Examples of PolicyConstraintsExtension

sun.security.x509.PolicyConstraintsExtension

This class defines the certificate extension which specifies the Policy constraints.

The policy constraints extension can be used in certificates issued to CAs. The policy constraints extension constrains path validation in two ways. It can be used to prohibit policy mapping or require that each certificate in a path contain an acceptable policy identifier.

The ASN.1 syntax for this is (IMPLICIT tagging is defined in the module definition):

 PolicyConstraints ::= SEQUENCE { requireExplicitPolicy [0] SkipCerts OPTIONAL, inhibitPolicyMapping  [1] SkipCerts OPTIONAL } SkipCerts ::= INTEGER (0..MAX)

@author Amit Kapoor @author Hemma Prafullchandra @see Extension @see CertAttrSet

        if ((policyMapping > 0) && !X509CertImpl.isSelfIssued(currCert)) {
            policyMapping--;
        }


        try {
            PolicyConstraintsExtension polConstExt
                = currCert.getPolicyConstraintsExtension();
            if (polConstExt == null)
                return policyMapping;


            int inhibit = ((Integer)
                polConstExt.get(PolicyConstraintsExtension.INHIBIT)).intValue();
            if (debug != null)
                debug.println("PolicyChecker.mergePolicyMapping() "
                    + "inhibit Index from cert = " + inhibit);


            if (inhibit != -1) {

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of PolicyConstraintsExtension

Examples of sun.security.x509.PolicyConstraintsExtension