Package net.ripe.rpki.commons.crypto.x509cert

Class X509ResourceCertificateParser

java.lang.Object

net.ripe.rpki.commons.crypto.x509cert.X509CertificateParser<X509ResourceCertificate>

net.ripe.rpki.commons.crypto.x509cert.X509ResourceCertificateParser

public class X509ResourceCertificateParser
extends X509CertificateParser<X509ResourceCertificate>

Field Summary

Fields inherited from class net.ripe.rpki.commons.crypto.x509cert.X509CertificateParser

certificate, result

Constructor Summary

Constructors

Constructor	Description
X509ResourceCertificateParser()

Method Summary

Modifier and Type	Method	Description
protected void	doTypeSpecificValidation()
X509ResourceCertificate	getCertificate()
boolean	mayHaveOneValidSerialNumber(org.bouncycastle.asn1.x500.X500Name principal)
protected void	validateKeyUsage()	https://datatracker.ietf.org/doc/html/rfc6487#section-4.8.4 KeyUsage validation added as warning to be similar to current checks.

Methods inherited from class net.ripe.rpki.commons.crypto.x509cert.X509CertificateParser

getValidationResult, getX509Certificate, isAsResourceExtensionPresent, isBgpSecExtensionPresent, isIpResourceExtensionPresent, isResourceExtensionPresent, isSuccess, parse, parse, parseCertificate, parseX509Certificate, validatePublicKey, validateX509Certificate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509ResourceCertificateParser

public X509ResourceCertificateParser()

Method Detail

getCertificate

public X509ResourceCertificate getCertificate()

Specified by:

getCertificate in class X509CertificateParser<X509ResourceCertificate>

doTypeSpecificValidation

protected void doTypeSpecificValidation()

Overrides:

doTypeSpecificValidation in class X509CertificateParser<X509ResourceCertificate>

validateKeyUsage

protected void validateKeyUsage()

https://datatracker.ietf.org/doc/html/rfc6487#section-4.8.4 KeyUsage validation added as warning to be similar to current checks.

mayHaveOneValidSerialNumber

public boolean mayHaveOneValidSerialNumber(org.bouncycastle.asn1.x500.X500Name principal)