Package de.mtg.jzlint.lints.cabf_br

Class CaDigitalSignatureNotSet

java.lang.Object

de.mtg.jzlint.lints.cabf_br.CaDigitalSignatureNotSet

All Implemented Interfaces:

JavaLint

public class CaDigitalSignatureNotSet
extends Object
implements JavaLint

BRs: 7.1.2.1b: Root CA Certificate keyUsage This extension MUST be present and MUST be marked critical. Bit positions for keyCertSign and cRLSign MUST be set. If the Root CA Private Key is used for signing OCSP responses, then the digitalSignature bit MUST be set. BRs: 7.1.2.2e: Subordinate CA Certificate keyUsage This extension MUST be present and MUST be marked critical. Bit positions for keyCertSign and cRLSign MUST be set. If the Root CA Private Key is used for signing OCSP responses, then the digitalSignature bit MUST be set.

Constructor Summary

Constructors

Constructor	Description
CaDigitalSignatureNotSet()

Method Summary

Modifier and Type	Method	Description
boolean	checkApplies(X509Certificate certificate)
LintResult	execute(X509Certificate certificate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CaDigitalSignatureNotSet

public CaDigitalSignatureNotSet()

Method Details

execute

public LintResult execute(X509Certificate certificate)

Specified by:

execute in interface JavaLint

checkApplies

public boolean checkApplies(X509Certificate certificate)

Specified by:

checkApplies in interface JavaLint