Constructor Detail

• Builder

  public Builder​(java.security.cert.PKIXBuilderParameters baseParameters)

• Builder

  public Builder​(PKIXExtendedParameters baseParameters)

Method Detail

• addExcludedCerts

  public PKIXExtendedBuilderParameters.Builder addExcludedCerts​(java.util.Set<java.security.cert.X509Certificate> excludedCerts)

  Adds excluded certificates which are not used for building a certification path.

  The given set is cloned to protect it against subsequent modifications.

  Parameters:

  excludedCerts - The excluded certificates to set.

• setMaxPathLength

  public PKIXExtendedBuilderParameters.Builder setMaxPathLength​(int maxPathLength)

  Sets the maximum number of intermediate non-self-issued certificates in a certification path. The PKIX CertPathBuilder must not build paths longer then this length.

  A value of 0 implies that the path can only contain a single certificate. A value of -1 does not limit the length. The default length is 5.

  The basic constraints extension of a CA certificate overrides this value if smaller.

  Parameters:

  maxPathLength - the maximum number of non-self-issued intermediate certificates in the certification path

  Throws:

  java.security.InvalidParameterException - if maxPathLength is set to a value less than -1

  See Also:

  PKIXExtendedBuilderParameters.getMaxPathLength()

• build

  public PKIXExtendedBuilderParameters build()