Class AttestationTrustSource.TrustRootsResult

Enclosing interface:

public static final class AttestationTrustSource.TrustRootsResult extends Object
A result of looking up attestation trust roots for a particular attestation statement.

This primarily consists of a set of trust root certificates - see trustRoots(Set) - but may also:

  • Method Details

    • getCertStore

      public Optional<CertStore> getCertStore()
      A CertStore of additional CRLs and/or intermediate certificates to use during certificate path validation, if any. This will not be used if trustRoots is empty.

      Any certificates included in this CertStore are NOT considered trusted; they will be trusted only if they chain to any of the trustRoots.

      The default is null.

    • getPolicyTreeValidator

      public Optional<Predicate<PolicyNode>> getPolicyTreeValidator()
      If non-null, the PolicyQualifiersRejected flag will be set to false during certificate path validation. See PKIXParameters.setPolicyQualifiersRejected(boolean).

      The given Predicate will be used to validate the policy tree. The Predicate should return true if the policy tree is acceptable, and false otherwise.

      Depending on your "PKIX" JCA provider configuration, this may be required if any certificate in the certificate path contains a certificate policies extension marked critical. If this is not set, then such a certificate will be rejected by the certificate path validator from the default provider.

      Consult the Java PKI Programmer's Guide for how to use the PolicyNode argument of the Predicate.

      The default is null.

    • builder

    • getTrustRoots

      @NonNull public @NonNull Set<X509Certificate> getTrustRoots()
      A set of attestation root certificates trusted to certify the relevant attestation statement. If the attestation statement is not trusted, or if no trust roots were found, this should be an empty set.
    • isEnableRevocationChecking

      public boolean isEnableRevocationChecking()
      Whether certificate revocation should be checked during certificate path validation.
    • toBuilder

    • equals

      public boolean equals(Object o)
      equals in class Object
    • hashCode

      public int hashCode()
      hashCode in class Object
    • toString

      public String toString()
      toString in class Object