Package fr.gouv.vitam.worker.core.plugin.traceability

Class TimestampCertificateValidator

java.lang.Object

fr.gouv.vitam.worker.core.plugin.traceability.TimestampCertificateValidator

public class TimestampCertificateValidator
extends Object

Validates the TSA signing certificate extracted from an RFC 3161 timestamp token against a truststore.

Constructor Summary

Constructors

Constructor	Description
TimestampCertificateValidator()

Method Summary

Modifier and Type	Method	Description
void	validate(org.bouncycastle.cert.X509CertificateHolder certHolder, Date genTime, KeyStore trustStore)	Validates certHolder against trustStore using genTime as the reference date.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TimestampCertificateValidator

public TimestampCertificateValidator()

Method Details

validate

public void validate(org.bouncycastle.cert.X509CertificateHolder certHolder,
 Date genTime,
 KeyStore trustStore)
              throws TrustValidationException

Validates certHolder against trustStore using genTime as the reference date.

Parameters:

certHolder - the TSA signing certificate embedded in the timestamp token

genTime - the date at which the timestamp token was generated (token genTime)

trustStore - the operator-configured truststore

Throws:

TrustValidationException - with TraceabilityError.CERTIFICATE_NOT_VALID_AT_SIGNATURE_DATE if the certificate was not valid at genTime, or with TraceabilityError.UNSUPPORTED_CERTIFICATE if the certificate cannot be converted or the PKIX chain validation fails