Package eu.europa.esig.dss.policy
Class EtsiValidationPolicy
java.lang.Object
eu.europa.esig.dss.policy.EtsiValidationPolicy
- All Implemented Interfaces:
ValidationPolicy
public class EtsiValidationPolicy extends Object implements ValidationPolicy
This class encapsulates the constraint file that controls the policy to be used during the validation process. It
adds the functions to direct access to the
file data. It is the implementation of the ETSI 102853 standard.
-
Constructor Summary
Constructors Constructor Description EtsiValidationPolicy(ConstraintsParameters policy)
Default constructor -
Method Summary
Modifier and Type Method Description MultiValuesConstraint
getAcceptedContainerTypesConstraint()
Returns AcceptedContainerTypes constraint if present in the policy, null otherwiseMultiValuesConstraint
getAcceptedMimeTypeContentsConstraint()
Returns AcceptedMimeTypeContents constraint if present in the policy, null otherwiseMultiValuesConstraint
getAcceptedZipCommentsConstraint()
Returns AcceptedZipComments constraint if present in the policy, null otherwiseDate
getAlgorithmExpirationDate(String algorithm, Context context, SubContext subContext)
This function returns the algorithm expiration date extracted from the 'constraint.xml' file.LevelConstraint
getAllFilesSignedConstraint()
Returns AllFilesSigned constraint if present in the policy, null otherwiseLevelConstraint
getAllSigningCertificateDigestValuesMatchConstraint(Context context)
Indicates if all signing certificate reference digests match the signing certificateLevelConstraint
getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint()
This constraint checks if the certificate is not expired on best-signature-timeLevelConstraint
getCertificateAuthorityInfoAccessPresentConstraint(Context context, SubContext subContext)
Returns CertificateAuthorityInfoAccessPresent constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertificateCommonNameConstraint(Context context, SubContext subContext)
Returns CertificateCommonName constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertificateCountryConstraint(Context context, SubContext subContext)
Returns CertificateCountry constraint if present in the policy, null otherwiseCryptographicConstraint
getCertificateCryptographicConstraint(Context context, SubContext subContext)
This method creates theSignatureCryptographicConstraint
corresponding to the context parameter.MultiValuesConstraint
getCertificateExtendedKeyUsageConstraint(Context context, SubContext subContext)
Returns certificate extended key usage constraintMultiValuesConstraint
getCertificateGivenNameConstraint(Context context, SubContext subContext)
Returns CertificateGivenName constraint if present in the policy, null otherwiseLevelConstraint
getCertificateIssuedToLegalPersonConstraint(Context context, SubContext subContext)
Indicates if the end user certificate used in validating the signature is issued to a legal person.LevelConstraint
getCertificateIssuedToNaturalPersonConstraint(Context context, SubContext subContext)
Returns CertificateIssuedToNaturalPerson constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertificateKeyUsageConstraint(Context context, SubContext subContext)
Returns certificate key usage constraintLevelConstraint
getCertificateNotExpiredConstraint(Context context, SubContext subContext)
Returns certificate's not expired constraintLevelConstraint
getCertificateNotOnHoldConstraint(Context context, SubContext subContext)
Returns certificate's not onHold constraintLevelConstraint
getCertificateNotRevokedConstraint(Context context, SubContext subContext)
Returns certificate's not revoked constraintLevelConstraint
getCertificateNotSelfSignedConstraint(Context context, SubContext subContext)
Returns certificate's not self-signed constraintMultiValuesConstraint
getCertificateOrganizationNameConstraint(Context context, SubContext subContext)
Returns CertificateOrganizationName constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertificateOrganizationUnitConstraint(Context context, SubContext subContext)
Returns CertificateOrganizationUnit constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertificatePolicyIdsConstraint(Context context, SubContext subContext)
Returns CertificatePolicyIds constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertificatePseudonymConstraint(Context context, SubContext subContext)
Returns CertificatePseudonym constraint if present in the policy, null otherwiseLevelConstraint
getCertificatePseudoUsageConstraint(Context context, SubContext subContext)
Returns CertificatePseudoUsage constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertificateQCStatementIdsConstraint(Context context, SubContext subContext)
Returns CertificateQCStatementIds constraint if present in the policy, null otherwiseLevelConstraint
getCertificateQualificationConstraint(Context context, SubContext subContext)
Indicates if the end user certificate is qualified.LevelConstraint
getCertificateRevocationFreshnessConstraint(Context context, SubContext subContext)
Returns revocation data's freshness constraintLevelConstraint
getCertificateRevocationInfoAccessPresentConstraint(Context context, SubContext subContext)
Returns CertificateRevocationInfoAccessPresent constraint if present in the policy, null otherwiseLevelConstraint
getCertificateSelfSignedConstraint(Context context, SubContext subContext)
Returns certificate's self-signed constraintLevelConstraint
getCertificateSerialNumberConstraint(Context context, SubContext subContext)
Returns CertificateSerialNumber constraint if present in the policy, null otherwiseLevelConstraint
getCertificateSignatureConstraint(Context context, SubContext subContext)
Returns certificate's signature constraintLevelConstraint
getCertificateSupportedByQSCDConstraint(Context context, SubContext subContext)
Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).MultiValuesConstraint
getCertificateSurnameConstraint(Context context, SubContext subContext)
Returns CertificateSurname constraint if present in the policy, null otherwiseMultiValuesConstraint
getCertifiedRolesConstraint(Context context)
Return the mandated signer role.MultiValuesConstraint
getClaimedRoleConstraint(Context context)
Indicates if the unsigned property: claimed-role should be checked.MultiValuesConstraint
getCommitmentTypeIndicationConstraint(Context context)
Indicates if the signed property: commitment-type-indication should be checked.ContainerConstraints
getContainerConstraints()
Returns the constraint used for ASiC Container validationValueConstraint
getContentHintsConstraint(Context context)
Indicates if the signed property: content-hints should be checked.ValueConstraint
getContentIdentifierConstraint(Context context)
Indicates if the signed property: content-identifier should be checked.LevelConstraint
getContentTimestampConstraint(Context context)
Indicates if the signed property: content-time-stamp should be checked.ValueConstraint
getContentTypeConstraint(Context context)
Indicates if the signed property: content-type should be checked.LevelConstraint
getCounterSignatureConstraint(Context context)
Returns CounterSignature constraint if present in the policy, null otherwiseSignatureConstraints
getCounterSignatureConstraints()
Returns the constraint used for Counter Signature validationCryptographicConstraint
getCryptographic()
Returns the common constraint used for cryptographic validationCryptographicConstraint
getDefaultCryptographicConstraint()
Gets the global cryptographic constraintsEIDAS
getEIDASConstraints()
Returns the constraint used for qualification validationLevelConstraint
getFullScopeConstraint()
Returns FullScope constraint if present in the policy, null otherwiseLevelConstraint
getManifestEntryObjectExistenceConstraint(Context context)
Indicates if the manifested document is foundLevelConstraint
getManifestFilePresentConstraint()
Returns ManifestFilePresent constraint if present in the policy, null otherwiseLevelConstraint
getMessageDigestOrSignedPropertiesConstraint(Context context)
Indicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked.LevelConstraint
getMimeTypeFilePresentConstraint()
Returns MimeTypeFilePresent constraint if present in the policy, null otherwiseLevelConstraint
getOCSPResponseCertHashMatchConstraint()
The method returns OCSPCertHashMatch constraintLevelConstraint
getOCSPResponseCertHashPresentConstraint()
The method returns OCSPCertHashPresent constraintLevelConstraint
getPdfAnnotationOverlapConstraint(Context context)
Indicates if a PDF annotation overlapping check should be proceeded.LevelConstraint
getPdfPageDifferenceConstraint(Context context)
Indicates if a PDF page difference check should be proceeded.LevelConstraint
getPdfVisualDifferenceConstraint(Context context)
Indicates if a PDF visual difference check should be proceeded.String
getPolicyDescription()
Returns the policy description.String
getPolicyName()
Returns the name of the policy.LevelConstraint
getProspectiveCertificateChainConstraint(Context context)
This constraint requests the presence of the trust anchor in the certificate chain.LevelConstraint
getReferenceDataExistenceConstraint(Context context)
Indicates if the referenced data is foundLevelConstraint
getReferenceDataIntactConstraint(Context context)
Indicates if the referenced data is intactLevelConstraint
getReferencesToAllCertificateChainPresentConstraint(Context context)
Indicates if the whole certificate chain is covered by the Signing Certificate attribute.RevocationConstraints
getRevocationConstraints()
Returns the constraint used for Revocation validationLevelConstraint
getRevocationDataAvailableConstraint(Context context, SubContext subContext)
Returns revocation data available constraintLevelConstraint
getRevocationDataNextUpdatePresentConstraint(Context context, SubContext subContext)
Returns revocation data's nextUpdate present constraintTimeConstraint
getRevocationFreshnessConstraint()
Returns RevocationFreshness constraint if present in the policy, null otherwiseLevelConstraint
getRevocationTimeAgainstBestSignatureTimeConstraint()
Returns RevocationTimeAgainstBestSignatureTime constraint if present in the policy, null otherwiseLevelConstraint
getSelfIssuedOCSPConstraint()
The method returns SelfIssuedOCSP constraintSignatureConstraints
getSignatureConstraints()
Returns the constraint used for Signature validationCryptographicConstraint
getSignatureCryptographicConstraint(Context context)
This method creates theSignatureCryptographicConstraint
corresponding to the context parameter.LevelConstraint
getSignatureDuplicatedConstraint(Context context)
Indicates if the signature is not ambiguousMultiValuesConstraint
getSignatureFormatConstraint(Context context)
Returns SignatureFormat constraint if present in the policy, null otherwiseLevelConstraint
getSignatureIntactConstraint(Context context)
Indicates if the signature is intactMultiValuesConstraint
getSignaturePolicyConstraint(Context context)
Indicates if the signature policy should be checked.LevelConstraint
getSignaturePolicyIdentifiedConstraint(Context context)
Indicates if the signature policy validation should be processed.LevelConstraint
getSignaturePolicyPolicyHashValid(Context context)
Indicates if digest present in a SignaturePolicyIdentifier shall match to the extracted policy contentLevelConstraint
getSignaturePolicyStorePresentConstraint(Context context)
Indicates if a SignaturePolicyStore unsigned attribute, containing a used policy binaries, presence shall be checkedLevelConstraint
getSignedFilesPresentConstraint()
Returns SignedFilesPresent constraint if present in the policy, null otherwiseLevelConstraint
getSignerInformationStoreConstraint(Context context)
This constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdESLevelConstraint
getSignerLocationConstraint(Context context)
Indicates if the signed property: signer-location should be checked.LevelConstraint
getSigningCertificateAttributePresentConstraint(Context context)
Indicates if the signing certificate attribute is presentLevelConstraint
getSigningCertificateDigestValueMatchConstraint(Context context)
Indicates if the signing certificate reference's digest value matchesLevelConstraint
getSigningCertificateDigestValuePresentConstraint(Context context)
Indicates if the signing certificate reference's digest value is presentLevelConstraint
getSigningCertificateIssuerSerialMatchConstraint(Context context)
Indicates if the signing certificate reference's issuer serial matchesLevelConstraint
getSigningCertificateRecognitionConstraint(Context context)
Indicates if the end user certificate used in validating the signature is issued to a natural person.LevelConstraint
getSigningCertificateRefersCertificateChainConstraint(Context context)
Indicates if the Signing Certificate attribute should be checked against the certificate chain.LevelConstraint
getSigningTimeConstraint(Context context)
Indicates if the signed property: signing-time should be checked.LevelConstraint
getStructuralValidationConstraint(Context context)
Indicates if the structural validation should be checked.LevelConstraint
getTimestampCoherenceConstraint()
This constraint checks if the timestamp order is coherentTimestampConstraints
getTimestampConstraints()
Returns the constraint used for Timestamp validationTimeConstraint
getTimestampDelayConstraint()
Returns TimestampDelay constraint if present in the policy, null otherwiseTimeConstraint
getTLFreshnessConstraint()
Returns TLFreshness constraint if present in the policy, null otherwiseLevelConstraint
getTLNotExpiredConstraint()
Returns TLNotExpired constraint if present in the policy, null otherwiseValueConstraint
getTLVersionConstraint()
Returns TLVersion constraint if present in the policy, null otherwiseLevelConstraint
getTLWellSignedConstraint()
Returns TLWellSigned constraint if present in the policy, null otherwiseMultiValuesConstraint
getTrustedServiceStatusConstraint(Context context)
Returns trusted service status constraintMultiValuesConstraint
getTrustedServiceTypeIdentifierConstraint(Context context)
Returns trusted service type identifier constraintLevelConstraint
getUnicitySigningCertificateAttributeConstraint(Context context)
Indicates if the signing certificate is not ambiguously determinesLevelConstraint
getUnknownStatusConstraint()
The method returns UnknownStatus constraintModel
getValidationModel()
Returns the used validation model (default is SHELL).LevelConstraint
getZipCommentPresentConstraint()
Returns ZipCommentPresent constraint if present in the policy, null otherwiseboolean
isEIDASConstraintPresent()
Returns if EIDAS constraints present (qualification check shall be performed)
-
Constructor Details
-
EtsiValidationPolicy
Default constructor- Parameters:
policy
-ConstraintsParameters
-
-
Method Details
-
getAlgorithmExpirationDate
Description copied from interface:ValidationPolicy
This function returns the algorithm expiration date extracted from the 'constraint.xml' file. If the TAG AlgoExpirationDate is not present within the constraintsnull
is returned.- Specified by:
getAlgorithmExpirationDate
in interfaceValidationPolicy
- Parameters:
algorithm
- algorithm (SHA1, SHA256, RSA2048...) to be checkedcontext
-Context
subContext
-SubContext
- Returns:
- expiration date or null
-
getSignaturePolicyConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature policy should be checked. If AcceptablePolicies element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.- Specified by:
getSignaturePolicyConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SigningTime element is present in the constraint file, null otherwise.
-
getSignaturePolicyIdentifiedConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature policy validation should be processed. If SignaturePolicyIdentifier found, but not relevant SignaturePolicy is retrieved, the check fails.- Specified by:
getSignaturePolicyIdentifiedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SignaturePolicy shall be identified
-
getSignaturePolicyStorePresentConstraint
Description copied from interface:ValidationPolicy
Indicates if a SignaturePolicyStore unsigned attribute, containing a used policy binaries, presence shall be checked- Specified by:
getSignaturePolicyStorePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SignaturePolicyStore presence shall be checked
-
getSignaturePolicyPolicyHashValid
Description copied from interface:ValidationPolicy
Indicates if digest present in a SignaturePolicyIdentifier shall match to the extracted policy content- Specified by:
getSignaturePolicyPolicyHashValid
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SignaturePolicyIdentifier digest shall match
-
getSignatureFormatConstraint
Description copied from interface:ValidationPolicy
Returns SignatureFormat constraint if present in the policy, null otherwise- Specified by:
getSignatureFormatConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesConstraint
if SignatureFormat element is present in the constraint file, null otherwise.
-
getSignerInformationStoreConstraint
Description copied from interface:ValidationPolicy
This constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdES- Specified by:
getSignerInformationStoreConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SignerInformationStore element for a given context element is present in the constraint file, null otherwise.
-
getPdfPageDifferenceConstraint
Description copied from interface:ValidationPolicy
Indicates if a PDF page difference check should be proceeded. If PdfPageDifference element is absent within the constraint file then null is returned.- Specified by:
getPdfPageDifferenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if PdfPageDifference element is present in the constraint file, null otherwise.
-
getPdfAnnotationOverlapConstraint
Description copied from interface:ValidationPolicy
Indicates if a PDF annotation overlapping check should be proceeded. If PdfAnnotationOverlap element is absent within the constraint file then null is returned.- Specified by:
getPdfAnnotationOverlapConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if PdfAnnotationOverlap element is present in the constraint file, null otherwise.
-
getPdfVisualDifferenceConstraint
Description copied from interface:ValidationPolicy
Indicates if a PDF visual difference check should be proceeded. If PdfVisualDifference element is absent within the constraint file then null is returned.- Specified by:
getPdfVisualDifferenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if PdfVisualDifference element is present in the constraint file, null otherwise.
-
getStructuralValidationConstraint
Description copied from interface:ValidationPolicy
Indicates if the structural validation should be checked. If StructuralValidation element is absent within the constraint file then null is returned.- Specified by:
getStructuralValidationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if StructuralValidation element is present in the constraint file, null otherwise.
-
getSigningCertificateRefersCertificateChainConstraint
Description copied from interface:ValidationPolicy
Indicates if the Signing Certificate attribute should be checked against the certificate chain. If SigningCertificateRefersCertificateChain element is absent within the constraint file then null is returned.- Specified by:
getSigningCertificateRefersCertificateChainConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SigningCertificateRefersCertificateChain element is present in the constraint file, null otherwise.
-
getReferencesToAllCertificateChainPresentConstraint
Description copied from interface:ValidationPolicy
Indicates if the whole certificate chain is covered by the Signing Certificate attribute. If ReferencesToAllCertificateChainPresent element is absent within the constraint file then null is returned.- Specified by:
getReferencesToAllCertificateChainPresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if ReferencesToAllCertificateChainPresent element is present in the constraint file, null otherwise.
-
getSigningTimeConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: signing-time should be checked. If SigningTime element is absent within the constraint file then null is returned.- Specified by:
getSigningTimeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SigningTime element is present in the constraint file, null otherwise.
-
getContentTypeConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-type should be checked. If ContentType element is absent within the constraint file then null is returned.- Specified by:
getContentTypeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
ValueConstraint
if ContentType element is present in the constraint file, null otherwise.
-
getCounterSignatureConstraint
Description copied from interface:ValidationPolicy
Returns CounterSignature constraint if present in the policy, null otherwise- Specified by:
getCounterSignatureConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
DiagnosticDataFacade- Returns:
LevelConstraint
if CounterSignature element is present in the constraint file, null otherwise.
-
getContentHintsConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-hints should be checked. If ContentHints element is absent within the constraint file then null is returned.- Specified by:
getContentHintsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
ValueConstraint
if ContentHints element is present in the constraint file, null otherwise.
-
getContentIdentifierConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-identifier should be checked. If ContentIdentifier element is absent within the constraint file then null is returned.- Specified by:
getContentIdentifierConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
ValueConstraint
if ContentIdentifier element is present in the constraint file, null otherwise.
-
getMessageDigestOrSignedPropertiesConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked. If the relative element is absent within the constraint file then null is returned.- Specified by:
getMessageDigestOrSignedPropertiesConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if message-digests/SignedProperties element is present in the constraint file, null otherwise.
-
getCommitmentTypeIndicationConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: commitment-type-indication should be checked. If CommitmentTypeIndication element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.- Specified by:
getCommitmentTypeIndicationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesConstraint
if CommitmentTypeIndication element is present in the constraint file, null otherwise.
-
getSignerLocationConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: signer-location should be checked. If SignerLocation element is absent within the constraint file then null is returned.- Specified by:
getSignerLocationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SignerLocation element is present in the constraint file, null otherwise.
-
getClaimedRoleConstraint
Description copied from interface:ValidationPolicy
Indicates if the unsigned property: claimed-role should be checked. If ClaimedRoles element is absent within the constraint file then null is returned.- Specified by:
getClaimedRoleConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesConstraint
if ClaimedRoles element is present in the constraint file, null otherwise.
-
getCertifiedRolesConstraint
Description copied from interface:ValidationPolicy
Return the mandated signer role.- Specified by:
getCertifiedRolesConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
MultiValuesConstraint
-
getPolicyName
Description copied from interface:ValidationPolicy
Returns the name of the policy.- Specified by:
getPolicyName
in interfaceValidationPolicy
- Returns:
String
-
getPolicyDescription
Description copied from interface:ValidationPolicy
Returns the policy description.- Specified by:
getPolicyDescription
in interfaceValidationPolicy
- Returns:
String
-
getSignatureCryptographicConstraint
Description copied from interface:ValidationPolicy
This method creates theSignatureCryptographicConstraint
corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.- Specified by:
getSignatureCryptographicConstraint
in interfaceValidationPolicy
- Parameters:
context
- The context of the signature cryptographic constraints: MainSignature, Timestamp, Revocation- Returns:
SignatureCryptographicConstraint
if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.
-
getCertificateCryptographicConstraint
public CryptographicConstraint getCertificateCryptographicConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
This method creates theSignatureCryptographicConstraint
corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.- Specified by:
getCertificateCryptographicConstraint
in interfaceValidationPolicy
- Parameters:
context
- The context of the signature cryptographic constraints: MainSignature, Timestamp, RevocationsubContext
- the sub context of the signature cryptographic constraints: EMPTY (signature itself), SigningCertificate, CACertificate- Returns:
SignatureCryptographicConstraint
if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.
-
getDefaultCryptographicConstraint
Gets the global cryptographic constraints- Returns:
CryptographicConstraint
-
getCertificateKeyUsageConstraint
public MultiValuesConstraint getCertificateKeyUsageConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns certificate key usage constraint- Specified by:
getCertificateKeyUsageConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if key-usage for a given context element is present in the constraint file, null otherwise.
-
getCertificateExtendedKeyUsageConstraint
public MultiValuesConstraint getCertificateExtendedKeyUsageConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns certificate extended key usage constraint- Specified by:
getCertificateExtendedKeyUsageConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if extended key-usage for a given context element is present in the constraint file, null otherwise.
-
getCertificateSurnameConstraint
public MultiValuesConstraint getCertificateSurnameConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateSurname constraint if present in the policy, null otherwise- Specified by:
getCertificateSurnameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificateSurname element is present in the constraint file, null otherwise.
-
getCertificateGivenNameConstraint
public MultiValuesConstraint getCertificateGivenNameConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateGivenName constraint if present in the policy, null otherwise- Specified by:
getCertificateGivenNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificateGivenName element is present in the constraint file, null otherwise.
-
getCertificateCommonNameConstraint
public MultiValuesConstraint getCertificateCommonNameConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateCommonName constraint if present in the policy, null otherwise- Specified by:
getCertificateCommonNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificateCommonName element is present in the constraint file, null otherwise.
-
getCertificatePseudonymConstraint
public MultiValuesConstraint getCertificatePseudonymConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificatePseudonym constraint if present in the policy, null otherwise- Specified by:
getCertificatePseudonymConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificatePseudonym element is present in the constraint file, null otherwise.
-
getCertificateCountryConstraint
public MultiValuesConstraint getCertificateCountryConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateCountry constraint if present in the policy, null otherwise- Specified by:
getCertificateCountryConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificateCountry element is present in the constraint file, null otherwise.
-
getCertificateOrganizationNameConstraint
public MultiValuesConstraint getCertificateOrganizationNameConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateOrganizationName constraint if present in the policy, null otherwise- Specified by:
getCertificateOrganizationNameConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificateOrganizationName element is present in the constraint file, null otherwise.
-
getCertificateOrganizationUnitConstraint
public MultiValuesConstraint getCertificateOrganizationUnitConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateOrganizationUnit constraint if present in the policy, null otherwise- Specified by:
getCertificateOrganizationUnitConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificateOrganizationUnit element is present in the constraint file, null otherwise.
-
getCertificatePseudoUsageConstraint
Description copied from interface:ValidationPolicy
Returns CertificatePseudoUsage constraint if present in the policy, null otherwise- Specified by:
getCertificatePseudoUsageConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if CertificatePseudoUsage element is present in the constraint file, null otherwise.
-
getCertificateSerialNumberConstraint
public LevelConstraint getCertificateSerialNumberConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateSerialNumber constraint if present in the policy, null otherwise- Specified by:
getCertificateSerialNumberConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if CertificateSerialNumber element is present in the constraint file, null otherwise.
-
getCertificateNotExpiredConstraint
Description copied from interface:ValidationPolicy
Returns certificate's not expired constraint- Specified by:
getCertificateNotExpiredConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if Expiration for a given context element is present in the constraint file, null otherwise.
-
getProspectiveCertificateChainConstraint
Description copied from interface:ValidationPolicy
This constraint requests the presence of the trust anchor in the certificate chain.- Specified by:
getProspectiveCertificateChainConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if ProspectiveCertificateChain element for a given context element is present in the constraint file, null otherwise.
-
getCertificateAuthorityInfoAccessPresentConstraint
public LevelConstraint getCertificateAuthorityInfoAccessPresentConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateAuthorityInfoAccessPresent constraint if present in the policy, null otherwise- Specified by:
getCertificateAuthorityInfoAccessPresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if CertificateAuthorityInfoAccessPresent element is present in the constraint file, null otherwise.
-
getCertificateRevocationInfoAccessPresentConstraint
public LevelConstraint getCertificateRevocationInfoAccessPresentConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateRevocationInfoAccessPresent constraint if present in the policy, null otherwise- Specified by:
getCertificateRevocationInfoAccessPresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if CertificateRevocationInfoAccessPresent element is present in the constraint file, null otherwise.
-
getCertificateSignatureConstraint
Description copied from interface:ValidationPolicy
Returns certificate's signature constraint- Specified by:
getCertificateSignatureConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if Signature for a given context element is present in the constraint file, null otherwise.
-
getUnknownStatusConstraint
Description copied from interface:ValidationPolicy
The method returns UnknownStatus constraint- Specified by:
getUnknownStatusConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
-
getOCSPResponseCertHashPresentConstraint
Description copied from interface:ValidationPolicy
The method returns OCSPCertHashPresent constraint- Specified by:
getOCSPResponseCertHashPresentConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
-
getOCSPResponseCertHashMatchConstraint
Description copied from interface:ValidationPolicy
The method returns OCSPCertHashMatch constraint- Specified by:
getOCSPResponseCertHashMatchConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
-
getSelfIssuedOCSPConstraint
Description copied from interface:ValidationPolicy
The method returns SelfIssuedOCSP constraint- Specified by:
getSelfIssuedOCSPConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
-
getRevocationDataAvailableConstraint
public LevelConstraint getRevocationDataAvailableConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns revocation data available constraint- Specified by:
getRevocationDataAvailableConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if RevocationDataAvailable for a given context element is present in the constraint file, null otherwise.
-
getRevocationDataNextUpdatePresentConstraint
public LevelConstraint getRevocationDataNextUpdatePresentConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns revocation data's nextUpdate present constraint- Specified by:
getRevocationDataNextUpdatePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if RevocationDataNextUpdatePresent for a given context element is present in the constraint file, null otherwise.
-
getCertificateRevocationFreshnessConstraint
public LevelConstraint getCertificateRevocationFreshnessConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns revocation data's freshness constraint- Specified by:
getCertificateRevocationFreshnessConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if RevocationFreshness for a given context element is present in the constraint file, null otherwise.
-
getCertificateNotRevokedConstraint
Description copied from interface:ValidationPolicy
Returns certificate's not revoked constraint- Specified by:
getCertificateNotRevokedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if Revoked for a given context element is present in the constraint file, null otherwise.
-
getCertificateNotOnHoldConstraint
Description copied from interface:ValidationPolicy
Returns certificate's not onHold constraint- Specified by:
getCertificateNotOnHoldConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if OnHold for a given context element is present in the constraint file, null otherwise.
-
getCertificateNotSelfSignedConstraint
public LevelConstraint getCertificateNotSelfSignedConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns certificate's not self-signed constraint- Specified by:
getCertificateNotSelfSignedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if not self-signed for a given context element is present in the constraint file, null otherwise.
-
getCertificateSelfSignedConstraint
Description copied from interface:ValidationPolicy
Returns certificate's self-signed constraint- Specified by:
getCertificateSelfSignedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if self-signed for a given context element is present in the constraint file, null otherwise.
-
getTrustedServiceStatusConstraint
Description copied from interface:ValidationPolicy
Returns trusted service status constraint- Specified by:
getTrustedServiceStatusConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if trusted service status for a given context element is present in the constraint file, null otherwise.
-
getTrustedServiceTypeIdentifierConstraint
Description copied from interface:ValidationPolicy
Returns trusted service type identifier constraint- Specified by:
getTrustedServiceTypeIdentifierConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if trusted service type identifier for a given context element is present in the constraint file, null otherwise.
-
getCertificatePolicyIdsConstraint
public MultiValuesConstraint getCertificatePolicyIdsConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificatePolicyIds constraint if present in the policy, null otherwise- Specified by:
getCertificatePolicyIdsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificatePolicyIds element is present in the constraint file, null otherwise.
-
getCertificateQCStatementIdsConstraint
public MultiValuesConstraint getCertificateQCStatementIdsConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateQCStatementIds constraint if present in the policy, null otherwise- Specified by:
getCertificateQCStatementIdsConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
MultiValuesConstraint
if CertificateQCStatementIds element is present in the constraint file, null otherwise.
-
getCertificateIssuedToNaturalPersonConstraint
public LevelConstraint getCertificateIssuedToNaturalPersonConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Returns CertificateIssuedToNaturalPerson constraint if present in the policy, null otherwise- Specified by:
getCertificateIssuedToNaturalPersonConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if CertificateIssuedToNaturalPerson element is present in the constraint file, null otherwise.
-
getCertificateQualificationConstraint
public LevelConstraint getCertificateQualificationConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Indicates if the end user certificate is qualified.- Specified by:
getCertificateQualificationConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if Qualification for a given context element is present in the constraint file, null otherwise.
-
getCertificateSupportedByQSCDConstraint
public LevelConstraint getCertificateSupportedByQSCDConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).- Specified by:
getCertificateSupportedByQSCDConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if SupportedByQSCD for a given context element is present in the constraint file, null otherwise.
-
getCertificateIssuedToLegalPersonConstraint
public LevelConstraint getCertificateIssuedToLegalPersonConstraint(Context context, SubContext subContext)Description copied from interface:ValidationPolicy
Indicates if the end user certificate used in validating the signature is issued to a legal person.- Specified by:
getCertificateIssuedToLegalPersonConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
subContext
-SubContext
- Returns:
LevelConstraint
if IssuedToLegalPerson for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateRecognitionConstraint
Description copied from interface:ValidationPolicy
Indicates if the end user certificate used in validating the signature is issued to a natural person.- Specified by:
getSigningCertificateRecognitionConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if Recognition for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateAttributePresentConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate attribute is present- Specified by:
getSigningCertificateAttributePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if SigningCertificateAttribute for a given context element is present in the constraint file, null otherwise.
-
getUnicitySigningCertificateAttributeConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate is not ambiguously determines- Specified by:
getUnicitySigningCertificateAttributeConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if UnicitySigningCertificate for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateDigestValuePresentConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate reference's digest value is present- Specified by:
getSigningCertificateDigestValuePresentConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if DigestValuePresent for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateDigestValueMatchConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate reference's digest value matches- Specified by:
getSigningCertificateDigestValueMatchConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if DigestValueMatch for a given context element is present in the constraint file, null otherwise.
-
getAllSigningCertificateDigestValuesMatchConstraint
Description copied from interface:ValidationPolicy
Indicates if all signing certificate reference digests match the signing certificate- Specified by:
getAllSigningCertificateDigestValuesMatchConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if AllCertDigestsMatch for a given context element is present in the constraint file, null otherwise.
-
getSigningCertificateIssuerSerialMatchConstraint
Description copied from interface:ValidationPolicy
Indicates if the signing certificate reference's issuer serial matches- Specified by:
getSigningCertificateIssuerSerialMatchConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if IssuerSerialMatch for a given context element is present in the constraint file, null otherwise.
-
getReferenceDataExistenceConstraint
Description copied from interface:ValidationPolicy
Indicates if the referenced data is found- Specified by:
getReferenceDataExistenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if ReferenceDataExistence for a given context element is present in the constraint file, null otherwise.
-
getReferenceDataIntactConstraint
Description copied from interface:ValidationPolicy
Indicates if the referenced data is intact- Specified by:
getReferenceDataIntactConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if ReferenceDataIntact for a given context element is present in the constraint file, null otherwise.
-
getManifestEntryObjectExistenceConstraint
Description copied from interface:ValidationPolicy
Indicates if the manifested document is found- Specified by:
getManifestEntryObjectExistenceConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if ManifestEntryObjectExistence for a given context element is present in the constraint file, null otherwise.
-
getSignatureIntactConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature is intact- Specified by:
getSignatureIntactConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
SignatureDataIntact
if SignatureIntact for a given context element is present in the constraint file, null otherwise.
-
getSignatureDuplicatedConstraint
Description copied from interface:ValidationPolicy
Indicates if the signature is not ambiguous- Specified by:
getSignatureDuplicatedConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
SignatureDuplicated
if SignatureDuplicated for a given context element is present in the constraint file, null otherwise.
-
getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint
Description copied from interface:ValidationPolicy
This constraint checks if the certificate is not expired on best-signature-time- Specified by:
getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if BestSignatureTimeBeforeExpirationDateOfSigningCertificate element is present in the constraint file, null otherwise.
-
getRevocationTimeAgainstBestSignatureTimeConstraint
Description copied from interface:ValidationPolicy
Returns RevocationTimeAgainstBestSignatureTime constraint if present in the policy, null otherwise- Specified by:
getRevocationTimeAgainstBestSignatureTimeConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if RevocationTimeAgainstBestSignatureTime element is present in the constraint file, null otherwise.
-
getTimestampCoherenceConstraint
Description copied from interface:ValidationPolicy
This constraint checks if the timestamp order is coherent- Specified by:
getTimestampCoherenceConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if TimestampCoherence element is present in the constraint file, null otherwise.
-
getTimestampDelayConstraint
Description copied from interface:ValidationPolicy
Returns TimestampDelay constraint if present in the policy, null otherwise- Specified by:
getTimestampDelayConstraint
in interfaceValidationPolicy
- Returns:
TimeConstraint
if TimestampDelay element is present in the constraint file, null otherwise.
-
getRevocationFreshnessConstraint
Description copied from interface:ValidationPolicy
Returns RevocationFreshness constraint if present in the policy, null otherwise- Specified by:
getRevocationFreshnessConstraint
in interfaceValidationPolicy
- Returns:
TimeConstraint
if RevocationFreshness element is present in the constraint file, null otherwise.
-
getFullScopeConstraint
Description copied from interface:ValidationPolicy
Returns FullScope constraint if present in the policy, null otherwise- Specified by:
getFullScopeConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if FullScope element is present in the constraint file, null otherwise.
-
getContentTimestampConstraint
Description copied from interface:ValidationPolicy
Indicates if the signed property: content-time-stamp should be checked. If ContentTimeStamp element is absent within the constraint file then null is returned.- Specified by:
getContentTimestampConstraint
in interfaceValidationPolicy
- Parameters:
context
-Context
- Returns:
LevelConstraint
if ContentTimeStamp element is present in the constraint file, null otherwise.
-
getAcceptedContainerTypesConstraint
Description copied from interface:ValidationPolicy
Returns AcceptedContainerTypes constraint if present in the policy, null otherwise- Specified by:
getAcceptedContainerTypesConstraint
in interfaceValidationPolicy
- Returns:
MultiValuesConstraint
if AcceptedContainerTypes element is present in the constraint file, null otherwise.
-
getZipCommentPresentConstraint
Description copied from interface:ValidationPolicy
Returns ZipCommentPresent constraint if present in the policy, null otherwise- Specified by:
getZipCommentPresentConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if ZipCommentPresent element is present in the constraint file, null otherwise.
-
getAcceptedZipCommentsConstraint
Description copied from interface:ValidationPolicy
Returns AcceptedZipComments constraint if present in the policy, null otherwise- Specified by:
getAcceptedZipCommentsConstraint
in interfaceValidationPolicy
- Returns:
MultiValuesConstraint
if AcceptedZipComments element is present in the constraint file, null otherwise.
-
getMimeTypeFilePresentConstraint
Description copied from interface:ValidationPolicy
Returns MimeTypeFilePresent constraint if present in the policy, null otherwise- Specified by:
getMimeTypeFilePresentConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if MimeTypeFilePresent element is present in the constraint file, null otherwise.
-
getAcceptedMimeTypeContentsConstraint
Description copied from interface:ValidationPolicy
Returns AcceptedMimeTypeContents constraint if present in the policy, null otherwise- Specified by:
getAcceptedMimeTypeContentsConstraint
in interfaceValidationPolicy
- Returns:
MultiValuesConstraint
if AcceptedMimeTypeContents element is present in the constraint file, null otherwise.
-
getAllFilesSignedConstraint
Description copied from interface:ValidationPolicy
Returns AllFilesSigned constraint if present in the policy, null otherwise- Specified by:
getAllFilesSignedConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if AllFilesSigned element is present in the constraint file, null otherwise.
-
getManifestFilePresentConstraint
Description copied from interface:ValidationPolicy
Returns ManifestFilePresent constraint if present in the policy, null otherwise- Specified by:
getManifestFilePresentConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if ManifestFilePresent element is present in the constraint file, null otherwise.
-
getSignedFilesPresentConstraint
Description copied from interface:ValidationPolicy
Returns SignedFilesPresent constraint if present in the policy, null otherwise- Specified by:
getSignedFilesPresentConstraint
in interfaceValidationPolicy
- Returns:
LevelConstraint
if SignedFilesPresent element is present in the constraint file, null otherwise.
-
isEIDASConstraintPresent
public boolean isEIDASConstraintPresent()Description copied from interface:ValidationPolicy
Returns if EIDAS constraints present (qualification check shall be performed)- Specified by:
isEIDASConstraintPresent
in interfaceValidationPolicy
- Returns:
- TRUE if EIDAS constraint present, FALSE otherwise
-
getTLFreshnessConstraint
Description copied from interface:ValidationPolicy
Returns TLFreshness constraint if present in the policy, null otherwise- Specified by:
getTLFreshnessConstraint
in interfaceValidationPolicy
- Returns:
TimeConstraint
if TLFreshness element is present in the constraint file, null otherwise.
-
getTLWellSignedConstraint
Description copied from interface:ValidationPolicy
Returns TLWellSigned constraint if present in the policy, null otherwise- Specified by:
getTLWellSignedConstraint
in interfaceValidationPolicy
- Returns:
TimeConstraint
if TLWellSigned element is present in the constraint file, null otherwise.
-
getTLNotExpiredConstraint
Description copied from interface:ValidationPolicy
Returns TLNotExpired constraint if present in the policy, null otherwise- Specified by:
getTLNotExpiredConstraint
in interfaceValidationPolicy
- Returns:
TimeConstraint
if TLNotExpired element is present in the constraint file, null otherwise.
-
getTLVersionConstraint
Description copied from interface:ValidationPolicy
Returns TLVersion constraint if present in the policy, null otherwise- Specified by:
getTLVersionConstraint
in interfaceValidationPolicy
- Returns:
ValueConstraint
if TLVersion element is present in the constraint file, null otherwise.
-
getValidationModel
Description copied from interface:ValidationPolicy
Returns the used validation model (default is SHELL). Alternatives are CHAIN and HYBRID- Specified by:
getValidationModel
in interfaceValidationPolicy
- Returns:
- the validation model to be used
-
getContainerConstraints
Description copied from interface:ValidationPolicy
Returns the constraint used for ASiC Container validation- Specified by:
getContainerConstraints
in interfaceValidationPolicy
- Returns:
ContainerConstraints
-
getSignatureConstraints
Description copied from interface:ValidationPolicy
Returns the constraint used for Signature validation- Specified by:
getSignatureConstraints
in interfaceValidationPolicy
- Returns:
SignatureConstraints
-
getCounterSignatureConstraints
Description copied from interface:ValidationPolicy
Returns the constraint used for Counter Signature validation- Specified by:
getCounterSignatureConstraints
in interfaceValidationPolicy
- Returns:
SignatureConstraints
-
getTimestampConstraints
Description copied from interface:ValidationPolicy
Returns the constraint used for Timestamp validation- Specified by:
getTimestampConstraints
in interfaceValidationPolicy
- Returns:
TimestampConstraints
-
getRevocationConstraints
Description copied from interface:ValidationPolicy
Returns the constraint used for Revocation validation- Specified by:
getRevocationConstraints
in interfaceValidationPolicy
- Returns:
RevocationConstraints
-
getEIDASConstraints
Description copied from interface:ValidationPolicy
Returns the constraint used for qualification validation- Specified by:
getEIDASConstraints
in interfaceValidationPolicy
- Returns:
EIDAS
-
getCryptographic
Description copied from interface:ValidationPolicy
Returns the common constraint used for cryptographic validation- Specified by:
getCryptographic
in interfaceValidationPolicy
- Returns:
CryptographicConstraint
-