateQcTypeConstraint
(Context context, SubContext subContext) Indicates the certificate is claimed as a certificate of a particular type.getCertificateRevocationInfoAccessPresentConstraint
(Context context, SubContext subContext) Returns CertificateRevocationInfoAccessPresent constraint if present in the policy, null otherwisegetCertificateSelfSignedConstraint
(Context context, SubContext subContext) Returns certificate's self-signed constraintgetCertificateSemanticsIdentifierConstraint
(Context context, SubContext subContext) Indicates the certificate's QCStatement contains an acceptable semantics identifier.getCertificateSerialNumberConstraint
(Context context, SubContext subContext) Returns CertificateSerialNumber constraint if present in the policy, null otherwisegetCertificateSignatureConstraint
(Context context, SubContext subContext) Returns certificate's signature constraintgetCertificateStateConstraint
(Context context, SubContext subContext) Returns CertificateState constraint if present in the policy, null otherwisegetCertificateSunsetDateConstraint
(Context context, SubContext subContext) Returns certificate's sunset date constraintgetCertificateSupportedCriticalExtensionsConstraint
(Context context, SubContext subContext) Returns certificate supported critical extensions constraintgetCertificateSurnameConstraint
(Context context, SubContext subContext) Returns CertificateSurname constraint if present in the policy, null otherwisegetCertificateTitleConstraint
(Context context, SubContext subContext) Returns CertificateTitle constraint if present in the policy, null otherwisegetCertifiedRolesConstraint
(Context context) Return the mandated signer role.getClaimedRoleConstraint
(Context context) Indicates if the unsigned property: claimed-role should be checked.Indicates if the signed property: commitment-type-indication should be checked.getContentHintsConstraint
(Context context) Indicates if the signed property: content-hints should be checked.getContentIdentifierConstraint
(Context context) Indicates if the signed property: content-identifier should be checked.getContentTimeStampConstraint
(Context context) Indicates if the signed property: content-time-stamp should be checked.Indicates if the signed property: content-time-stamp message-imprint should be checked.getContentTypeConstraint
(Context context) Indicates if the signed property: content-type should be checked.getCounterSignatureConstraint
(Context context) Returns CounterSignature constraint if present in the policy, null otherwisegetCRLNextUpdatePresentConstraint
(Context context, SubContext subContext) Returns CRL's nextUpdate present constraintgetDocMDPConstraint
(Context context) This constraint checks if a document contains changes after a signature, against permission rules identified within a /DocMDP dictionarygetDocumentTimeStampConstraint
(Context context) Indicates if the presence of unsigned property: document timestamp should be checked.getEllipticCurveKeySizeConstraint
(Context context) This constraint checks whether a JWA signature has a valid elliptic curve key sizeReturns evidence record ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwiseThis method returns cryptographic constraints for validation of Evidence RecordReturns DataObjectExistence constraint if present in the policy, null otherwiseReturns DataObjectFound constraint if present in the policy, null otherwiseReturns DataObjectGroup constraint if present in the policy, null otherwiseReturns DataObjectIntact constraint if present in the policy, null otherwiseReturns HashTreeRenewal constraint if present in the policy, null otherwiseReturns SignedFilesCovered constraint if present in the policy, null otherwiseReturns whether the evidence record is valid (passed a complete evidence record validation process).getFieldMDPConstraint
(Context context) This constraint checks if a document contains changes after a signature, against permission rules identified within a /FieldMDP dictionaryReturns FilenameAdherence constraint if present in the policy, null otherwisegetFormFillChangesConstraint
(Context context) This constraint checks whether a PDF document contains form fill or signing modifications after the current signature's revisionsReturns FullScope constraint if present in the policy, null otherwisegetKeyIdentifierMatch
(Context context) Indicates if the value of 'kid' (key identifier) header parameter matches the signing-certificate used to create the signaturegetKeyIdentifierPresent
(Context context) Indicates if the 'kid' (key identifier) header parameter is present within the protected header of the signaturegetLTALevelTimeStampConstraint
(Context context) Indicates if the presence of unsigned property: archive-time-stamp or document timestamp covering the validation data If LTALevelTimeStamp element is absent within the constraint file then null is returned.Indicates if names of all matching documents match to the manifest entry namesIndicates if the manifested document is foundIndicates if all manifest entries have been foundIndicates if the manifested document is intactReturns ManifestFilePresent constraint if present in the policy, null otherwiseIndicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked.Returns MimeTypeFilePresent constraint if present in the policy, null otherwisegetOCSPNextUpdatePresentConstraint
(Context context, SubContext subContext) Returns OCSP's nextUpdate present constraintThe method returns OCSPCertHashMatch constraintThe method returns OCSPCertHashPresent constraintThe method returns OCSPResponderIdMatch constraintReturns PDFACompliant constraint if present in the policy, null otherwisegetPdfAnnotationOverlapConstraint
(Context context) Indicates if a PDF annotation overlapping check should be proceeded.getPdfPageDifferenceConstraint
(Context context) Indicates if a PDF page difference check should be proceeded.This constraint checks if signature dictionary is consistent across PDF revisions.getPdfVisualDifferenceConstraint
(Context context) Indicates if a PDF visual difference check should be proceeded.Returns the policy description.Returns the name of the policy.This constraint requests the presence of the trust anchor in the certificate chain.Indicates if the referenced data is foundgetReferenceDataIntactConstraint
(Context context) Indicates if the referenced data is intactIndicates if the referenced document names match the manifest entry referencesIndicates if the whole certificate chain is covered by the Signing Certificate attribute.The method returns RevocationIssuerKnowsCertificate constraintgetRevocationDataAvailableConstraint
(Context context, SubContext subContext) Returns revocation data available constraintgetRevocationDataSkipConstraint
(Context context, SubContext subContext) Returns RevocationDataSkip constraint if present in the policy, null otherwisegetRevocationFreshnessConstraint
(Context context, SubContext subContext) Returns revocation data's freshness constraintgetRevocationFreshnessNextUpdateConstraint
(Context context, SubContext subContext) Returns revocation data's freshness for nextUpdate check constraintThe method returns RevocationIssuerHasInformationAboutCertificate constraintThe method returns RevocationIssuerKnown constraintgetRevocationIssuerNotExpiredConstraint
(Context context, SubContext subContext) Returns revocation issuer's validity range constraintThe method returns RevocationIssuerValidAtProductionTime constraintReturns RevocationTimeAgainstBestSignatureTime constraint if present in the policy, null otherwiseThe method returns SelfIssuedOCSP constraintgetSigFieldLockConstraint
(Context context) This constraint checks if a document contains changes after a signature, against permission rules identified within a /SigFieldLock dictionaryThis method creates theCryptographicSuite
corresponding to the context parameter.getSignatureDuplicatedConstraint
(Context context) Indicates if the signature is not ambiguousgetSignatureFormatConstraint
(Context context) Returns SignatureFormat constraint if present in the policy, null otherwisegetSignatureIntactConstraint
(Context context) Indicates if the signature is intactgetSignaturePolicyConstraint
(Context context) Indicates if the signature policy should be checked.Indicates if the signature policy validation should be processed.getSignaturePolicyPolicyHashValid
(Context context) Indicates if digest present in a SignaturePolicyIdentifier shall match to the extracted policy contentIndicates if a SignaturePolicyStore unsigned attribute, containing a used policy binaries, presence shall be checkedgetSignatureTimeStampConstraint
(Context context) Indicates if the presence of unsigned property: signature-time-stamp should be checked.Returns SignedFilesPresent constraint if present in the policy, null otherwiseThis constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdESgetSignerLocationConstraint
(Context context) Indicates if the signed property: signer-location should be checked.Indicates if the signing certificate attribute is presentChecks if a used DigestAlgorithm in signing-certificate-reference creation matches the corresponding cryptographic constraintIndicates if the signing certificate reference's digest value matchesIndicates if the signing certificate reference's digest value is presentIndicates if the signing certificate reference's issuer serial matchesIndicates if signing-certificate has been identified.Indicates if the Signing Certificate attribute should be checked against the certificate chain.getSigningDurationRule
(Context context) Indicates if the signed property: signing-time should be checked.getStructuralValidationConstraint
(Context context) Indicates if the structural validation should be checked.The method returns ThisUpdatePresent constraintThis constraint checks if the timestamp order is coherentReturns timestamp ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwiseReturns TimestampDelay constraint if present in the policy, null otherwiseIndicates if the timestamp's TSTInfo.tsa field's value matches the timestamp's issuer distinguishing name when presentIndicates if the timestamp's TSTInfo.tsa field's value and order match the timestamp's issuer distinguishing name when presentIndicates if the timestamp's TSTInfo.tsa field is presentReturns whether the time-stamp is valid (passed either basic signature validation process or past signature validation).getTLevelTimeStampConstraint
(Context context) Indicates if the presence of unsigned property: signature-time-stamp or document timestamp If TLevelTimeStamp element is absent within the constraint file then null is returned.Returns TLFreshness constraint if present in the policy, null otherwiseReturns TLNotExpired constraint if present in the policy, null otherwiseReturns TLStructure constraint if present in the policy, null otherwiseReturns TLVersion constraint if present in the policy, null otherwiseReturns TLWellSigned constraint if present in the policy, null otherwisegetTrustServiceStatusConstraint
(Context context) Returns trusted service status constraintReturns trusted service type identifier constraintgetUndefinedChangesConstraint
(Context context) This constraint checks whether a PDF document contains undefined object modifications after the current signature's revisionsIndicates if the signing certificate is not ambiguously determinesThe method returns UnknownStatus constraintIndicates if the presence of unsigned property: validation data references only timestamp should be checked.Indicates if the presence of unsigned property: validation data timestamp should be checked.Returns the used validation model (default is SHELL).Returns ZipCommentPresent constraint if present in the policy, null otherwiseboolean
Returns if EIDAS constraints present (qualification check shall be performed)void
setCryptographicSuite
(CryptographicSuite cryptographicSuite) This method sets global cryptographic suite, to be applied when no context-specific cryptographic rules are defined.void
setCryptographicSuite
(CryptographicSuite cryptographicSuite, Context context) This method sets cryptographic suite for a specificContext
.void
setCryptographicSuite
(CryptographicSuite cryptographicSuite, Context context, SubContext subContext) This method sets cryptographic suite for a specific combination of aContext
and aSubContext
.toString()
-
Constructor Details
-
ValidationPolicyWithCryptographicSuite
Default constructor to create a validation policy with cryptographic suites wrapper- Parameters:
validationPolicy
-ValidationPolicy
-
-
Method Details
-
setCryptographicSuite
This method sets global cryptographic suite, to be applied when no context-specific cryptographic rules are defined. The provided cryptographic suite will overwrite the current settings for the global cryptographic suite.- Parameters:
cryptographicSuite
-CryptographicSuite
-
setCryptographicSuite
This method sets cryptographic suite for a specificContext
. The provided cryptographic suite will overwrite the current settings only for the defined applicability scope.- Parameters:
cryptographicSuite
-CryptographicSuite
context
-Context
specific context to apply the cryptographic constraints for
-
setCryptographicSuite
public void setCryptographicSuite(CryptographicSuite cryptographicSuite, Context context, SubContext subContext) This method sets cryptographic suite for a specific combination of aContext
and aSubContext
. The provided cryptographic suite will overwrite the current settings only for the defined applicability scope.- Parameters:
cryptographicSuite
-CryptographicSuite
context
-Context
specific context to apply the cryptographic constraints forsubContext
-SubContext
of the selectedcontext
-
getPolicyName
Description copied from interface:ValidationPolicy
Returns the name of the policy.- Specified by:
getPolicyName
in interfaceValidationPolicy
- Returns:
String
-
getPolicyDescription
Description copied from interface:ValidationPolicy
Returns the policy description.- Specified by:
getPolicyDescription
in interfaceValidationPolicy
- Returns:
String
-
getSignaturePolicyConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature policy should be checked. If AcceptablePolicies element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.- Specified by:
getSignaturePolicyConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SigningTime element is present in the constraint file, null otherwise.
-
getSignaturePolicyIdentifiedConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature policy validation should be processed. If SignaturePolicyIdentifier found, but not relevant SignaturePolicy is retrieved, the check fails.- Specified by:
getSignaturePolicyIdentifiedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SignaturePolicy shall be identified
-
getSignaturePolicyStorePresentConstraint
Description copied from interface:ValidationPolicy
Indicates if a SignaturePolicyStore unsigned attribute, containing a used policy binaries, presence shall be checked- Specified by:
getSignaturePolicyStorePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SignaturePolicyStore presence shall be checked
-
getSignaturePolicyPolicyHashValid
Description copied from interface:ValidationPolicy
Indicates if digest present in a SignaturePolicyIdentifier shall match to the extracted policy content- Specified by:
getSignaturePolicyPolicyHashValid
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SignaturePolicyIdentifier digest shall match
-
getStructuralValidationConstraint
Description copied from interface:ValidationPolicy
Indicates if the structural validation should be checked. If StructuralValidation element is absent within the constraint file then null is returned.- Specified by:
getStructuralValidationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if StructuralValidation element is present in the constraint file, null otherwise.
-
getSigningCertificateRefersCertificateChainConstraint
Description copied from interface:ValidationPolicy
Indicates if the Signing Certificate attribute should be checked against the certificate chain. If SigningCertificateRefersCertificateChain element is absent within the constraint file then null is returned.- Specified by:
getSigningCertificateRefersCertificateChainConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SigningCertificateRefersCertificateChain element is present in the constraint file, null otherwise.
-
getReferencesToAllCertificateChainPresentConstraint
Description copied from interface:ValidationPolicy
Indicates if the whole certificate chain is covered by the Signing Certificate attribute. If ReferencesToAllCertificateChainPresent element is absent within the constraint file then null is returned.- Specified by:
getReferencesToAllCertificateChainPresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ReferencesToAllCertificateChainPresent element is present in the constraint file, null otherwise.
-
getSigningCertificateDigestAlgorithmConstraint
Description copied from interface:ValidationPolicy
Checks if a used DigestAlgorithm in signing-certificate-reference creation matches the corresponding cryptographic constraint- Specified by:
getSigningCertificateDigestAlgorithmConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SigningCertificateDigestAlgorithm for a given context element is present in the constraint file, null otherwise.
-
getSigningDurationRule
Description copied from interface:ValidationPolicy
Indicates if the signed property: signing-time should be checked. If SigningTime element is absent within the constraint file then null is returned.- Specified by:
getSigningDurationRule
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SigningTime element is present in the constraint file, null otherwise.
-
getContentTypeConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-type should be checked. If ContentType element is absent within the constraint file then null is returned.- Specified by:
getContentTypeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
ValueRule
if ContentType element is present in the constraint file, null otherwise.
-
getContentHintsConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-hints should be checked. If ContentHints element is absent within the constraint file then null is returned.- Specified by:
getContentHintsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
ValueRule
if ContentHints element is present in the constraint file, null otherwise.
-
getContentIdentifierConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-identifier should be checked. If ContentIdentifier element is absent within the constraint file then null is returned.- Specified by:
getContentIdentifierConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
ValueRule
if ContentIdentifier element is present in the constraint file, null otherwise.
-
getMessageDigestOrSignedPropertiesConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked. If the relative element is absent within the constraint file then null is returned.- Specified by:
getMessageDigestOrSignedPropertiesConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if message-digests/SignedProperties element is present in the constraint file, null otherwise.
-
getEllipticCurveKeySizeConstraint
Description copied from interface:ValidationPolicy
This constraint checks whether a JWA signature has a valid elliptic curve key size- Specified by:
getEllipticCurveKeySizeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if EllipticCurveKeySize element is present in the constraint file, null otherwise.
-
getCommitmentTypeIndicationConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: commitment-type-indication should be checked. If CommitmentTypeIndication element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.- Specified by:
getCommitmentTypeIndicationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesRule
if CommitmentTypeIndication element is present in the constraint file, null otherwise.
-
getSignerLocationConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: signer-location should be checked. If SignerLocation element is absent within the constraint file then null is returned.- Specified by:
getSignerLocationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SignerLocation element is present in the constraint file, null otherwise.
-
getContentTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-time-stamp should be checked. If ContentTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getContentTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ContentTimeStamp element is present in the constraint file, null otherwise.
-
getContentTimeStampMessageImprintConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-time-stamp message-imprint should be checked. If ContentTimeStampMessageImprint element is absent within the constraint file then null is returned.- Specified by:
getContentTimeStampMessageImprintConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ContentTimeStampMessageImprint element is present in the constraint file, null otherwise.
-
getClaimedRoleConstraint
Description copied from interface:ValidationPolicy
Indicates if the unsigned property: claimed-role should be checked. If ClaimedRoles element is absent within the constraint file then null is returned.- Specified by:
getClaimedRoleConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesRule
if ClaimedRoles element is present in the constraint file, null otherwise.
-
getCertifiedRolesConstraint
Description copied from interface:ValidationPolicy
Return the mandated signer role.- Specified by:
getCertifiedRolesConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesRule
-
getSignatureCryptographicConstraint
Description copied from interface:ValidationPolicy
This method creates theCryptographicSuite
corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.- Specified by:
getSignatureCryptographicConstraint
in interfaceValidationPolicy
- Parameters:
context
- The context of the signature cryptographic constraints: MainSignature, Timestamp, Revocation- Returns:
CryptographicSuite
if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.
-
getCertificateCryptographicConstraint
public CryptographicSuite getCertificateCryptographicConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
This method creates theCryptographicSuite
corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.- Specified by:
getCertificateCryptographicConstraint
in interfaceValidationPolicy
- Parameters:
context
- The context of the signature cryptographic constraints: MainSignature, Timestamp, RevocationsubContext
- the sub context of the signature cryptographic constraints: EMPTY (signature itself), SigningCertificate, CACertificate- Returns:
CryptographicSuite
if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.
-
getEvidenceRecordCryptographicConstraint
Description copied from interface:ValidationPolicy
This method returns cryptographic constraints for validation of Evidence Record- Specified by:
getEvidenceRecordCryptographicConstraint
in interfaceValidationPolicy
- Returns:
CryptographicSuite
-
getCertificateCAConstraint
Description copied from interface:ValidationPolicy
Returns certificate CA constraint- Specified by:
getCertificateCAConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if CA for a given context element is present in the constraint file, null otherwise.
-
getCertificateIssuerNameConstraint
Description copied from interface:ValidationPolicy
Returns certificate IssuerName constraint- Specified by:
getCertificateIssuerNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if IssuerName for a given context element is present in the constraint file, null otherwise.
-
getCertificateMaxPathLengthConstraint
Description copied from interface:ValidationPolicy
Returns certificate MaxPathLength constraint- Specified by:
getCertificateMaxPathLengthConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if MaxPathLength for a given context element is present in the constraint file, null otherwise.
-
getCertificateKeyUsageConstraint
Description copied from interface:ValidationPolicy
Returns certificate key usage constraint- Specified by:
getCertificateKeyUsageConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if key-usage for a given context element is present in the constraint file, null otherwise.
-
getCertificateExtendedKeyUsageConstraint
public MultiValuesRule getCertificateExtendedKeyUsageConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns certificate extended key usage constraint- Specified by:
getCertificateExtendedKeyUsageConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if extended key-usage for a given context element is present in the constraint file, null otherwise.
-
getCertificatePolicyTreeConstraint
Description copied from interface:ValidationPolicy
Returns certificate PolicyTree constraint- Specified by:
getCertificatePolicyTreeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if PolicyTree for a given context element is present in the constraint file, null otherwise.
-
getCertificateNameConstraintsConstraint
Description copied from interface:ValidationPolicy
Returns certificate NameConstraints constraint- Specified by:
getCertificateNameConstraintsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if NameConstraints for a given context element is present in the constraint file, null otherwise.
-
getCertificateNoRevAvailConstraint
Description copied from interface:ValidationPolicy
Returns certificate NoRevAvail constraint- Specified by:
getCertificateNoRevAvailConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if NoRevAvail for a given context element is present in the constraint file, null otherwise.
-
getCertificateSupportedCriticalExtensionsConstraint
public MultiValuesRule getCertificateSupportedCriticalExtensionsConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns certificate supported critical extensions constraint- Specified by:
getCertificateSupportedCriticalExtensionsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if SupportedCriticalExtensions constraint for a given context element is present in the constraint file,null otherwise.
-
getCertificateForbiddenExtensionsConstraint
public MultiValuesRule getCertificateForbiddenExtensionsConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns certificate forbidden extensions constraint- Specified by:
getCertificateForbiddenExtensionsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if ForbiddenExtensions constraint for a given context element is present in the constraint file,null otherwise.
-
getCertificateNotExpiredConstraint
Description copied from interface:ValidationPolicy
Returns certificate's validity range constraint- Specified by:
getCertificateNotExpiredConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if NotExpired constraint for a given certificate context is present in the constraint file, null otherwise.
-
getCertificateSunsetDateConstraint
Description copied from interface:ValidationPolicy
Returns certificate's sunset date constraint- Specified by:
getCertificateSunsetDateConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if SunsetDate constraint for a given certificate context is present in the constraint file, null otherwise.
-
getProspectiveCertificateChainConstraint
Description copied from interface:ValidationPolicy
This constraint requests the presence of the trust anchor in the certificate chain.- Specified by:
getProspectiveCertificateChainConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ProspectiveCertificateChain element for a given context element is present in the constraint file, null otherwise.
-
getCertificateSignatureConstraint
Description copied from interface:ValidationPolicy
Returns certificate's signature constraint- Specified by:
getCertificateSignatureConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if Signature for a given context element is present in the constraint file, null otherwise.
-
getUnknownStatusConstraint
Description copied from interface:ValidationPolicy
The method returns UnknownStatus constraint- Specified by:
getUnknownStatusConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getThisUpdatePresentConstraint
Description copied from interface:ValidationPolicy
The method returns ThisUpdatePresent constraint- Specified by:
getThisUpdatePresentConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getRevocationIssuerKnownConstraint
Description copied from interface:ValidationPolicy
The method returns RevocationIssuerKnown constraint- Specified by:
getRevocationIssuerKnownConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getRevocationIssuerValidAtProductionTimeConstraint
Description copied from interface:ValidationPolicy
The method returns RevocationIssuerValidAtProductionTime constraint- Specified by:
getRevocationIssuerValidAtProductionTimeConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getRevocationAfterCertificateIssuanceConstraint
Description copied from interface:ValidationPolicy
The method returns RevocationIssuerKnowsCertificate constraint- Specified by:
getRevocationAfterCertificateIssuanceConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getRevocationHasInformationAboutCertificateConstraint
Description copied from interface:ValidationPolicy
The method returns RevocationIssuerHasInformationAboutCertificate constraint- Specified by:
getRevocationHasInformationAboutCertificateConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getOCSPResponseResponderIdMatchConstraint
Description copied from interface:ValidationPolicy
The method returns OCSPResponderIdMatch constraint- Specified by:
getOCSPResponseResponderIdMatchConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getOCSPResponseCertHashPresentConstraint
Description copied from interface:ValidationPolicy
The method returns OCSPCertHashPresent constraint- Specified by:
getOCSPResponseCertHashPresentConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getOCSPResponseCertHashMatchConstraint
Description copied from interface:ValidationPolicy
The method returns OCSPCertHashMatch constraint- Specified by:
getOCSPResponseCertHashMatchConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getSelfIssuedOCSPConstraint
Description copied from interface:ValidationPolicy
The method returns SelfIssuedOCSP constraint- Specified by:
getSelfIssuedOCSPConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
-
getRevocationDataAvailableConstraint
Description copied from interface:ValidationPolicy
Returns revocation data available constraint- Specified by:
getRevocationDataAvailableConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if RevocationDataAvailable for a given context element is present in the constraint file, null otherwise.
-
getAcceptableRevocationDataFoundConstraint
Description copied from interface:ValidationPolicy
Returns acceptable revocation data available constraint- Specified by:
getAcceptableRevocationDataFoundConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if AcceptableRevocationDataFound for a given context element is present in the constraint file, null otherwise.
-
getCRLNextUpdatePresentConstraint
Description copied from interface:ValidationPolicy
Returns CRL's nextUpdate present constraint- Specified by:
getCRLNextUpdatePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if CRLNextUpdatePresent for a given context element is present in the constraint file, null otherwise.
-
getOCSPNextUpdatePresentConstraint
Description copied from interface:ValidationPolicy
Returns OCSP's nextUpdate present constraint- Specified by:
getOCSPNextUpdatePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if OCSPNextUpdatePresent for a given context element is present in the constraint file, null otherwise.
-
getRevocationFreshnessConstraint
Description copied from interface:ValidationPolicy
Returns revocation data's freshness constraint- Specified by:
getRevocationFreshnessConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
DurationRule
if RevocationFreshness for a given context element is present in the constraint file, null otherwise.
-
getRevocationFreshnessNextUpdateConstraint
Description copied from interface:ValidationPolicy
Returns revocation data's freshness for nextUpdate check constraint- Specified by:
getRevocationFreshnessNextUpdateConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if RevocationFreshnessNextUpdate for a given context element is present in the constraint file, null otherwise.
-
getCertificateNotRevokedConstraint
Description copied from interface:ValidationPolicy
Returns certificate's not revoked constraint- Specified by:
getCertificateNotRevokedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if Revoked for a given context element is present in the constraint file, null otherwise.
-
getCertificateNotOnHoldConstraint
Description copied from interface:ValidationPolicy
Returns certificate's not onHold constraint- Specified by:
getCertificateNotOnHoldConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if OnHold for a given context element is present in the constraint file, null otherwise.
-
getRevocationIssuerNotExpiredConstraint
Description copied from interface:ValidationPolicy
Returns revocation issuer's validity range constraint- Specified by:
getRevocationIssuerNotExpiredConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if RevocationIssuerNotExpired constraint for a given certificate context is present in the constraint file, null otherwise.
-
getCertificateNotSelfSignedConstraint
Description copied from interface:ValidationPolicy
Returns certificate's not self-signed constraint- Specified by:
getCertificateNotSelfSignedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if not self-signed for a given context element is present in the constraint file, null otherwise.
-
getCertificateSelfSignedConstraint
Description copied from interface:ValidationPolicy
Returns certificate's self-signed constraint- Specified by:
getCertificateSelfSignedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if self-signed for a given context element is present in the constraint file, null otherwise.
-
getTrustServiceTypeIdentifierConstraint
Description copied from interface:ValidationPolicy
Returns trusted service type identifier constraint- Specified by:
getTrustServiceTypeIdentifierConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if trusted service type identifier for a given context element is present in the constraint file, null otherwise.
-
getTrustServiceStatusConstraint
Description copied from interface:ValidationPolicy
Returns trusted service status constraint- Specified by:
getTrustServiceStatusConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if trusted service status for a given context element is present in the constraint file, null otherwise.
-
getCertificatePolicyIdsConstraint
Description copied from interface:ValidationPolicy
Returns CertificatePolicyIds constraint if present in the policy, null otherwise- Specified by:
getCertificatePolicyIdsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificatePolicyIds element is present in the constraint file, null otherwise.
-
getCertificatePolicyQualificationIdsConstraint
public LevelRule getCertificatePolicyQualificationIdsConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates if the CertificatePolicyIds declare the certificate as qualified.- Specified by:
getCertificatePolicyQualificationIdsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if PolicyQualificationIds for a given context element is present in the constraint file, null otherwise.
-
getCertificatePolicySupportedByQSCDIdsConstraint
public LevelRule getCertificatePolicySupportedByQSCDIdsConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates if the CertificatePolicyIds mandate the certificate as to be supported by a secure signature creation device (QSCD).- Specified by:
getCertificatePolicySupportedByQSCDIdsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if PolicySupportedByQSCDIds for a given context element is present in the constraint file, null otherwise.
-
getCertificateQCComplianceConstraint
Description copied from interface:ValidationPolicy
Indicates if the end user certificate used in validating the signature is QC Compliant.- Specified by:
getCertificateQCComplianceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if QcCompliance for a given context element is present in the constraint file, null otherwise.
-
getCertificateQcEuLimitValueCurrencyConstraint
public ValueRule getCertificateQcEuLimitValueCurrencyConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the allowed currency used to specify certificate's QCLimitValue statement.- Specified by:
getCertificateQcEuLimitValueCurrencyConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
NumericValueRule
if QcTransactionLimitCurrency for a given context element is present in the constraint file, null otherwise.
-
getCertificateMinQcEuLimitValueConstraint
public NumericValueRule getCertificateMinQcEuLimitValueConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the minimal allowed QcEuLimitValue transaction limit for which the end user certificate used for the signature can be used.- Specified by:
getCertificateMinQcEuLimitValueConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
NumericValueRule
if MinQcTransactionLimit for a given context element is present in the constraint file, null otherwise.
-
getCertificateMinQcEuRetentionPeriodConstraint
public NumericValueRule getCertificateMinQcEuRetentionPeriodConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the minimal allowed QC retention period for material information relevant to the use of the end user certificate used for the signature.- Specified by:
getCertificateMinQcEuRetentionPeriodConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
NumericValueRule
if MinQcRetentionPeriod for a given context element is present in the constraint file, null otherwise.
-
getCertificateQcSSCDConstraint
Description copied from interface:ValidationPolicy
Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).- Specified by:
getCertificateQcSSCDConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if QcSSCD for a given context element is present in the constraint file, null otherwise.
-
getCertificateQcEuPDSLocationConstraint
public MultiValuesRule getCertificateQcEuPDSLocationConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the location or set of locations of PKI Disclosure Statements.- Specified by:
getCertificateQcEuPDSLocationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
the the location or set of locations of PKI Disclosure Statements
-
getCertificateQcTypeConstraint
Description copied from interface:ValidationPolicy
Indicates the certificate is claimed as a certificate of a particular type.- Specified by:
getCertificateQcTypeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
the types that the certificate is claimed to be of
-
getCertificateQcCCLegislationConstraint
public MultiValuesRule getCertificateQcCCLegislationConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the country or set of countries under the legislation of which the certificate is issued as a qualified certificate is present. NOTE: in order to verify the EU compliance, the value shall be empty (no QcCCLegislation is allowed)- Specified by:
getCertificateQcCCLegislationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
the country or set of countries under the legislation of which the certificate is issued as a qualified certificate
-
getCertificateIssuedToNaturalPersonConstraint
public LevelRule getCertificateIssuedToNaturalPersonConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates if the end user certificate used in validating the signature is issued to a natural person.- Specified by:
getCertificateIssuedToNaturalPersonConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if IssuedToNaturalPerson for a given context element is present in the constraint file, null otherwise.
-
getCertificateIssuedToLegalPersonConstraint
public LevelRule getCertificateIssuedToLegalPersonConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates if the end user certificate used in validating the signature is issued to a legal person.- Specified by:
getCertificateIssuedToLegalPersonConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if IssuedToLegalPerson for a given context element is present in the constraint file, null otherwise.
-
getCertificateSemanticsIdentifierConstraint
public MultiValuesRule getCertificateSemanticsIdentifierConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the certificate's QCStatement contains an acceptable semantics identifier.- Specified by:
getCertificateSemanticsIdentifierConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if SemanticsIdentifier for a given context element is present in the constraint file, null otherwise.
-
getCertificatePS2DQcTypeRolesOfPSPConstraint
public MultiValuesRule getCertificatePS2DQcTypeRolesOfPSPConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the acceptable QC PS2D roles for the certificate used for a signature.- Specified by:
getCertificatePS2DQcTypeRolesOfPSPConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
the set of acceptable QC PS2D roles
-
getCertificatePS2DQcCompetentAuthorityNameConstraint
public MultiValuesRule getCertificatePS2DQcCompetentAuthorityNameConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the acceptable QC PS2D names for the certificate used for a signature.- Specified by:
getCertificatePS2DQcCompetentAuthorityNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
the set of acceptable QC PS2D names
-
getCertificatePS2DQcCompetentAuthorityIdConstraint
public MultiValuesRule getCertificatePS2DQcCompetentAuthorityIdConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Indicates the acceptable QC PS2D ids for the certificate used for a signature.- Specified by:
getCertificatePS2DQcCompetentAuthorityIdConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
the set of acceptable QC PS2D ids
-
getSigningCertificateRecognitionConstraint
Description copied from interface:ValidationPolicy
Indicates if signing-certificate has been identified.- Specified by:
getSigningCertificateRecognitionConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if Recognition for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateAttributePresentConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate attribute is present- Specified by:
getSigningCertificateAttributePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SigningCertificateAttribute for a given context element is present in the constraint file, null otherwise.
-
getUnicitySigningCertificateAttributeConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate is not ambiguously determines- Specified by:
getUnicitySigningCertificateAttributeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if UnicitySigningCertificate for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateDigestValuePresentConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate reference's digest value is present- Specified by:
getSigningCertificateDigestValuePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if DigestValuePresent for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateDigestValueMatchConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate reference's digest value matches- Specified by:
getSigningCertificateDigestValueMatchConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if DigestValueMatch for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateIssuerSerialMatchConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate reference's issuer serial matches- Specified by:
getSigningCertificateIssuerSerialMatchConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if IssuerSerialMatch for a given context element is present in the constraint file, null otherwise.
-
getKeyIdentifierPresent
Description copied from interface:ValidationPolicy
Indicates if the 'kid' (key identifier) header parameter is present within the protected header of the signature- Specified by:
getKeyIdentifierPresent
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if KeyIdentifierPresent for a given context element is present in the constraint file, null otherwise.
-
getKeyIdentifierMatch
Description copied from interface:ValidationPolicy
Indicates if the value of 'kid' (key identifier) header parameter matches the signing-certificate used to create the signature- Specified by:
getKeyIdentifierMatch
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if KeyIdentifierMatch for a given context element is present in the constraint file, null otherwise.
-
getReferenceDataExistenceConstraint
Description copied from interface:ValidationPolicy
Indicates if the referenced data is found- Specified by:
getReferenceDataExistenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ReferenceDataExistence for a given context element is present in the constraint file, null otherwise.
-
getReferenceDataIntactConstraint
Description copied from interface:ValidationPolicy
Indicates if the referenced data is intact- Specified by:
getReferenceDataIntactConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ReferenceDataIntact for a given context element is present in the constraint file, null otherwise.
-
getReferenceDataNameMatchConstraint
Description copied from interface:ValidationPolicy
Indicates if the referenced document names match the manifest entry references- Specified by:
getReferenceDataNameMatchConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ReferenceDataNameMatch for a given context element is present in the constraint file, null otherwise.
-
getManifestEntryObjectExistenceConstraint
Description copied from interface:ValidationPolicy
Indicates if the manifested document is found- Specified by:
getManifestEntryObjectExistenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ManifestEntryObjectExistence for a given context element is present in the constraint file, null otherwise.
-
getManifestEntryObjectIntactConstraint
Description copied from interface:ValidationPolicy
Indicates if the manifested document is intact- Specified by:
getManifestEntryObjectIntactConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ManifestEntryObjectIntact for a given context element is present in the constraint file, null otherwise.
-
getManifestEntryObjectGroupConstraint
Description copied from interface:ValidationPolicy
Indicates if all manifest entries have been found- Specified by:
getManifestEntryObjectGroupConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ManifestEntryObjectGroup for a given context element is present in the constraint file, null otherwise.
-
getManifestEntryNameMatchConstraint
Description copied from interface:ValidationPolicy
Indicates if names of all matching documents match to the manifest entry names- Specified by:
getManifestEntryNameMatchConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ManifestEntryNameMatch for a given context element is present in the constraint file, null otherwise.
-
getSignatureIntactConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature is intact- Specified by:
getSignatureIntactConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
SignatureDataIntact
if SignatureIntact for a given context element is present in the constraint file, null otherwise.
-
getSignatureDuplicatedConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature is not ambiguous- Specified by:
getSignatureDuplicatedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
SignatureDuplicated
if SignatureDuplicated for a given context element is present in the constraint file, null otherwise.
-
getSignerInformationStoreConstraint
Description copied from interface:ValidationPolicy
This constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdES- Specified by:
getSignerInformationStoreConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SignerInformationStore element for a given context element is present in the constraint file, null otherwise.
-
getByteRangeConstraint
Description copied from interface:ValidationPolicy
This constraint checks if ByteRange dictionary is valid NOTE: applicable only for PAdES- Specified by:
getByteRangeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ByteRange element for a given context element is present in the constraint file, null otherwise.
-
getByteRangeCollisionConstraint
Description copied from interface:ValidationPolicy
This constraint checks if ByteRange does not collide with other signature byte ranges NOTE: applicable only for PAdES- Specified by:
getByteRangeCollisionConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ByteRangeCollision element for a given context element is present in the constraint file, null otherwise.
-
getByteRangeAllDocumentConstraint
Description copied from interface:ValidationPolicy
This constraint checks if ByteRange is valid for all signatures and document timestamps within PDF NOTE: applicable only for PAdES- Specified by:
getByteRangeAllDocumentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ByteRangeAllDocument element for a given context element is present in the constraint file, null otherwise.
-
getPdfSignatureDictionaryConstraint
Description copied from interface:ValidationPolicy
This constraint checks if signature dictionary is consistent across PDF revisions. NOTE: applicable only for PAdES- Specified by:
getPdfSignatureDictionaryConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if PdfSignatureDictionary element for a given context element is present in the constraint file, null otherwise.
-
getPdfPageDifferenceConstraint
Description copied from interface:ValidationPolicy
Indicates if a PDF page difference check should be proceeded. If PdfPageDifference element is absent within the constraint file then null is returned.- Specified by:
getPdfPageDifferenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if PdfPageDifference element is present in the constraint file, null otherwise.
-
getPdfAnnotationOverlapConstraint
Description copied from interface:ValidationPolicy
Indicates if a PDF annotation overlapping check should be proceeded. If PdfAnnotationOverlap element is absent within the constraint file then null is returned.- Specified by:
getPdfAnnotationOverlapConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if PdfAnnotationOverlap element is present in the constraint file, null otherwise.
-
getPdfVisualDifferenceConstraint
Description copied from interface:ValidationPolicy
Indicates if a PDF visual difference check should be proceeded. If PdfVisualDifference element is absent within the constraint file then null is returned.- Specified by:
getPdfVisualDifferenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if PdfVisualDifference element is present in the constraint file, null otherwise.
-
getDocMDPConstraint
Description copied from interface:ValidationPolicy
This constraint checks if a document contains changes after a signature, against permission rules identified within a /DocMDP dictionary- Specified by:
getDocMDPConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if DocMDP element is present in the constraint file, null otherwise.
-
getFieldMDPConstraint
Description copied from interface:ValidationPolicy
This constraint checks if a document contains changes after a signature, against permission rules identified within a /FieldMDP dictionary- Specified by:
getFieldMDPConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if FieldMDP element is present in the constraint file, null otherwise.
-
getSigFieldLockConstraint
Description copied from interface:ValidationPolicy
This constraint checks if a document contains changes after a signature, against permission rules identified within a /SigFieldLock dictionary- Specified by:
getSigFieldLockConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SigFieldLock element is present in the constraint file, null otherwise.
-
getFormFillChangesConstraint
Description copied from interface:ValidationPolicy
This constraint checks whether a PDF document contains form fill or signing modifications after the current signature's revisions- Specified by:
getFormFillChangesConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if FormFillChanges element is present in the constraint file, null otherwise.
-
getAnnotationChangesConstraint
Description copied from interface:ValidationPolicy
This constraint checks whether a PDF document contains annotation creation, modification or deletion modifications after the current signature's revisions- Specified by:
getAnnotationChangesConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if AnnotationChanges element is present in the constraint file, null otherwise.
-
getUndefinedChangesConstraint
Description copied from interface:ValidationPolicy
This constraint checks whether a PDF document contains undefined object modifications after the current signature's revisions- Specified by:
getUndefinedChangesConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if UndefinedChanges element is present in the constraint file, null otherwise.
-
getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint
Description copied from interface:ValidationPolicy
This constraint checks if the certificate is not expired on best-signature-time- Specified by:
getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if BestSignatureTimeBeforeExpirationDateOfSigningCertificate element is present in the constraint file, null otherwise.
-
getTimestampCoherenceConstraint
Description copied from interface:ValidationPolicy
This constraint checks if the timestamp order is coherent- Specified by:
getTimestampCoherenceConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if TimestampCoherence element is present in the constraint file, null otherwise.
-
getTimestampDelayConstraint
Description copied from interface:ValidationPolicy
Returns TimestampDelay constraint if present in the policy, null otherwise- Specified by:
getTimestampDelayConstraint
in interfaceValidationPolicy
- Returns:
DurationRule
if TimestampDelay element is present in the constraint file, null otherwise.
-
getTimestampValidConstraint
Description copied from interface:ValidationPolicy
Returns whether the time-stamp is valid (passed either basic signature validation process or past signature validation). If TimestampValid element is absent within the constraint file then null is returned.- Specified by:
getTimestampValidConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if TimestampValid element is present in the constraint file, null otherwise.
-
getTimestampTSAGeneralNamePresent
Description copied from interface:ValidationPolicy
Indicates if the timestamp's TSTInfo.tsa field is present- Specified by:
getTimestampTSAGeneralNamePresent
in interfaceValidationPolicy
- Returns:
LevelRule
if TSAGeneralNamePresent for a given context element is present in the constraint file, null otherwise.
-
getTimestampTSAGeneralNameContentMatch
Description copied from interface:ValidationPolicy
Indicates if the timestamp's TSTInfo.tsa field's value matches the timestamp's issuer distinguishing name when present- Specified by:
getTimestampTSAGeneralNameContentMatch
in interfaceValidationPolicy
- Returns:
LevelRule
if TSAGeneralNameContentMatch for a given context element is present in the constraint file, null otherwise.
-
getTimestampTSAGeneralNameOrderMatch
Description copied from interface:ValidationPolicy
Indicates if the timestamp's TSTInfo.tsa field's value and order match the timestamp's issuer distinguishing name when present- Specified by:
getTimestampTSAGeneralNameOrderMatch
in interfaceValidationPolicy
- Returns:
LevelRule
if TSAGeneralNameOrderMatch for a given context element is present in the constraint file, null otherwise.
-
getAtsHashIndexConstraint
Description copied from interface:ValidationPolicy
Returns timestamp AtsHashIndex constraint if present in the policy, null otherwise- Specified by:
getAtsHashIndexConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if AtsHashIndex element is present in the constraint file, null otherwise.
-
getTimestampContainerSignedAndTimestampedFilesCoveredConstraint
Description copied from interface:ValidationPolicy
Returns timestamp ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwise- Specified by:
getTimestampContainerSignedAndTimestampedFilesCoveredConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if ContainerSignedAndTimestampedFilesCovered element is present in the constraint file, null otherwise.
-
getRevocationTimeAgainstBestSignatureDurationRule
Description copied from interface:ValidationPolicy
Returns RevocationTimeAgainstBestSignatureTime constraint if present in the policy, null otherwise- Specified by:
getRevocationTimeAgainstBestSignatureDurationRule
in interfaceValidationPolicy
- Returns:
LevelRule
if RevocationTimeAgainstBestSignatureTime element is present in the constraint file, null otherwise.
-
getEvidenceRecordValidConstraint
Description copied from interface:ValidationPolicy
Returns whether the evidence record is valid (passed a complete evidence record validation process). If EvidenceRecordValid element is absent within the constraint file then null is returned.- Specified by:
getEvidenceRecordValidConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if EvidenceRecordValid element is present in the constraint file, null otherwise.
-
getEvidenceRecordDataObjectExistenceConstraint
Description copied from interface:ValidationPolicy
Returns DataObjectExistence constraint if present in the policy, null otherwise- Specified by:
getEvidenceRecordDataObjectExistenceConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if DataObjectExistence element is present
-
getEvidenceRecordDataObjectIntactConstraint
Description copied from interface:ValidationPolicy
Returns DataObjectIntact constraint if present in the policy, null otherwise- Specified by:
getEvidenceRecordDataObjectIntactConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if DataObjectIntact element is present
-
getEvidenceRecordDataObjectFoundConstraint
Description copied from interface:ValidationPolicy
Returns DataObjectFound constraint if present in the policy, null otherwise- Specified by:
getEvidenceRecordDataObjectFoundConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if DataObjectFound element is present
-
getEvidenceRecordDataObjectGroupConstraint
Description copied from interface:ValidationPolicy
Returns DataObjectGroup constraint if present in the policy, null otherwise- Specified by:
getEvidenceRecordDataObjectGroupConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if DataObjectGroup element is present
-
getEvidenceRecordSignedFilesCoveredConstraint
Description copied from interface:ValidationPolicy
Returns SignedFilesCovered constraint if present in the policy, null otherwise- Specified by:
getEvidenceRecordSignedFilesCoveredConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if SignedFilesCovered element is present in the constraint file, null otherwise.
-
getEvidenceRecordContainerSignedAndTimestampedFilesCoveredConstraint
Description copied from interface:ValidationPolicy
Returns evidence record ContainerSignedAndTimestampedFilesCovered constraint if present in the policy, null otherwise- Specified by:
getEvidenceRecordContainerSignedAndTimestampedFilesCoveredConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if ContainerSignedAndTimestampedFilesCovered element is present in the constraint file, null otherwise.
-
getEvidenceRecordHashTreeRenewalConstraint
Description copied from interface:ValidationPolicy
Returns HashTreeRenewal constraint if present in the policy, null otherwise- Specified by:
getEvidenceRecordHashTreeRenewalConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if HashTreeRenewal element is present
-
getCounterSignatureConstraint
Description copied from interface:ValidationPolicy
Returns CounterSignature constraint if present in the policy, null otherwise- Specified by:
getCounterSignatureConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
DiagnosticDataFacade- Returns:
LevelRule
if CounterSignature element is present in the constraint file, null otherwise.
-
getSignatureTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the presence of unsigned property: signature-time-stamp should be checked. If SignatureTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getSignatureTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if SignatureTimeStamp element is present in the constraint file, null otherwise.
-
getValidationDataTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the presence of unsigned property: validation data timestamp should be checked. If ValidationDataTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getValidationDataTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ValidationDataTimeStamp element is present in the constraint file, null otherwise.
-
getValidationDataRefsOnlyTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the presence of unsigned property: validation data references only timestamp should be checked. If ValidationDataRefsOnlyTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getValidationDataRefsOnlyTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ValidationDataRefsOnlyTimeStamp element is present in the constraint file, null otherwise.
-
getArchiveTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the presence of unsigned property: archive-time-stamp should be checked. If ArchiveTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getArchiveTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if ArchiveTimeStamp element is present in the constraint file, null otherwise.
-
getDocumentTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the presence of unsigned property: document timestamp should be checked. If DocumentTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getDocumentTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if DocumentTimeStamp element is present in the constraint file, null otherwise.
-
getTLevelTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the presence of unsigned property: signature-time-stamp or document timestamp If TLevelTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getTLevelTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if TLevelTimeStamp element is present in the constraint file, null otherwise.
-
getLTALevelTimeStampConstraint
Description copied from interface:ValidationPolicy
Indicates if the presence of unsigned property: archive-time-stamp or document timestamp covering the validation data If LTALevelTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getLTALevelTimeStampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelRule
if LTALevelTimeStamp element is present in the constraint file, null otherwise.
-
getSignatureFormatConstraint
Description copied from interface:ValidationPolicy
Returns SignatureFormat constraint if present in the policy, null otherwise- Specified by:
getSignatureFormatConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesRule
if SignatureFormat element is present in the constraint file, null otherwise.
-
getCertificateCountryConstraint
Description copied from interface:ValidationPolicy
Returns CertificateCountry constraint if present in the policy, null otherwise- Specified by:
getCertificateCountryConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateCountry element is present in the constraint file, null otherwise.
-
getCertificateLocalityConstraint
Description copied from interface:ValidationPolicy
Returns CertificateLocality constraint if present in the policy, null otherwise- Specified by:
getCertificateLocalityConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateLocality element is present in the constraint file, null otherwise.
-
getCertificateStateConstraint
Description copied from interface:ValidationPolicy
Returns CertificateState constraint if present in the policy, null otherwise- Specified by:
getCertificateStateConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateState element is present in the constraint file, null otherwise.
-
getCertificateOrganizationIdentifierConstraint
public MultiValuesRule getCertificateOrganizationIdentifierConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns CertificateOrganizationIdentifier constraint if present in the policy, null otherwise- Specified by:
getCertificateOrganizationIdentifierConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateOrganizationIdentifier element is present in the constraint file, null otherwise.
-
getCertificateOrganizationNameConstraint
public MultiValuesRule getCertificateOrganizationNameConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns CertificateOrganizationName constraint if present in the policy, null otherwise- Specified by:
getCertificateOrganizationNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateOrganizationName element is present in the constraint file, null otherwise.
-
getCertificateOrganizationUnitConstraint
public MultiValuesRule getCertificateOrganizationUnitConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns CertificateOrganizationUnit constraint if present in the policy, null otherwise- Specified by:
getCertificateOrganizationUnitConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateOrganizationUnit element is present in the constraint file, null otherwise.
-
getCertificateSurnameConstraint
Description copied from interface:ValidationPolicy
Returns CertificateSurname constraint if present in the policy, null otherwise- Specified by:
getCertificateSurnameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateSurname element is present in the constraint file, null otherwise.
-
getCertificateGivenNameConstraint
Description copied from interface:ValidationPolicy
Returns CertificateGivenName constraint if present in the policy, null otherwise- Specified by:
getCertificateGivenNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateGivenName element is present in the constraint file, null otherwise.
-
getCertificateCommonNameConstraint
Description copied from interface:ValidationPolicy
Returns CertificateCommonName constraint if present in the policy, null otherwise- Specified by:
getCertificateCommonNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateCommonName element is present in the constraint file, null otherwise.
-
getCertificatePseudonymConstraint
Description copied from interface:ValidationPolicy
Returns CertificatePseudonym constraint if present in the policy, null otherwise- Specified by:
getCertificatePseudonymConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificatePseudonym element is present in the constraint file, null otherwise.
-
getCertificatePseudoUsageConstraint
Description copied from interface:ValidationPolicy
Returns CertificatePseudoUsage constraint if present in the policy, null otherwise- Specified by:
getCertificatePseudoUsageConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if CertificatePseudoUsage element is present in the constraint file, null otherwise.
-
getCertificateTitleConstraint
Description copied from interface:ValidationPolicy
Returns CertificateTitle constraint if present in the policy, null otherwise- Specified by:
getCertificateTitleConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateTitle element is present in the constraint file, null otherwise.
-
getCertificateEmailConstraint
Description copied from interface:ValidationPolicy
Returns CertificateEmail constraint if present in the policy, null otherwise- Specified by:
getCertificateEmailConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesRule
if CertificateEmail element is present in the constraint file, null otherwise.
-
getCertificateSerialNumberConstraint
Description copied from interface:ValidationPolicy
Returns CertificateSerialNumber constraint if present in the policy, null otherwise- Specified by:
getCertificateSerialNumberConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if CertificateSerialNumber element is present in the constraint file, null otherwise.
-
getCertificateAuthorityInfoAccessPresentConstraint
public LevelRule getCertificateAuthorityInfoAccessPresentConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns CertificateAuthorityInfoAccessPresent constraint if present in the policy, null otherwise- Specified by:
getCertificateAuthorityInfoAccessPresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if CertificateAuthorityInfoAccessPresent element is present in the constraint file, null otherwise.
-
getRevocationDataSkipConstraint
public CertificateApplicabilityRule getRevocationDataSkipConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns RevocationDataSkip constraint if present in the policy, null otherwise- Specified by:
getRevocationDataSkipConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if RevocationDataSkip element is present in the constraint file, null otherwise.
-
getCertificateRevocationInfoAccessPresentConstraint
public LevelRule getCertificateRevocationInfoAccessPresentConstraint(Context context, SubContext subContext) Description copied from interface:ValidationPolicy
Returns CertificateRevocationInfoAccessPresent constraint if present in the policy, null otherwise- Specified by:
getCertificateRevocationInfoAccessPresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelRule
if CertificateRevocationInfoAccessPresent element is present in the constraint file, null otherwise.
-
getAcceptedContainerTypesConstraint
Description copied from interface:ValidationPolicy
Returns AcceptedContainerTypes constraint if present in the policy, null otherwise- Specified by:
getAcceptedContainerTypesConstraint
in interfaceValidationPolicy
- Returns:
MultiValuesRule
if AcceptedContainerTypes element is present in the constraint file, null otherwise.
-
getZipCommentPresentConstraint
Description copied from interface:ValidationPolicy
Returns ZipCommentPresent constraint if present in the policy, null otherwise- Specified by:
getZipCommentPresentConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if ZipCommentPresent element is present in the constraint file, null otherwise.
-
getAcceptedZipCommentsConstraint
Description copied from interface:ValidationPolicy
Returns AcceptedZipComments constraint if present in the policy, null otherwise- Specified by:
getAcceptedZipCommentsConstraint
in interfaceValidationPolicy
- Returns:
MultiValuesRule
if AcceptedZipComments element is present in the constraint file, null otherwise.
-
getMimeTypeFilePresentConstraint
Description copied from interface:ValidationPolicy
Returns MimeTypeFilePresent constraint if present in the policy, null otherwise- Specified by:
getMimeTypeFilePresentConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if MimeTypeFilePresent element is present in the constraint file, null otherwise.
-
getAcceptedMimeTypeContentsConstraint
Description copied from interface:ValidationPolicy
Returns AcceptedMimeTypeContents constraint if present in the policy, null otherwise- Specified by:
getAcceptedMimeTypeContentsConstraint
in interfaceValidationPolicy
- Returns:
MultiValuesRule
if AcceptedMimeTypeContents element is present in the constraint file, null otherwise.
-
getManifestFilePresentConstraint
Description copied from interface:ValidationPolicy
Returns ManifestFilePresent constraint if present in the policy, null otherwise- Specified by:
getManifestFilePresentConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if ManifestFilePresent element is present in the constraint file, null otherwise.
-
getSignedFilesPresentConstraint
Description copied from interface:ValidationPolicy
Returns SignedFilesPresent constraint if present in the policy, null otherwise- Specified by:
getSignedFilesPresentConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if SignedFilesPresent element is present in the constraint file, null otherwise.
-
getFilenameAdherenceConstraint
Description copied from interface:ValidationPolicy
Returns FilenameAdherence constraint if present in the policy, null otherwise- Specified by:
getFilenameAdherenceConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if FilenameAdherence element is present in the constraint file, null otherwise.
-
getAllFilesSignedConstraint
Description copied from interface:ValidationPolicy
Returns AllFilesSigned constraint if present in the policy, null otherwise- Specified by:
getAllFilesSignedConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if AllFilesSigned element is present in the constraint file, null otherwise.
-
getFullScopeConstraint
Description copied from interface:ValidationPolicy
Returns FullScope constraint if present in the policy, null otherwise- Specified by:
getFullScopeConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if FullScope element is present in the constraint file, null otherwise.
-
getAcceptablePDFAProfilesConstraint
Description copied from interface:ValidationPolicy
Returns AcceptablePDFAProfiles constraint if present in the policy, null otherwise- Specified by:
getAcceptablePDFAProfilesConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if AcceptablePDFAProfiles element is present in the constraint file, null otherwise.
-
getPDFACompliantConstraint
Description copied from interface:ValidationPolicy
Returns PDFACompliant constraint if present in the policy, null otherwise- Specified by:
getPDFACompliantConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if PDFACompliant element is present in the constraint file, null otherwise.
-
isEIDASConstraintPresent
public boolean isEIDASConstraintPresent()Description copied from interface:ValidationPolicy
Returns if EIDAS constraints present (qualification check shall be performed)- Specified by:
isEIDASConstraintPresent
in interfaceValidationPolicy
- Returns:
- TRUE if EIDAS constraint present, FALSE otherwise
-
getTLFreshnessConstraint
Description copied from interface:ValidationPolicy
Returns TLFreshness constraint if present in the policy, null otherwise- Specified by:
getTLFreshnessConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if TLFreshness element is present in the constraint file, null otherwise.
-
getTLWellSignedConstraint
Description copied from interface:ValidationPolicy
Returns TLWellSigned constraint if present in the policy, null otherwise- Specified by:
getTLWellSignedConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if TLWellSigned element is present in the constraint file, null otherwise.
-
getTLNotExpiredConstraint
Description copied from interface:ValidationPolicy
Returns TLNotExpired constraint if present in the policy, null otherwise- Specified by:
getTLNotExpiredConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if TLNotExpired element is present in the constraint file, null otherwise.
-
getTLVersionConstraint
Description copied from interface:ValidationPolicy
Returns TLVersion constraint if present in the policy, null otherwise- Specified by:
getTLVersionConstraint
in interfaceValidationPolicy
- Returns:
MultiValuesRule
if TLVersion element is present in the constraint file, null otherwise.
-
getTLStructureConstraint
Description copied from interface:ValidationPolicy
Returns TLStructure constraint if present in the policy, null otherwise- Specified by:
getTLStructureConstraint
in interfaceValidationPolicy
- Returns:
LevelRule
if TLStructure element is present in the constraint file, null otherwise.
-
getValidationModel
Description copied from interface:ValidationPolicy
Returns the used validation model (default is SHELL). Alternatives are CHAIN and HYBRID- Specified by:
getValidationModel
in interfaceValidationPolicy
- Returns:
- the validation model to be used
-
toString
-