Uses of Class eu.europa.esig.dss.model.x509.CertificateToken (Digital Signature Services 5.12.1 API)

Uses of CertificateToken in eu.europa.esig.dss

Methods in eu.europa.esig.dss that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

AbstractSignatureParameters.getSigningCertificate()

Get the signing certificate

Methods in eu.europa.esig.dss that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

AbstractSignatureParameters.getCertificateChain()

Set the certificate chain

Map<CertificateToken,List<CertificateToken>>

CertificateReorderer.getOrderedCertificateChains()

This method is used to order the certificates (signing certificate, CA1, CA2 and Root)

Map<CertificateToken,List<CertificateToken>>

CertificateReorderer.getOrderedCertificateChains()

This method is used to order the certificates (signing certificate, CA1, CA2 and Root)

List<CertificateToken>

CertificateReorderer.getOrderedCertificates()

This method is used to order the certificates (signing certificate, CA1, CA2 and Root)

Methods in eu.europa.esig.dss with parameters of type CertificateToken

Modifier and Type

Method

Description

void

AbstractSignatureParameters.setCertificateChain(CertificateToken... certificateChainArray)

This method sets the list of certificates which constitute the chain.

void

AbstractSignatureParameters.setSigningCertificate(CertificateToken signingCertificate)

Set the signing certificate.

Method parameters in eu.europa.esig.dss with type arguments of type CertificateToken

Modifier and Type

Method

Description

void

AbstractSignatureParameters.setCertificateChain(List<CertificateToken> certificateChain)

Set the certificate chain

Constructors in eu.europa.esig.dss with parameters of type CertificateToken

Modifier

Constructor

Description

protected

AbstractSignatureParametersBuilder(CertificateToken signingCertificate)

The default constructor

protected

AbstractSignatureParametersBuilder(CertificateToken signingCertificate, List<CertificateToken> certificateChain)

A constructor with a certificateChain

CertificateReorderer(CertificateToken signingCertificate, Collection<CertificateToken> certificateChain)

Constructor which takes a potential signing certificate and a certificate chain

Constructor parameters in eu.europa.esig.dss with type arguments of type CertificateToken

Modifier

Constructor

Description

protected

AbstractSignatureParametersBuilder(CertificateToken signingCertificate, List<CertificateToken> certificateChain)

A constructor with a certificateChain

CertificateReorderer(CertificateToken signingCertificate, Collection<CertificateToken> certificateChain)

Constructor which takes a potential signing certificate and a certificate chain

CertificateReorderer(Collection<CertificateToken> certificateChain)

Constructor which takes a collection of certificates where DSS needs to find the signing certificate
Uses of CertificateToken in eu.europa.esig.dss.cades

Methods in eu.europa.esig.dss.cades with parameters of type CertificateToken

Modifier and Type

Method

Description

static void

CMSUtils.addSigningCertificateAttribute(org.bouncycastle.asn1.ASN1EncodableVector signedAttributes, DigestAlgorithm digestAlgorithm, CertificateToken signingToken)

Method to add signing certificate to ASN.1 DER encoded signed attributes.
Uses of CertificateToken in eu.europa.esig.dss.cades.signature

Constructor parameters in eu.europa.esig.dss.cades.signature with type arguments of type CertificateToken

Modifier

Constructor

Description

CadesLevelBaselineLTATimestampExtractor(org.bouncycastle.cms.CMSSignedData cmsSignedData, Collection<CertificateToken> certificates)

Constructor with a custom collection of certificates
Uses of CertificateToken in eu.europa.esig.dss.crl

Methods in eu.europa.esig.dss.crl that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

CRLValidity.getIssuerToken()

Gets the issuer certificateToken

Methods in eu.europa.esig.dss.crl with parameters of type CertificateToken

Modifier and Type

Method

Description

static CRLValidity

CRLUtils.buildCRLValidity(CRLBinary crlBinary, CertificateToken issuerToken)

This method verifies and creates: the signature of the CRL, the key usage of its signing certificate and the coherence between the subject names of the CRL signing certificate and the issuer name of the certificate for which the verification of the revocation data is carried out.

CRLValidity

ICRLUtils.buildCRLValidity(CRLBinary crlBinary, CertificateToken issuerToken)

This method verifies: the signature of the CRL, the key usage of its signing certificate and the coherence between the subject names of the CRL signing certificate and the issuer name of the certificate for which the verification of the revocation data is carried out.

void

CRLValidity.setIssuerToken(CertificateToken issuerToken)

Sets the issuer certificateToken
Uses of CertificateToken in eu.europa.esig.dss.crl.stream.impl

Methods in eu.europa.esig.dss.crl.stream.impl with parameters of type CertificateToken

Modifier and Type

Method

Description

CRLValidity

CRLUtilsStreamImpl.buildCRLValidity(CRLBinary crlBinary, CertificateToken issuerToken)
Uses of CertificateToken in eu.europa.esig.dss.crl.x509.impl

Methods in eu.europa.esig.dss.crl.x509.impl with parameters of type CertificateToken

Modifier and Type

Method

Description

CRLValidity

CRLUtilsX509CRLImpl.buildCRLValidity(CRLBinary crlBinary, CertificateToken issuerToken)

This method verifies: the signature of the CRL, the key usage of its signing certificate and the coherence between the subject names of the CRL signing certificate and the issuer name of the certificate for which the verification of the revocation data is carried out.
Uses of CertificateToken in eu.europa.esig.dss.jades

Methods in eu.europa.esig.dss.jades with parameters of type CertificateToken

Modifier and Type

Method

Description

static String

DSSJsonUtils.generateKid(CertificateToken signingCertificate)

Generates the 'kid' value as in IETF RFC 5035
Uses of CertificateToken in eu.europa.esig.dss.jades.signature

Methods in eu.europa.esig.dss.jades.signature with parameters of type CertificateToken

Modifier and Type

Method

Description

protected void

JAdESLevelBaselineB.incorporateSigningCertificateOtherDigestReference(CertificateToken signingCertificate, DigestAlgorithm digestAlgorithm)

Incorporates 5.2.2.2 The x5t#o (X509 certificate digest) header parameter

protected void

JAdESLevelBaselineB.incorporateSigningCertificateSha256Thumbprint(CertificateToken signingCertificate)

Incorporates 5.1.7 The x5t#S256 (X.509 Certificate SHA-256 Thumbprint) header parameter

boolean

JAdESService.isValidSignatureValue(ToBeSigned toBeSigned, SignatureValue signatureValue, CertificateToken signingCertificate)

Method parameters in eu.europa.esig.dss.jades.signature with type arguments of type CertificateToken

Modifier and Type

Method

Description

protected org.jose4j.json.internal.json_simple.JSONArray

JAdESLevelBaselineLT.getXVals(Set<CertificateToken> certificateValuesToAdd)

Builds and returns 'xVals' JSONArray

protected void

JAdESLevelBaselineLT.incorporateXVals(JAdESEtsiUHeader etsiUHeader, Set<CertificateToken> certificateValuesToAdd, boolean base64UrlEncoded)

Incorporates the provided set of certificates into etsiUHeader
Uses of CertificateToken in eu.europa.esig.dss.jades.validation

Methods in eu.europa.esig.dss.jades.validation that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

KidCertificateSource.addCertificate(CertificateToken certificateToAdd)

CertificateToken

KidCertificateSource.addCertificate(String kid, CertificateToken certificate)

Adds a certificate for a given 'kid' (JWS/JAdES)

CertificateToken

KidCertificateSource.getCertificateByKid(String kid)

Gets a CertificateToken by the given KID

Methods in eu.europa.esig.dss.jades.validation that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

Set<CertificateToken>

JAdESCertificateSource.getKeyIdentifierCertificates()

Retrieves the Set of CertificateTokens according to a reference present within a 'kid' (key identifier) header

Methods in eu.europa.esig.dss.jades.validation with parameters of type CertificateToken

Modifier and Type

Method

Description

CertificateToken

KidCertificateSource.addCertificate(CertificateToken certificateToAdd)

CertificateToken

KidCertificateSource.addCertificate(String kid, CertificateToken certificate)

Adds a certificate for a given 'kid' (JWS/JAdES)
Uses of CertificateToken in eu.europa.esig.dss.model

Methods in eu.europa.esig.dss.model that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

SerializableSignatureParameters.getSigningCertificate()

Get the signing certificate
Uses of CertificateToken in eu.europa.esig.dss.model.identifier

Constructors in eu.europa.esig.dss.model.identifier with parameters of type CertificateToken

Modifier

Constructor

Description

CertificateTokenIdentifier(CertificateToken certificateToken)

Default constructor
Uses of CertificateToken in eu.europa.esig.dss.model.x509

Methods in eu.europa.esig.dss.model.x509 with parameters of type CertificateToken

Modifier and Type

Method

Description

boolean

CertificateToken.isEquivalent(CertificateToken token)

This method returns true if the given token is equivalent.

boolean

Token.isSignedBy(CertificateToken token)

Checks if the token is signed by the given token in the parameter.
Uses of CertificateToken in eu.europa.esig.dss.model.x509.extension

Methods in eu.europa.esig.dss.model.x509.extension with parameters of type CertificateToken

Modifier and Type

Method

Description

void

CertificateExtension.checkCritical(CertificateToken certificateToken)

Checks and sets whether the certificate extension is critical
Uses of CertificateToken in eu.europa.esig.dss.pades.validation

Methods in eu.europa.esig.dss.pades.validation that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

Map<Long,CertificateToken>

PAdESCertificateSource.getCertificateMap()

Gets the map of certificate PDF object ids and the certificateTokens

List<CertificateToken>

PAdESCertificateSource.getCertificateValues()

List<CertificateToken>

PAdESCertificateSource.getDSSDictionaryCertValues()

List<CertificateToken>

PAdESCertificateSource.getVRIDictionaryCertValues()

Methods in eu.europa.esig.dss.pades.validation with parameters of type CertificateToken

Modifier and Type

Method

Description

List<RevocationToken<CRL>>

PAdESCRLSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerToken)

List<RevocationToken<OCSP>>

PAdESOCSPSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerToken)
Uses of CertificateToken in eu.europa.esig.dss.pades.validation.dss

Methods in eu.europa.esig.dss.pades.validation.dss that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

Map<Long,CertificateToken>

PdfDssDictCertificateSource.getCertificateMap()

Gets a map of PDF object ids and corresponding certificate tokens

protected Set<CertificateToken>

PdfCompositeDssDictCertificateSource.getCertificateTokensByObjectId(Long objectId)

This method returns a set of CertificateTokens with the given PDF object id

List<CertificateToken>

PdfDssDictCertificateSource.getDSSDictionaryCertValues()

Gets list of DSS dictionary certificate tokens

List<CertificateToken>

PdfDssDictCertificateSource.getVRIDictionaryCertValues()

Gets list of certificate tokens extracted from all VRI dictionaries

Methods in eu.europa.esig.dss.pades.validation.dss with parameters of type CertificateToken

Modifier and Type

Method

Description

List<RevocationToken<CRL>>

PdfDssDictCRLSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerToken)

List<RevocationToken<OCSP>>

PdfDssDictOCSPSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerToken)
Uses of CertificateToken in eu.europa.esig.dss.pdf

Methods in eu.europa.esig.dss.pdf that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

Map<Long,CertificateToken>

AbstractPdfDssDict.getCERTs()

Map<Long,CertificateToken>

PdfDssDict.getCERTs()

Returns a map of unique identifiers and Certificate Tokens

static Map<Long,CertificateToken>

DSSDictionaryExtractionUtils.getCertsFromArray(PdfDict dict, String dictionaryName, String arrayName)

Extract certificate object map
Uses of CertificateToken in eu.europa.esig.dss.service.crl

Methods in eu.europa.esig.dss.service.crl with parameters of type CertificateToken

Modifier and Type

Method

Description

protected RevocationToken<CRL>

JdbcCacheCRLSource.buildRevocationTokenFromResult(SqlRecord response, CertificateToken certificateToken, CertificateToken issuerCertificateToken)

CRLToken

JdbcCacheCRLSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

CRLToken

JdbcCacheCRLSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken, boolean forceRefresh)

CRLToken

OnlineCRLSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

CRLToken

OnlineCRLSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerToken, List<String> alternativeUrls)

OnlineRevocationSource.RevocationTokenAndUrl<CRL>

OnlineCRLSource.getRevocationTokenAndUrl(CertificateToken certificateToken, CertificateToken issuerToken)

protected OnlineRevocationSource.RevocationTokenAndUrl<CRL>

OnlineCRLSource.getRevocationTokenAndUrl(CertificateToken certificateToken, CertificateToken issuerToken, List<String> crlUrls)

Extracts a CRL token for a certificateToken from the given list of crlUrls

protected String

JdbcCacheCRLSource.getRevocationTokenKey(CertificateToken certificateToken, String urlString)

protected List<String>

JdbcCacheCRLSource.initRevocationTokenKeys(CertificateToken certificateToken)

Returns a revocation token key
Uses of CertificateToken in eu.europa.esig.dss.service.http.commons

Methods in eu.europa.esig.dss.service.http.commons that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

SSLCertificateLoader.getCertificates(String urlString)

The method to extract SSL-certificates from the given web page
Uses of CertificateToken in eu.europa.esig.dss.service.ocsp

Methods in eu.europa.esig.dss.service.ocsp with parameters of type CertificateToken

Modifier and Type

Method

Description

protected RevocationToken<OCSP>

JdbcCacheOCSPSource.buildRevocationTokenFromResult(SqlRecord response, CertificateToken certificateToken, CertificateToken issuerCert)

OCSPToken

JdbcCacheOCSPSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

OCSPToken

JdbcCacheOCSPSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken, boolean forceRefresh)

OCSPToken

OnlineOCSPSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

OCSPToken

OnlineOCSPSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken, List<String> alternativeUrls)

OnlineRevocationSource.RevocationTokenAndUrl<OCSP>

OnlineOCSPSource.getRevocationTokenAndUrl(CertificateToken certificateToken, CertificateToken issuerToken)

protected OnlineRevocationSource.RevocationTokenAndUrl<OCSP>

OnlineOCSPSource.getRevocationTokenAndUrl(CertificateToken certificateToken, CertificateToken issuerToken, List<String> ocspUrls)

Extracts an OCSP token for a certificateToken from the given list of ocspUrls

protected String

JdbcCacheOCSPSource.getRevocationTokenKey(CertificateToken certificateToken, String urlString)

protected final List<String>

JdbcCacheOCSPSource.initRevocationTokenKeys(CertificateToken certificateToken)
Uses of CertificateToken in eu.europa.esig.dss.service.x509.aia

Methods in eu.europa.esig.dss.service.x509.aia that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

protected Set<CertificateToken>

JdbcCacheAIASource.findCertificates(String key)

Method parameters in eu.europa.esig.dss.service.x509.aia with type arguments of type CertificateToken

Modifier and Type

Method

Description

protected void

JdbcCacheAIASource.insertCertificates(String aiaUrl, Collection<CertificateToken> certificateTokens)
Uses of CertificateToken in eu.europa.esig.dss.signature

Methods in eu.europa.esig.dss.signature that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

BaselineBCertificateSelector.getCertificates()

Returns a certificate chain for a B-level signature creation

Methods in eu.europa.esig.dss.signature with parameters of type CertificateToken

Modifier and Type

Method

Description

void

SignatureRequirementsChecker.assertSigningCertificateIsValid(CertificateToken certificateToken)

This method verifies whether the provided certificate token is acceptable for a signature creation against the provided signatureParameters

boolean

AbstractSignatureService.isValidSignatureValue(ToBeSigned toBeSigned, SignatureValue signatureValue, CertificateToken signingCertificate)

boolean

DocumentSignatureService.isValidSignatureValue(ToBeSigned toBeSigned, SignatureValue signatureValue, CertificateToken signingCertificate)

Verifies the signature value against a ToBeSigned and a CertificateToken

boolean

MultipleDocumentsSignatureService.isValidSignatureValue(ToBeSigned toBeSigned, SignatureValue signatureValue, CertificateToken signingCertificate)

Verifies the signature value against a ToBeSigned and a CertificateToken
Uses of CertificateToken in eu.europa.esig.dss.spi

Methods in eu.europa.esig.dss.spi that return CertificateToken

Modifier and Type

Method

Description

static CertificateToken

DSSASN1Utils.getCertificate(org.bouncycastle.cert.X509CertificateHolder x509CertificateHolder)

Extract the certificate token from X509CertificateHolder

static CertificateToken

DSSUtils.loadCertificate(byte[] input)

This method loads a certificate from the byte array.

static CertificateToken

DSSUtils.loadCertificate(File file)

This method loads a certificate from the given location.

static CertificateToken

DSSUtils.loadCertificate(InputStream inputStream)

This method loads a certificate from the given location.

static CertificateToken

DSSUtils.loadCertificateFromBase64EncodedString(String base64Encoded)

This method loads a certificate from a base 64 encoded String

Methods in eu.europa.esig.dss.spi that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

static List<CertificateToken>

DSSUtils.loadCertificateFromP7c(InputStream is)

Loads a collection of certificates from a p7c source

Methods in eu.europa.esig.dss.spi with parameters of type CertificateToken

Modifier and Type

Method

Description

static boolean

DSSRevocationUtils.checkIssuerValidAtRevocationProductionTime(RevocationToken<?> revocationToken, CertificateToken issuerCertificateToken)

Checks if the revocation has been produced during the issuer certificate validity range

static byte[]

DSSASN1Utils.computeSkiFromCert(CertificateToken certificateToken)

Computes SHA-1 hash of the certificateToken's public key

static String

DSSUtils.convertToPEM(CertificateToken cert)

This method converts the given certificate into its PEM string.

static AuthorityInformationAccess

CertificateExtensionsUtils.getAuthorityInformationAccess(CertificateToken certificateToken)

Returns the authority information access, when present

static AuthorityKeyIdentifier

CertificateExtensionsUtils.getAuthorityKeyIdentifier(CertificateToken certificateToken)

Returns the subject key identifier, when present

static byte[]

DSSASN1Utils.getAuthorityKeyIdentifier(CertificateToken certificateToken)

Deprecated.
since DSS 5.12.

static BasicConstraints

CertificateExtensionsUtils.getBasicConstraints(CertificateToken certificateToken)

Returns a basic constraints extension, when present

static List<String>

DSSASN1Utils.getCAAccessLocations(CertificateToken certificate)

Deprecated.
since DSS 5.12.

static List<String>

CertificateExtensionsUtils.getCAIssuersAccessUrls(CertificateToken certificate)

Returns the CA issuers URIs extracted from authorityInfoAccess.caIssuers field

static CertificateExtensions

CertificateExtensionsUtils.getCertificateExtensions(CertificateToken certificateToken)

This method extracts the certificate extensions from the given certificateToken

static CertificatePolicies

CertificateExtensionsUtils.getCertificatePolicies(CertificateToken certificateToken)

Returns the certificate policies, when present

static List<CertificatePolicy>

DSSASN1Utils.getCertificatePolicies(CertificateToken certToken)

Deprecated.
since DSS 5.12.

static List<String>

CertificateExtensionsUtils.getCRLAccessUrls(CertificateToken certificate)

Returns the CRL distribution URIs extracted from cRLDistributionPoints field

static CRLDistributionPoints

CertificateExtensionsUtils.getCRLDistributionPoints(CertificateToken certificateToken)

Returns the CRL distribution points, when present

static List<String>

DSSRevocationUtils.getCRLRevocationTokenKeys(CertificateToken certificateToken)

Initialize a list revocation token keys String for CRLToken from the given CertificateToken

static List<String>

DSSASN1Utils.getCrlUrls(CertificateToken certificateToken)

Deprecated.
since DSS 5.12.

static ExtendedKeyUsages

CertificateExtensionsUtils.getExtendedKeyUsage(CertificateToken certificateToken)

Returns the extended key usage, when present

static List<String>

DSSASN1Utils.getExtendedKeyUsage(CertificateToken certToken)

Extracts all extended key usages for the certificate token

static String

DSSASN1Utils.getHumanReadableName(CertificateToken cert)

Extracts the pretty printed name of the certificate token

static InhibitAnyPolicy

CertificateExtensionsUtils.getInhibitAnyPolicy(CertificateToken certificateToken)

Returns an inhibit anyPolicy extension, when present

static org.bouncycastle.asn1.x509.IssuerSerial

DSSASN1Utils.getIssuerSerial(CertificateToken certToken)

This method returns a new IssuerSerial based on the certificate token

static KeyUsage

CertificateExtensionsUtils.getKeyUsage(CertificateToken certificateToken)

Returns the key usage, when present

static org.bouncycastle.cert.ocsp.SingleResp

DSSRevocationUtils.getLatestSingleResponse(org.bouncycastle.cert.ocsp.BasicOCSPResp basicResponse, CertificateToken certificate, CertificateToken issuer)

Gets the latest single response from the OCSP response

static NameConstraints

CertificateExtensionsUtils.getNameConstraints(CertificateToken certificateToken)

Returns a name constraints extension, when present

static List<String>

DSSASN1Utils.getOCSPAccessLocations(CertificateToken certificate)

Deprecated.
since DSS 5.12.

static List<String>

CertificateExtensionsUtils.getOCSPAccessUrls(CertificateToken certificate)

Returns the OCSP URIs extracted from authorityInfoAccess.ocsp field

static org.bouncycastle.cert.ocsp.CertificateID

DSSRevocationUtils.getOCSPCertificateID(CertificateToken cert, CertificateToken issuerCert, DigestAlgorithm digestAlgorithm)

Returns the CertificateID for the given certificate and its issuer's certificate.

static OCSPNoCheck

CertificateExtensionsUtils.getOcspNoCheck(CertificateToken certificateToken)

Returns the ocsp-nocheck extension value, when present

static String

DSSRevocationUtils.getOcspRevocationKey(CertificateToken certificateToken, String ocspUrl)

Gets OCSP key (SHA-1 digest) of the url

static List<String>

DSSRevocationUtils.getOcspRevocationTokenKeys(CertificateToken certificateToken)

Initialize a list revocation token keys String for OCSPToken from the given CertificateToken

static PolicyConstraints

CertificateExtensionsUtils.getPolicyConstraints(CertificateToken certificateToken)

Returns a policy constraints extension, when present

static QcStatements

CertificateExtensionsUtils.getQcStatements(CertificateToken certificateToken)

Returns the qc-statements extension value, when present

static QcStatements

QcStatementUtils.getQcStatements(CertificateToken certToken)

Extracts the QCStatements from a certificate token

static List<org.bouncycastle.cert.ocsp.SingleResp>

DSSRevocationUtils.getSingleResponses(org.bouncycastle.cert.ocsp.BasicOCSPResp basicResponse, CertificateToken certificate, CertificateToken issuer)

Gets a list of single response from the OCSP response

static byte[]

DSSASN1Utils.getSki(CertificateToken certificateToken)

Deprecated.
since DSS 5.12.

static byte[]

DSSASN1Utils.getSki(CertificateToken certificateToken, boolean computeIfMissing)

Deprecated.
since DSS 5.12.

static SubjectAlternativeNames

CertificateExtensionsUtils.getSubjectAlternativeNames(CertificateToken certificateToken)

Returns a subject alternative names, when present

static List<String>

DSSASN1Utils.getSubjectAlternativeNames(CertificateToken certToken)

Deprecated.
since DSS 5.12.

static String

DSSASN1Utils.getSubjectCommonName(CertificateToken cert)

Extracts the Subject Common name from the certificate token

static SubjectKeyIdentifier

CertificateExtensionsUtils.getSubjectKeyIdentifier(CertificateToken certificateToken)

Returns the subject key identifier, when present

static ValidityAssuredShortTerm

CertificateExtensionsUtils.getValAssuredSTCerts(CertificateToken certificateToken)

Returns the ext-etsi-valassured-ST-certs extension value, when present

static org.bouncycastle.cert.X509CertificateHolder

DSSASN1Utils.getX509CertificateHolder(CertificateToken certToken)

Returns a X509CertificateHolder encapsulating the given X509Certificate.

static boolean

DSSASN1Utils.hasIdPkixOcspNoCheckExtension(CertificateToken token)

Deprecated.
since DSS 5.12.

static boolean

CertificateExtensionsUtils.hasOcspNoCheckExtension(CertificateToken certificateToken)

Checks if the certificate contains ocsp-nocheck extension indicating if the revocation data should be checked for an OCSP signing certificate.
RFC 6960

static boolean

CertificateExtensionsUtils.hasValAssuredShortTermCertsExtension(CertificateToken certificateToken)

Checks if the certificate contains ext-etsi-valassured-ST-certs extension indicating that the validity of the certificate is assured because the certificate is a "short-term certificate".

static boolean

DSSASN1Utils.hasValAssuredShortTermCertsExtension(CertificateToken token)

Deprecated.
since DSS 5.12.

static boolean

DSSASN1Utils.isExtendedKeyUsagePresent(CertificateToken certToken, org.bouncycastle.asn1.ASN1ObjectIdentifier oid)

Deprecated.
since DSS 5.12.

static boolean

DSSASN1Utils.isOCSPSigning(CertificateToken certToken)

Deprecated.
since DSS 5.12.

static boolean

DSSASN1Utils.isSkiEqual(byte[] ski, CertificateToken certificateToken)

Checks if the provided ski matches to a ski computed from a certificateToken's public key
Uses of CertificateToken in eu.europa.esig.dss.spi.tsl

Methods in eu.europa.esig.dss.spi.tsl that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

TrustedListsCertificateSource.addCertificate(CertificateToken certificate)

This method is not applicable for this kind of certificate source.

CertificateToken

ValidationInfoRecord.getSigningCertificate()

Gets the signing certificate

Methods in eu.europa.esig.dss.spi.tsl that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

OtherTSLPointer.getCertificates()

Gets a list of certificates

List<CertificateToken>

TrustService.getCertificates()

Gets a list of certificates

Map<CertificateToken,CertificatePivotStatus>

PivotInfo.getCertificateStatusMap()

Returns a map of certificate tokens with a status regarding to the current pivot

List<CertificateToken>

ValidationInfoRecord.getPotentialSigners()

Gets a list of signing candidates

Methods in eu.europa.esig.dss.spi.tsl with parameters of type CertificateToken

Modifier and Type

Method

Description

CertificateToken

TrustedListsCertificateSource.addCertificate(CertificateToken certificate)

This method is not applicable for this kind of certificate source.

boolean

Condition.check(CertificateToken certificateToken)

Returns true if the condition is evaluated to true for the given certificate.

List<String>

TrustedListsCertificateSource.getAlternativeCRLUrls(CertificateToken trustAnchor)

List<String>

TrustedListsCertificateSource.getAlternativeOCSPUrls(CertificateToken trustAnchor)

List<TrustProperties>

TrustedListsCertificateSource.getTrustServices(CertificateToken token)

Method parameters in eu.europa.esig.dss.spi.tsl with type arguments of type CertificateToken

Modifier and Type

Method

Description

TrustService.TrustServiceBuilder

TrustService.TrustServiceBuilder.setCertificates(List<CertificateToken> certificates)

Sets a list of certificates

void

TrustedListsCertificateSource.setTrustPropertiesByCertificates(Map<CertificateToken,List<TrustProperties>> trustPropertiesByCerts)

The method allows to fill the CertificateSource

Constructor parameters in eu.europa.esig.dss.spi.tsl with type arguments of type CertificateToken

Modifier

Constructor

Description

OtherTSLPointer(String location, List<CertificateToken> certificates, MRA mra)

Default constructor

PivotInfo(DownloadInfoRecord downloadCacheInfo, ParsingInfoRecord parsingCacheInfo, ValidationInfoRecord validationCacheInfo, String url, Map<CertificateToken,CertificatePivotStatus> certificates, String lotlLocation)

The default constructor

TrustService(List<CertificateToken> certificates, TimeDependentValues<TrustServiceStatusAndInformationExtensions> status)

Default constructor
Uses of CertificateToken in eu.europa.esig.dss.spi.x509

Methods in eu.europa.esig.dss.spi.x509 that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

CertificateSource.addCertificate(CertificateToken certificate)

This method allows to manually add any certificate to the source.

CertificateToken

CommonCertificateSource.addCertificate(CertificateToken certificateToAdd)

This method adds an external certificate to the source.

CertificateToken

KeyStoreCertificateSource.addCertificate(CertificateToken certificateToAdd)

CertificateToken

KeyStoreCertificateSource.getCertificate(String alias)

This method allows to retrieve a certificate by its alias

CertificateToken

CertificateValidity.getCertificateToken()

Gets the CertificateToken

protected CertificateToken

TokenCertificateSource.getCertificateToken(SignerIdentifier signerIdentifier)

Gets a CertificateToken by the given SignerIdentifier

CertificateToken

TokenIssuerSelector.getIssuer()

Filters certificateTokens and returns the best issuer candidate for token

Methods in eu.europa.esig.dss.spi.x509 that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

Set<CertificateToken>

CertificateSource.findTokensFromCertRef(CertificateRef certificateRef)

Returns Set of CertificateTokens for the provided CertificateRef

Set<CertificateToken>

CommonCertificateSource.findTokensFromCertRef(CertificateRef certificateRef)

Set<CertificateToken>

ListCertificateSource.findTokensFromRefs(CertificateRef certificateRef)

This method returns the found CertificateToken from all CertificateSource for the given certificateRef.

Set<CertificateToken>

TokenCertificateSource.findTokensFromRefs(List<CertificateRef> certificateRefs)

Returns Set of CertificateTokens for the provided CertificateRefs

Set<CertificateToken>

ListCertificateSource.getAllCertificateTokens()

Returns a set of all containing certificate tokens

Set<CertificateToken>

CertificateSource.getByCertificateDigest(Digest digest)

This method returns the Set of certificates with the Digest

Set<CertificateToken>

CommonCertificateSource.getByCertificateDigest(Digest digest)

Set<CertificateToken>

ListCertificateSource.getByCertificateDigest(Digest digest)

This method returns the found CertificateToken from all CertificateSource for the given Digest.

Set<CertificateToken>

ListCertificateSource.getByCertificateIdentifier(SignerIdentifier signerIdentifier)

This method returns the found CertificateToken from all CertificateSource for the given SignerIdentifier.

Set<CertificateToken>

CertificateSource.getByPublicKey(PublicKey publicKey)

This method returns a Set of CertificateToken with the given PublicKey

Set<CertificateToken>

CommonCertificateSource.getByPublicKey(PublicKey publicKey)

This method returns a list of CertificateToken with the given PublicKey

Set<CertificateToken>

ListCertificateSource.getByPublicKey(PublicKey publicKey)

This method returns the found CertificateToken from all CertificateSource for the given PublicKey.

Set<CertificateToken>

CertificateSource.getBySignerIdentifier(SignerIdentifier signerIdentifier)

This method returns the Set of certificates with the CertificateIdentifier

Set<CertificateToken>

CommonCertificateSource.getBySignerIdentifier(SignerIdentifier signerIdentifier)

Set<CertificateToken>

CertificateSource.getBySki(byte[] ski)

This method returns a Set of CertificateToken with the given SKI (SubjectKeyIdentifier (SHA-1 of the PublicKey))

Set<CertificateToken>

CommonCertificateSource.getBySki(byte[] ski)

This method returns a list of CertificateToken with the given SKI (SubjectKeyIdentifier (SHA-1 of the PublicKey))

Set<CertificateToken>

ListCertificateSource.getBySki(byte[] ski)

This method returns the found CertificateToken from all CertificateSource for the given subject key identifier (SHA-1 of the public key).

Set<CertificateToken>

CertificateSource.getBySubject(X500PrincipalHelper subject)

This method returns the Set of certificates with the same subjectDN.

Set<CertificateToken>

CommonCertificateSource.getBySubject(X500PrincipalHelper subject)

This method returns the Set of certificates with the same subjectDN.

Set<CertificateToken>

ListCertificateSource.getBySubject(X500PrincipalHelper subject)

This method returns the found CertificateToken from all CertificateSource for the given X500PrincipalHelper.

List<CertificateToken>

CertificateSource.getCertificates()

Retrieves the unmodifiable list of all certificate tokens from this source.

List<CertificateToken>

CommonCertificateSource.getCertificates()

Retrieves the unmodifiable list of all certificate tokens from this source.

protected List<CertificateToken>

TokenCertificateSource.getCertificateTokensByOrigin(CertificateOrigin origin)

Gets a list of CertificateTokens by the given CertificateOrigin

Methods in eu.europa.esig.dss.spi.x509 with parameters of type CertificateToken

Modifier and Type

Method

Description

CertificateToken

CertificateSource.addCertificate(CertificateToken certificate)

This method allows to manually add any certificate to the source.

CertificateToken

CommonCertificateSource.addCertificate(CertificateToken certificateToAdd)

This method adds an external certificate to the source.

CertificateToken

KeyStoreCertificateSource.addCertificate(CertificateToken certificateToAdd)

protected void

TokenCertificateSource.addCertificate(CertificateToken certificate, CertificateOrigin origin)

Adds a CertificateToken with its CertificateOrigin

void

KeyStoreCertificateSource.addCertificateToKeyStore(CertificateToken certificateToken)

This method allows to add a certificate in the keystore.

List<String>

CommonTrustedCertificateSource.getAlternativeCRLUrls(CertificateToken trustAnchor)

Returns a list of alternative CRL access point Urls for the certificate token

List<String>

CommonTrustedCertificateSource.getAlternativeOCSPUrls(CertificateToken trustAnchor)

Returns a list of alternative OCSP access point Urls for the certificate token

Set<CertificateSourceType>

ListCertificateSource.getCertificateSource(CertificateToken certificateToken)

This method return the different CertificateSourceType where the certificate is found

List<CertificateRef>

TokenCertificateSource.getReferencesForCertificateToken(CertificateToken certificateToken)

Returns list of CertificateRefs found for the given certificateToken

RevocationToken<R>

AlternateUrlsSourceAdapter.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

RevocationToken<R>

AlternateUrlsSourceAdapter.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken, List<String> alternativeUrls)

List<TrustProperties>

CommonTrustedCertificateSource.getTrustServices(CertificateToken token)

Returns TrustProperties for the given certificate

boolean

CertificateSource.isKnown(CertificateToken certificateToken)

This method checks if a given certificate is known in the current source

boolean

CommonCertificateSource.isKnown(CertificateToken token)

boolean

ResponderId.isRelatedToCertificate(CertificateToken certificateToken)

Checks if the ResponderId is related to a provided certificateToken

boolean

SignerIdentifier.isRelatedToCertificate(CertificateToken certificateToken)

Checks if the current SerialInfo is related to a provided CertificateToken

boolean

CertificateSource.isTrusted(CertificateToken certificateToken)

This method checks if a given certificate is trusted

boolean

CommonCertificateSource.isTrusted(CertificateToken certificateToken)

boolean

CommonTrustedCertificateSource.isTrusted(CertificateToken certificateToken)

boolean

ListCertificateSource.isTrusted(CertificateToken certificateToken)

This method checks in all sources in the given certificate is trusted

boolean

CertificateTokenRefMatcher.match(CertificateToken certificateToken, CertificateRef certificateRef)

This method verifies if the given CertificateToken matches the CertificateRef

boolean

CertificateTokenRefMatcher.matchByDigest(CertificateToken certificateToken, CertificateRef certificateRef)

This method verifies if only digest within the certificateRef corresponds to certificateToken

boolean

CertificateTokenRefMatcher.matchByIssuerName(CertificateToken certificateToken, CertificateRef certificateRef)

This method verifies if only the issuer name within the certificateRef corresponds to certificateToken

boolean

CertificateTokenRefMatcher.matchByResponderId(CertificateToken certificateToken, CertificateRef certificateRef)

This method verifies if only the responder Id within the certificateRef corresponds to certificateToken

boolean

CertificateTokenRefMatcher.matchBySerialNumber(CertificateToken certificateToken, CertificateRef certificateRef)

This method verifies if only the serial number within the certificateRef corresponds to certificateToken

protected void

CommonCertificateSource.removeCertificate(CertificateToken certificateToRemove)

This method removes the corresponding certificate token from the certificate source

Method parameters in eu.europa.esig.dss.spi.x509 with type arguments of type CertificateToken

Modifier and Type

Method

Description

void

KeyStoreCertificateSource.addAllCertificatesToKeyStore(List<CertificateToken> certificates)

This method allows to add a list of certificates to the keystore

Constructors in eu.europa.esig.dss.spi.x509 with parameters of type CertificateToken

Modifier

Constructor

Description

CertificateValidity(CertificateToken certificateToken)

This constructor create an object containing all information concerning the validity of a candidate for the signing certificate.

Constructor parameters in eu.europa.esig.dss.spi.x509 with type arguments of type CertificateToken

Modifier

Constructor

Description

TokenIssuerSelector(Token token, Collection<CertificateToken> certificateTokens)

Default constructor
Uses of CertificateToken in eu.europa.esig.dss.spi.x509.aia

Methods in eu.europa.esig.dss.spi.x509.aia that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

protected abstract Set<CertificateToken>

RepositoryAIASource.findCertificates(String key)

This method returns a set of certificates from a DB with the given key

List<CertificateToken>

OnlineAIASource.CertificatesAndAIAUrl.getCertificates()

List of downloaded certificates

Set<CertificateToken>

AIASource.getCertificatesByAIA(CertificateToken certificateToken)

Loads a set of CertificateTokens accessed by AIA URIs from the provided certificateToken

Set<CertificateToken>

DefaultAIASource.getCertificatesByAIA(CertificateToken certificateToken)

Set<CertificateToken>

RepositoryAIASource.getCertificatesByAIA(CertificateToken certificateToken)

Set<CertificateToken>

RepositoryAIASource.getCertificatesByAIA(CertificateToken certificateToken, boolean forceRefresh)

This method allows to populate the source with new AIA certificates obtained from an proxied source, by forcing the refresh

Methods in eu.europa.esig.dss.spi.x509.aia with parameters of type CertificateToken

Modifier and Type

Method

Description

List<OnlineAIASource.CertificatesAndAIAUrl>

DefaultAIASource.getCertificatesAndAIAUrls(CertificateToken certificateToken)

List<OnlineAIASource.CertificatesAndAIAUrl>

OnlineAIASource.getCertificatesAndAIAUrls(CertificateToken certificateToken)

The method returns a collection of processed URLs and the corresponding downloaded certificates

Set<CertificateToken>

AIASource.getCertificatesByAIA(CertificateToken certificateToken)

Loads a set of CertificateTokens accessed by AIA URIs from the provided certificateToken

Set<CertificateToken>

DefaultAIASource.getCertificatesByAIA(CertificateToken certificateToken)

Set<CertificateToken>

RepositoryAIASource.getCertificatesByAIA(CertificateToken certificateToken)

Set<CertificateToken>

RepositoryAIASource.getCertificatesByAIA(CertificateToken certificateToken, boolean forceRefresh)

This method allows to populate the source with new AIA certificates obtained from an proxied source, by forcing the refresh

Method parameters in eu.europa.esig.dss.spi.x509.aia with type arguments of type CertificateToken

Modifier and Type

Method

Description

protected abstract void

RepositoryAIASource.insertCertificates(String aiaUrl, Collection<CertificateToken> certificateTokens)

This method allows inserting of a certificate into the DB

Constructor parameters in eu.europa.esig.dss.spi.x509.aia with type arguments of type CertificateToken

Modifier

Constructor

Description

CertificatesAndAIAUrl(String aiaUrl, List<CertificateToken> certificates)

Default constructor
Uses of CertificateToken in eu.europa.esig.dss.spi.x509.revocation

Fields in eu.europa.esig.dss.spi.x509.revocation declared as CertificateToken

Modifier and Type

Field

Description

protected CertificateToken

RevocationToken.relatedCertificate

Related CertificateToken to this revocation object

Methods in eu.europa.esig.dss.spi.x509.revocation that return CertificateToken

Modifier and Type

Method

Description

abstract CertificateToken

RevocationToken.getIssuerCertificateToken()

Returns issuer CertificateToken

CertificateToken

RevocationToken.getRelatedCertificate()

Returns a certificate token the current revocation data has been issued for

Methods in eu.europa.esig.dss.spi.x509.revocation with parameters of type CertificateToken

Modifier and Type

Method

Description

protected abstract RevocationToken<R>

JdbcRevocationSource.buildRevocationTokenFromResult(SqlRecord response, CertificateToken certificateToken, CertificateToken issuerCertificateToken)

Builds RevocationToken from the obtained ResultSet

protected RevocationToken<R>

RepositoryRevocationSource.findRevocation(String key, CertificateToken certificateToken, CertificateToken issuerCertToken)

Deprecated.
since 5.12.

protected List<RevocationToken<R>>

JdbcRevocationSource.findRevocations(String key, CertificateToken certificateToken, CertificateToken issuerCertificateToken)

protected abstract List<RevocationToken<R>>

RepositoryRevocationSource.findRevocations(String key, CertificateToken certificateToken, CertificateToken issuerCertToken)

Finds a list of RevocationTokens in the cache for the given certificateToken with the corresponding key

RevocationToken<R>

OfflineRevocationSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

This method returns the latest issued revocation token from a set of all revocation data found for the given certificateToken.

RevocationToken<R>

RepositoryRevocationSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

RevocationToken<R>

RepositoryRevocationSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken, boolean forceRefresh)

Retrieves a revocation token for the given CertificateToken

RevocationToken<R>

RevocationSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

This method retrieves a RevocationToken for the certificateToken

RevocationToken<R>

RevocationSourceAlternateUrlsSupport.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken, List<String> alternativeUrls)

Gets an RevocationToken for the given certificate / issuer's certificate couple.

OnlineRevocationSource.RevocationTokenAndUrl<R>

OnlineRevocationSource.getRevocationTokenAndUrl(CertificateToken certificateToken, CertificateToken issuerToken)

This method retrieves a RevocationTokenAndUrl for the certificateToken

protected abstract String

RepositoryRevocationSource.getRevocationTokenKey(CertificateToken certificateToken, String urlString)

Gets a unique revocation token identifier used to store the revocation token for this certificateToken within a repository

List<RevocationToken<R>>

MultipleRevocationSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

This method retrieves a list of RevocationToken for the certificateToken

List<RevocationToken<R>>

RepositoryRevocationSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

List<RevocationToken<R>>

RepositoryRevocationSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerCertificateToken, boolean forceRefresh)

Retrieves a list of revocation token for the given CertificateToken

protected abstract List<String>

RepositoryRevocationSource.initRevocationTokenKeys(CertificateToken certificateToken)

Initialize a list of revocation token keys String from the given CertificateToken
Uses of CertificateToken in eu.europa.esig.dss.spi.x509.revocation.crl

Methods in eu.europa.esig.dss.spi.x509.revocation.crl that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

CRLToken.getIssuerCertificateToken()

Methods in eu.europa.esig.dss.spi.x509.revocation.crl with parameters of type CertificateToken

Modifier and Type

Method

Description

CRLToken

CRLSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

List<RevocationToken<CRL>>

ExternalResourcesCRLSource.getRevocationTokens(CertificateToken certificate, CertificateToken issuer)

List<RevocationToken<CRL>>

OfflineCRLSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerToken)

Constructors in eu.europa.esig.dss.spi.x509.revocation.crl with parameters of type CertificateToken

Modifier

Constructor

Description

CRLToken(CertificateToken certificateToken, CRLValidity crlValidity)

The constructor to be used with the certificate which is managed by the CRL and the CRLValidity.
Uses of CertificateToken in eu.europa.esig.dss.spi.x509.revocation.ocsp

Methods in eu.europa.esig.dss.spi.x509.revocation.ocsp that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

OCSPToken.getIssuerCertificateToken()

Methods in eu.europa.esig.dss.spi.x509.revocation.ocsp with parameters of type CertificateToken

Modifier and Type

Method

Description

CandidatesForSigningCertificate

OCSPCertificateSource.getCandidatesForSigningCertificate(CertificateToken certificateIssuer)

Returns candidates for the OCSP Response's signing certificate

OCSPToken

OCSPSource.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

List<RevocationToken<OCSP>>

ExternalResourcesOCSPSource.getRevocationTokens(CertificateToken certificate, CertificateToken issuer)

List<RevocationToken<OCSP>>

OfflineOCSPSource.getRevocationTokens(CertificateToken certificate, CertificateToken issuer)

Constructors in eu.europa.esig.dss.spi.x509.revocation.ocsp with parameters of type CertificateToken

Modifier

Constructor

Description

OCSPToken(org.bouncycastle.cert.ocsp.BasicOCSPResp basicOCSPResp, org.bouncycastle.cert.ocsp.SingleResp latestSingleResp, CertificateToken certificate, CertificateToken issuer)

The default constructor to instantiate an OCSPToken with BasicOCSPResp only
Uses of CertificateToken in eu.europa.esig.dss.token

Methods in eu.europa.esig.dss.token that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

DSSPrivateKeyEntry.getCertificate()

Retrieve the signing certificate

CertificateToken

KSPrivateKeyEntry.getCertificate()

CertificateToken[]

DSSPrivateKeyEntry.getCertificateChain()

Retrieve the certificate chain linked

CertificateToken[]

KSPrivateKeyEntry.getCertificateChain()
Uses of CertificateToken in eu.europa.esig.dss.tsl.dto

Methods in eu.europa.esig.dss.tsl.dto that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

ValidationCacheDTO.getSigningCertificate()

Methods in eu.europa.esig.dss.tsl.dto that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

ValidationCacheDTO.getPotentialSigners()

Methods in eu.europa.esig.dss.tsl.dto with parameters of type CertificateToken

Modifier and Type

Method

Description

void

ValidationCacheDTO.setSigningCertificate(CertificateToken signingCertificate)

Sets the signing certificate token

Method parameters in eu.europa.esig.dss.tsl.dto with type arguments of type CertificateToken

Modifier and Type

Method

Description

void

ValidationCacheDTO.setPotentialSigners(List<CertificateToken> potentialSigners)

Sets a list of signing candidates
Uses of CertificateToken in eu.europa.esig.dss.tsl.dto.condition

Methods in eu.europa.esig.dss.tsl.dto.condition with parameters of type CertificateToken

Modifier and Type

Method

Description

boolean

CertSubjectDNAttributeCondition.check(CertificateToken certificateToken)

boolean

CompositeCondition.check(CertificateToken certificateToken)

Execute the composite condition of the given certificate

boolean

ExtendedKeyUsageCondition.check(CertificateToken certificateToken)

boolean

KeyUsageCondition.check(CertificateToken certificateToken)

boolean

PolicyIdCondition.check(CertificateToken certificateToken)

boolean

QCStatementCondition.check(CertificateToken certificateToken)
Uses of CertificateToken in eu.europa.esig.dss.tsl.function.converter

Methods in eu.europa.esig.dss.tsl.function.converter that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

DigitalIdentityListTypeConverter.apply(DigitalIdentityListType digitalIdentityList)
Uses of CertificateToken in eu.europa.esig.dss.tsl.validation

Methods in eu.europa.esig.dss.tsl.validation that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

ValidationResult.getSigningCertificate()

Gets the signing certificate

Methods in eu.europa.esig.dss.tsl.validation that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

ValidationResult.getPotentialSigners()

Gets a list of signing candidates

Constructors in eu.europa.esig.dss.tsl.validation with parameters of type CertificateToken

Modifier

Constructor

Description

ValidationResult(Indication indication, SubIndication subIndication, Date signingTime, CertificateToken signingCertificate, CertificateSource certificateSource)

Default constructor
Uses of CertificateToken in eu.europa.esig.dss.validation

Fields in eu.europa.esig.dss.validation with type parameters of type CertificateToken

Modifier and Type

Field

Description

protected Map<String,CertificateToken>

DiagnosticDataBuilder.certificateIdsMap

A map between certificate id Strings and the related CertificateTokens

protected Map<String,CertificateToken>

DiagnosticDataBuilder.signingCertificateMap

A map between certificate id Strings and the related CertificateTokens for signing certificates

protected Set<CertificateToken>

DiagnosticDataBuilder.usedCertificates

The certificates used during the validation process

Methods in eu.europa.esig.dss.validation that return CertificateToken

Modifier and Type

Method

Description

CertificateToken

AIACertificateSource.getIssuerFromAIA()

Get the issuer's certificate from Authority Information Access through id-ad-caIssuers extension.

CertificateToken

AdvancedSignature.getSigningCertificateToken()

This method returns the signing certificate token or null if there is no valid signing certificate.

CertificateToken

DefaultAdvancedSignature.getSigningCertificateToken()

protected CertificateToken

DiagnosticDataBuilder.getUsedCertificateByCertificateRef(CertificateRef certificateRef)

Returns used certificate by the certificateRef

Methods in eu.europa.esig.dss.validation that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

SignatureCertificateSource.getAttrAuthoritiesCertValues()

Retrieves the list of all certificates from the AttrAuthoritiesCertValues (XAdES)

Set<CertificateToken>

SignatureCertificateSource.getAttributeCertificates()

Retrieves the Set of CertificateTokens according to references included in the attribute attribute-certificate-references (CAdES) or the AttributeCertificateRefs/AttributeCertificateRefsV2 (XAdES)

List<CertificateToken>

AdvancedSignature.getCertificates()

Get certificates embedded in the signature

List<CertificateToken>

DefaultAdvancedSignature.getCertificates()

Returns an unmodifiable list of all certificate tokens encapsulated in the signature

Set<CertificateToken>

ValidationData.getCertificateTokens()

Gets certificate tokens to be included into the signature

List<CertificateToken>

SignatureCertificateSource.getCertificateValues()

Retrieves the list of all certificates from CertificateValues (XAdES/CAdES)

Set<CertificateToken>

SignatureCertificateSource.getCompleteCertificates()

Retrieves the Set of CertificateTokens according references to included in the attribute complete-certificate-references (CAdES) or the CompleteCertificateRefs/CompleteCertificateRefsV2 (XAdES)

List<CertificateToken>

SignatureCertificateSource.getDSSDictionaryCertValues()

Retrieves the list of all certificates from the DSS dictionary (PAdES)

List<CertificateToken>

SignatureCertificateSource.getKeyInfoCertificates()

Retrieves the list of all certificates present in the KeyInfo element (XAdES) (can be unsigned)

Set<CertificateToken>

SignatureValidationContext.getProcessedCertificates()

Set<CertificateToken>

ValidationContext.getProcessedCertificates()

Returns a read only list of all certificates used in the process of the validation of all signatures from the given document.

List<CertificateToken>

SignatureCertificateSource.getSignedDataCertificates()

Retrieves the list of all certificates present in a signed element (i.e.

Set<CertificateToken>

SignatureCertificateSource.getSigningCertificates()

Retrieves the Set of CertificateTokens for the signing certificate (V1/V2)

List<CertificateToken>

SignatureCertificateSource.getTimeStampValidationDataCertValues()

Retrieves the list of all certificates from the TimeStampValidationData (XAdES)

List<CertificateToken>

SignatureCertificateSource.getVRIDictionaryCertValues()

Retrieves the list of all certificates from the VRI dictionary (PAdES)

Methods in eu.europa.esig.dss.validation with parameters of type CertificateToken

Modifier and Type

Method

Description

void

SignatureValidationContext.addCertificateTokenForVerification(CertificateToken certificateToken)

void

ValidationContext.addCertificateTokenForVerification(CertificateToken certificateToken)

Adds a new certificate token to the list of tokens to verify.

List<XmlTrustedServiceProvider>

XmlTrustedServiceProviderBuilder.build(CertificateToken certificateToken, Map<CertificateToken,List<TrustProperties>> relatedTrustServices)

This method builds a list of XmlTrustedServiceProviders corresponding to the given CertificateToken

protected XmlCertificate

DiagnosticDataBuilder.buildDetachedXmlCertificate(CertificateToken certToken)

This method builds an XmlCertificate from the given CertificateToken

protected XmlOrphanCertificateToken

DiagnosticDataBuilder.buildXmlOrphanCertificateToken(CertificateToken certificateToken)

This method builds an XmlOrphanCertificateToken from the given CertificateToken

boolean

SignatureValidationContext.checkCertificateNotRevoked(CertificateToken certificateToken)

boolean

ValidationContext.checkCertificateNotRevoked(CertificateToken certificateToken)

This method allows to verify if the certificate is not revoked Additionally, an alert can be handled CertificateVerifier.setAlertOnRevokedCertificate(eu.europa.esig.dss.alert.StatusAlert)

protected RevocationToken<CRL>

RevocationDataLoadingStrategy.checkCRL(CertificateToken certificateToken, CertificateToken issuerToken)

Retrieves and verifies the obtained CRL token NOTE: returns only if a valid entry has been obtained!

protected RevocationToken<OCSP>

RevocationDataLoadingStrategy.checkOCSP(CertificateToken certificateToken, CertificateToken issuerToken)

Retrieves and verifies the obtained OCSP token NOTE: returns only if a valid entry has been obtained!

static CertificateValidator

CertificateValidator.fromCertificate(CertificateToken token)

Creates a CertificateValidator from a certificateToken

RevocationToken

CRLFirstRevocationDataLoadingStrategy.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerToken)

RevocationToken

OCSPFirstRevocationDataLoadingStrategy.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerToken)

abstract RevocationToken

RevocationDataLoadingStrategy.getRevocationToken(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

This method retrieves a RevocationToken for the given certificateToken

List<RevocationToken<R>>

ListRevocationSource.getRevocationTokens(CertificateToken certificateToken, CertificateToken issuerCertificateToken)

protected XmlOrphanCertificate

DiagnosticDataBuilder.getXmlOrphanCertificate(CertificateOrigin origin, CertificateToken certificateToken, TokenCertificateSource certificateSource, CertificateToken signingCertificate)

This method builds an XmlOrphanCertificateToken

boolean

RevocationDataVerifier.isAcceptable(RevocationToken<?> revocationToken, CertificateToken issuerCertificateToken)

This method verifies the validity of the given RevocationToken

protected void

DiagnosticDataBuilder.populateOrphanCertificateOriginMap(Map<String,XmlOrphanCertificate> orphanCertificatesMap, CertificateOrigin origin, List<CertificateToken> certificateTokens, TokenCertificateSource certificateSource, CertificateToken signingCertificate)

Fills the orphan certificate map with the given values

protected XmlRelatedCertificate

DiagnosticDataBuilder.populateXmlRelatedCertificatesList(CertificateOrigin origin, CertificateToken cert, TokenCertificateSource certificateSource)

Builds an XmlRelatedCertificate

protected void

DiagnosticDataBuilder.populateXmlRelatedCertificatesList(List<XmlRelatedCertificate> relatesCertificates, TokenCertificateSource certificateSource, CertificateToken cert, CertificateRef certificateRef)

Builds an XmlRelatedCertificate and populates the relatesCertificates list

protected void

DiagnosticDataBuilder.verifyAgainstCertificateToken(XmlCertificateRef xmlCertificateRef, CertificateRef ref, CertificateToken signingCertificate)

Verifies the reference against a certificate token

Method parameters in eu.europa.esig.dss.validation with type arguments of type CertificateToken

Modifier and Type

Method

Description

List<XmlTrustedServiceProvider>

XmlTrustedServiceProviderBuilder.build(CertificateToken certificateToken, Map<CertificateToken,List<TrustProperties>> relatedTrustServices)

This method builds a list of XmlTrustedServiceProviders corresponding to the given CertificateToken

protected boolean

BaselineRequirementsChecker.containsSigningCertificate(Collection<CertificateToken> certificateTokens)

Checks if the given collection of CertificateTokens contains the signing certificate for the signature

void

ValidationData.excludeCertificateTokens(Collection<CertificateToken> certificateTokensToExclude)

Removes all certificate token entries matching the provided collection

protected void

DiagnosticDataBuilder.linkSigningCertificateAndChains(Set<CertificateToken> certificates)

Links the certificates and their certificate chains

protected void

SignedDocumentDiagnosticDataBuilder.linkSigningCertificateAndChains(Set<CertificateToken> certificates)

protected void

DiagnosticDataBuilder.populateCertificateOriginMap(Map<String,XmlRelatedCertificate> relatedCertificatesMap, CertificateOrigin origin, List<CertificateToken> certificateTokens, TokenCertificateSource certificateSource)

Fills the certificates origins map with the given properties

protected void

DiagnosticDataBuilder.populateOrphanCertificateOriginMap(Map<String,XmlOrphanCertificate> orphanCertificatesMap, CertificateOrigin origin, List<CertificateToken> certificateTokens, TokenCertificateSource certificateSource, CertificateToken signingCertificate)

Fills the orphan certificate map with the given values

CertificateDiagnosticDataBuilder

CertificateDiagnosticDataBuilder.usedCertificates(Set<CertificateToken> usedCertificates)

DiagnosticDataBuilder

DiagnosticDataBuilder.usedCertificates(Set<CertificateToken> usedCertificates)

This method allows to set the used certificates

SignedDocumentDiagnosticDataBuilder

SignedDocumentDiagnosticDataBuilder.usedCertificates(Set<CertificateToken> usedCertificates)

Constructors in eu.europa.esig.dss.validation with parameters of type CertificateToken

Modifier

Constructor

Description

AIACertificateSource(CertificateToken certificate, AIASource aiaSource)

Default constructor
Uses of CertificateToken in eu.europa.esig.dss.validation.timestamp

Methods in eu.europa.esig.dss.validation.timestamp that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

List<CertificateToken>

TimestampToken.getCertificates()

Returns the list of wrapped certificates.

Methods in eu.europa.esig.dss.validation.timestamp with parameters of type CertificateToken

Modifier and Type

Method

Description

protected SignatureValidity

TimestampToken.checkIsSignedBy(CertificateToken candidate)

Checks if timestamp is signed by teh given certificate

protected TimestampedReference

AbstractTimestampSource.createReferenceForCertificate(CertificateToken certificateToken)

Creates a TimestampedReference for the provided CertificateToken

boolean

TimestampToken.isSignedBy(CertificateToken certificateToken)

Checks if the timestamp token is signed by the given publicKey

Method parameters in eu.europa.esig.dss.validation.timestamp with type arguments of type CertificateToken

Modifier and Type

Method

Description

protected List<TimestampedReference>

AbstractTimestampSource.createReferencesForCertificates(Collection<CertificateToken> certificates)

Creates a list of TimestampedReferences for the provided list of certificates
Uses of CertificateToken in eu.europa.esig.dss.ws.converter

Methods in eu.europa.esig.dss.ws.converter that return CertificateToken

Modifier and Type

Method

Description

static CertificateToken

RemoteCertificateConverter.toCertificateToken(RemoteCertificate remoteCertificate)

Converts the given remoteCertificate to a CertificateToken

Methods in eu.europa.esig.dss.ws.converter that return types with arguments of type CertificateToken

Modifier and Type

Method

Description

static List<CertificateToken>

RemoteCertificateConverter.toCertificateTokens(List<RemoteCertificate> remoteCertificates)

Converts the given list of remoteCertificates to a list of CertificateTokens

Methods in eu.europa.esig.dss.ws.converter with parameters of type CertificateToken

Modifier and Type

Method

Description

static RemoteCertificate

RemoteCertificateConverter.toRemoteCertificate(CertificateToken certificate)

Converts the given certificate to a RemoteCertificate
Uses of CertificateToken in eu.europa.esig.dss.xades

Constructors in eu.europa.esig.dss.xades with parameters of type CertificateToken

Modifier

Constructor

Description

TrustedListSignatureParametersBuilder(CertificateToken signingCertificate, DSSDocument tlXmlDocument)

The constructor to build Signature Parameters for a Trusted List signing with respect to ETSI TS 119 612
Uses of CertificateToken in eu.europa.esig.dss.xades.signature

Methods in eu.europa.esig.dss.xades.signature with parameters of type CertificateToken

Modifier and Type

Method

Description

protected Element

XAdESBuilder.incorporateCert(Element parentDom, CertificateToken certificate, DigestAlgorithm digestAlgorithm)

Creates Cert DOM object:

protected void

XAdESBuilder.incorporateIssuerV1(Element parentDom, CertificateToken certificate)

Incorporates IssuerSerial element

protected void

XAdESBuilder.incorporateIssuerV2(Element parentDom, CertificateToken certificate)

Incorporates IssuerSerialV2 element

Method parameters in eu.europa.esig.dss.xades.signature with type arguments of type CertificateToken

Modifier and Type

Method

Description

protected Element

XAdESLevelBaselineT.incorporateCertificateValues(Element parentDom, Collection<CertificateToken> certificatesToBeAdded)

This method incorporates all certificates passed as parameter :

protected void

XAdESLevelBaselineT.incorporateCertificateValues(Element parentDom, Collection<CertificateToken> certificatesToBeAdded, String indent)

This method incorporates all certificates passed as parameter, as well as adds missing indents if the parameter is specified

Uses of Classeu.europa.esig.dss.model.x509.CertificateToken

Uses of CertificateToken in eu.europa.esig.dss

Uses of CertificateToken in eu.europa.esig.dss.cades

Uses of CertificateToken in eu.europa.esig.dss.cades.signature

Uses of CertificateToken in eu.europa.esig.dss.crl

Uses of CertificateToken in eu.europa.esig.dss.crl.stream.impl

Uses of CertificateToken in eu.europa.esig.dss.crl.x509.impl

Uses of CertificateToken in eu.europa.esig.dss.jades

Uses of CertificateToken in eu.europa.esig.dss.jades.signature

Uses of CertificateToken in eu.europa.esig.dss.jades.validation

Uses of CertificateToken in eu.europa.esig.dss.model

Uses of CertificateToken in eu.europa.esig.dss.model.identifier

Uses of CertificateToken in eu.europa.esig.dss.model.x509

Uses of CertificateToken in eu.europa.esig.dss.model.x509.extension

Uses of CertificateToken in eu.europa.esig.dss.pades.validation

Uses of CertificateToken in eu.europa.esig.dss.pades.validation.dss

Uses of CertificateToken in eu.europa.esig.dss.pdf

Uses of CertificateToken in eu.europa.esig.dss.service.crl

Uses of CertificateToken in eu.europa.esig.dss.service.http.commons

Uses of CertificateToken in eu.europa.esig.dss.service.ocsp

Uses of CertificateToken in eu.europa.esig.dss.service.x509.aia

Uses of CertificateToken in eu.europa.esig.dss.signature

Uses of CertificateToken in eu.europa.esig.dss.spi

Uses of CertificateToken in eu.europa.esig.dss.spi.tsl

Uses of CertificateToken in eu.europa.esig.dss.spi.x509

Uses of CertificateToken in eu.europa.esig.dss.spi.x509.aia

Uses of CertificateToken in eu.europa.esig.dss.spi.x509.revocation

Uses of CertificateToken in eu.europa.esig.dss.spi.x509.revocation.crl

Uses of CertificateToken in eu.europa.esig.dss.spi.x509.revocation.ocsp

Uses of CertificateToken in eu.europa.esig.dss.token

Uses of CertificateToken in eu.europa.esig.dss.tsl.dto

Uses of CertificateToken in eu.europa.esig.dss.tsl.dto.condition

Uses of CertificateToken in eu.europa.esig.dss.tsl.function.converter

Uses of CertificateToken in eu.europa.esig.dss.tsl.validation

Uses of CertificateToken in eu.europa.esig.dss.validation

Uses of CertificateToken in eu.europa.esig.dss.validation.timestamp

Uses of CertificateToken in eu.europa.esig.dss.ws.converter

Uses of CertificateToken in eu.europa.esig.dss.xades

Uses of CertificateToken in eu.europa.esig.dss.xades.signature

Uses of Class
eu.europa.esig.dss.model.x509.CertificateToken