Interface CertPathChecker

All Known Implementing Classes:: PKIXCertPathChecker, PKIXRevocationChecker

public interface CertPathChecker

Performs one or more checks on each Certificate of a CertPath.

A CertPathChecker implementation is typically created to extend a certification path validation algorithm. For example, an implementation may check for and process a critical private extension of each certificate in a certification path.

Since:: 1.8

Method Summary

Modifier and Type	Method	Description
`void`	`check(Certificate cert)`	Performs the check(s) on the specified certificate using its internal state.
`void`	`init(boolean forward)`	Initializes the internal state of this `CertPathChecker`.
`boolean`	`isForwardCheckingSupported()`	Indicates if forward checking is supported.

Method Details

init

void init(boolean forward) throws CertPathValidatorException

Initializes the internal state of this CertPathChecker.

The forward flag specifies the order that certificates will be passed to the check method (forward or reverse).

Parameters:: forward - the order that certificates are presented to the check method. If true, certificates are presented from target to trust anchor (forward); if false, from trust anchor to target (reverse).
Throws:: CertPathValidatorException - if this CertPathChecker is unable to check certificates in the specified order

isForwardCheckingSupported

boolean isForwardCheckingSupported()

Indicates if forward checking is supported. Forward checking refers to the ability of the CertPathChecker to perform its checks when certificates are presented to the check method in the forward direction (from target to trust anchor).

Returns:: true if forward checking is supported, false otherwise

check

void check(Certificate cert) throws CertPathValidatorException

Performs the check(s) on the specified certificate using its internal state. The certificates are presented in the order specified by the init method.

Parameters:: cert - the Certificate to be checked
Throws:: CertPathValidatorException - if the specified certificate does not pass the check

© 1993, 2025, Oracle and/or its affiliates. All rights reserved.
Documentation extracted from Debian's OpenJDK Development Kit package.
Licensed under the GNU General Public License, version 2, with the Classpath Exception.
Various third party code in OpenJDK is licensed under different licenses (see Debian package).
Java and OpenJDK are trademarks or registered trademarks of Oracle and/or its affiliates.