TrustAnchor

TrustAnchor

java.security.cert

---

Java 1.4

A trustAnchor represents a certificate authority that is trusted to "anchor" a certificate chain. A TRustAnchor object includes the X.500 distinguished name of the CA and the public key of the CA. You may specify the name and key explictly or by passing an X509Certificate to the trustAnchor( ) constructor. If you do not pass a certificate, you can specify the CA name as a String or as an X500Principal object from the javax.security.auth.x500 package. All forms of the trustAnchor( ) constructor also allow you to specify a byte array containing a binary representation of a "Name Constraints" extension. The format and meaning of such name constraints is beyond the scope of this reference, and most applications can simply specify null for this constructor argument.

 public class  TrustAnchor  {  // Public Constructors  public  TrustAnchor  (X509Certificate  trustedCert  , byte[ ]  nameConstraints  );  5.0  public  TrustAnchor  (javax.security.auth.x500.X500Principal  caPrincipal  ,          java.security.PublicKey  pubKey  ,         byte[ ]  nameConstraints  );        public  TrustAnchor  (String  caName  , java.security.PublicKey  pubKey  ,          byte[ ]  nameConstraints  );  // Public Instance Methods   5.0  public final javax.security.auth.x500.X500Principal  getCA  ( );        public final String  getCAName  ( );        public final java.security.PublicKey  getCAPublicKey  ( );        public final byte[ ]  getNameConstraints  ( );        public final X509Certificate  getTrustedCert  ( );  // Public Methods Overriding Object  public String  toString  ( );   } 

Passed To

PKIXCertPathBuilderResult.PKIXCertPathBuilderResult( ) , PKIXCertPathValidatorResult.PKIXCertPathValidatorResult( )

Returned By

PKIXCertPathValidatorResult.getTrustAnchor( )