eu.europa.esig.dss.policy.EtsiValidationPolicy

All Implemented Interfaces:: ValidationPolicy

public class EtsiValidationPolicy
extends Object
implements ValidationPolicy

This class encapsulates the constraint file that controls the policy to be used during the validation process. It adds the functions to direct access to the file data. It is the implementation of the ETSI 102853 standard.

Constructor Summary

Constructors

Constructor Description

EtsiValidationPolicy(ConstraintsParameters policy)

Method Summary

Modifier and Type	Method	Description
`MultiValuesConstraint`	`getAcceptedContainerTypesConstraint()`
`MultiValuesConstraint`	`getAcceptedMimeTypeContentsConstraint()`
`MultiValuesConstraint`	`getAcceptedZipCommentsConstraint()`
`Date`	`getAlgorithmExpirationDate(String algorithm, Context context, SubContext subContext)`	This function returns the algorithm expiration date extracted from the 'constraint.xml' file.
`LevelConstraint`	`getAllFilesSignedConstraint()`
`LevelConstraint`	`getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint()`	This constraint checks if the certificate is not expired on best-signature-time
`LevelConstraint`	`getCertificateAuthorityInfoAccessPresentConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificateCommonNameConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificateCountryConstraint(Context context, SubContext subContext)`
`CryptographicConstraint`	`getCertificateCryptographicConstraint(Context context, SubContext subContext)`	This method creates the `SignatureCryptographicConstraint` corresponding to the context parameter.
`MultiValuesConstraint`	`getCertificateExtendedKeyUsageConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificateGivenNameConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateIssuedToLegalPersonConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateIssuedToNaturalPersonConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificateKeyUsageConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateNotExpiredConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateNotOnHoldConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateNotRevokedConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateNotSelfSignedConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificateOrganizationNameConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificateOrganizationUnitConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificatePolicyIdsConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificatePseudonymConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificatePseudoUsageConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertificateQCStatementIdsConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateQualificationConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateRevocationFreshnessConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateRevocationInfoAccessPresentConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateSelfSignedConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateSerialNumberConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateSignatureConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getCertificateSupportedByQSCDConstraint(Context context, SubContext subContext)`	Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).
`MultiValuesConstraint`	`getCertificateSurnameConstraint(Context context, SubContext subContext)`
`MultiValuesConstraint`	`getCertifiedRolesConstraint()`	Return the mandated signer role.
`MultiValuesConstraint`	`getClaimedRoleConstraint()`	Indicates if the unsigned property: claimed-role should be checked.
`MultiValuesConstraint`	`getCommitmentTypeIndicationConstraint()`	Indicates if the signed property: commitment-type-indication should be checked.
`ValueConstraint`	`getContentHintsConstraint()`	Indicates if the signed property: content-hints should be checked.
`ValueConstraint`	`getContentIdentifierConstraint()`	Indicates if the signed property: content-identifier should be checked.
`LevelConstraint`	`getContentTimestampConstraint()`	Indicates if the signed property: content-time-stamp should be checked.
`ValueConstraint`	`getContentTypeConstraint()`	Indicates if the signed property: content-type should be checked.
`LevelConstraint`	`getCounterSignatureConstraint()`
`CryptographicConstraint`	`getCryptographic()`
`CryptographicConstraint`	`getDefaultCryptographicConstraint()`
`EIDAS`	`getEIDASConstraints()`
`LevelConstraint`	`getFullScopeConstraint()`
`LevelConstraint`	`getManifestEntryObjectExistenceConstraint(Context context)`
`LevelConstraint`	`getManifestFilePresentConstraint()`
`LevelConstraint`	`getMessageDigestOrSignedPropertiesConstraint()`	Indicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked.
`LevelConstraint`	`getMimeTypeFilePresentConstraint()`
`LevelConstraint`	`getOCSPResponseCertHashMatchConstraint()`
`LevelConstraint`	`getOCSPResponseCertHashPresentConstraint()`
`String`	`getPolicyDescription()`	Returns the policy description.
`String`	`getPolicyName()`	Returns the name of the policy.
`LevelConstraint`	`getProspectiveCertificateChainConstraint(Context context)`	This constraint requests the presence of the trust anchor in the certificate chain.
`LevelConstraint`	`getReferenceDataExistenceConstraint(Context context)`
`LevelConstraint`	`getReferenceDataIntactConstraint(Context context)`
`RevocationConstraints`	`getRevocationConstraints()`
`LevelConstraint`	`getRevocationDataAvailableConstraint(Context context, SubContext subContext)`
`LevelConstraint`	`getRevocationDataNextUpdatePresentConstraint(Context context, SubContext subContext)`
`TimeConstraint`	`getRevocationFreshnessConstraint()`
`LevelConstraint`	`getRevocationTimeAgainstBestSignatureTime()`
`SignatureConstraints`	`getSignatureConstraints()`
`CryptographicConstraint`	`getSignatureCryptographicConstraint(Context context)`	This method creates the `SignatureCryptographicConstraint` corresponding to the context parameter.
`LevelConstraint`	`getSignatureDuplicatedConstraint(Context context)`
`MultiValuesConstraint`	`getSignatureFormatConstraint(Context context)`
`LevelConstraint`	`getSignatureIntactConstraint(Context context)`
`MultiValuesConstraint`	`getSignaturePolicyConstraint(Context context)`	Indicates if the signature policy should be checked.
`LevelConstraint`	`getSignaturePolicyIdentifiedConstraint(Context context)`
`LevelConstraint`	`getSignaturePolicyPolicyHashValid(Context context)`
`LevelConstraint`	`getSignedFilesPresentConstraint()`
`LevelConstraint`	`getSignerInformationStoreConstraint(Context context)`	This constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdES
`LevelConstraint`	`getSignerLocationConstraint()`	Indicates if the signed property: signer-location should be checked.
`LevelConstraint`	`getSigningCertificateAttributePresentConstraint(Context context)`
`LevelConstraint`	`getSigningCertificateDigestValueMatchConstraint(Context context)`
`LevelConstraint`	`getSigningCertificateDigestValuePresentConstraint(Context context)`
`LevelConstraint`	`getSigningCertificateIssuerSerialMatchConstraint(Context context)`
`LevelConstraint`	`getSigningCertificateRecognitionConstraint(Context context)`
`LevelConstraint`	`getSigningTimeConstraint()`	Indicates if the signed property: signing-time should be checked.
`LevelConstraint`	`getStructuralValidationConstraint(Context context)`	Indicates if the structural validation should be checked.
`LevelConstraint`	`getTimestampCoherenceConstraint()`
`TimestampConstraints`	`getTimestampConstraints()`
`TimeConstraint`	`getTimestampDelayConstraint()`
`TimeConstraint`	`getTLFreshnessConstraint()`
`LevelConstraint`	`getTLNotExpiredConstraint()`
`ValueConstraint`	`getTLVersionConstraint()`
`LevelConstraint`	`getTLWellSignedConstraint()`
`MultiValuesConstraint`	`getTrustedServiceStatusConstraint(Context context)`
`MultiValuesConstraint`	`getTrustedServiceTypeIdentifierConstraint(Context context)`
`LevelConstraint`	`getUnicitySigningCertificateAttributeConstraint(Context context)`
`LevelConstraint`	`getUnknownStatusConstraint()`
`Model`	`getValidationModel()`	Returns the used validation model (default is SHELL).
`LevelConstraint`	`getZipCommentPresentConstraint()`
`boolean`	`isEIDASConstraintPresent()`

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details
- EtsiValidationPolicy
  
  public EtsiValidationPolicy(ConstraintsParameters policy)
Method Details
- getAlgorithmExpirationDate
  
  public Date getAlgorithmExpirationDate(String algorithm, Context context, SubContext subContext)
  
  Description copied from interface: ValidationPolicy
  
  This function returns the algorithm expiration date extracted from the 'constraint.xml' file. If the TAG AlgoExpirationDate is not present within the constraints null is returned.
  
  Specified by:
  
  getAlgorithmExpirationDate in interface ValidationPolicy
  
  Parameters:
  
  algorithm - algorithm (SHA1, SHA256, RSA2048...) to be checked
  
  Returns:
  
  expiration date or null
- getSignaturePolicyConstraint
  
  public MultiValuesConstraint getSignaturePolicyConstraint(Context context)
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signature policy should be checked. If AcceptablePolicies element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.
  
  Specified by:
  
  getSignaturePolicyConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if SigningTime element is present in the constraint file, null otherwise.
- getSignaturePolicyIdentifiedConstraint
  
  public LevelConstraint getSignaturePolicyIdentifiedConstraint(Context context)
  
  Specified by:
  
  getSignaturePolicyIdentifiedConstraint in interface ValidationPolicy
- getSignaturePolicyPolicyHashValid
  
  public LevelConstraint getSignaturePolicyPolicyHashValid(Context context)
  
  Specified by:
  
  getSignaturePolicyPolicyHashValid in interface ValidationPolicy
- getSignatureFormatConstraint
  
  public MultiValuesConstraint getSignatureFormatConstraint(Context context)
  
  Specified by:
  
  getSignatureFormatConstraint in interface ValidationPolicy
- getSignerInformationStoreConstraint
  
  public LevelConstraint getSignerInformationStoreConstraint(Context context)
  
  Description copied from interface: ValidationPolicy
  
  This constraint checks if only one SignerInfo is present into a SignerInformationStore NOTE: applicable only for PAdES
  
  Specified by:
  
  getSignerInformationStoreConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if SignerInformationStore element for a given context element is present in the constraint file, null otherwise.
- getStructuralValidationConstraint
  
  public LevelConstraint getStructuralValidationConstraint(Context context)
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the structural validation should be checked. If StructuralValidation element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getStructuralValidationConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if StructuralValidation element is present in the constraint file, null otherwise.
- getSigningTimeConstraint
  
  public LevelConstraint getSigningTimeConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: signing-time should be checked. If SigningTime element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getSigningTimeConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if SigningTime element is present in the constraint file, null otherwise.
- getContentTypeConstraint
  
  public ValueConstraint getContentTypeConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: content-type should be checked. If ContentType element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getContentTypeConstraint in interface ValidationPolicy
  
  Returns:
  
  ValueConstraint if ContentType element is present in the constraint file, null otherwise.
- getCounterSignatureConstraint
  
  public LevelConstraint getCounterSignatureConstraint()
  
  Specified by:
  
  getCounterSignatureConstraint in interface ValidationPolicy
- getContentHintsConstraint
  
  public ValueConstraint getContentHintsConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: content-hints should be checked. If ContentHints element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getContentHintsConstraint in interface ValidationPolicy
  
  Returns:
  
  ValueConstraint if ContentHints element is present in the constraint file, null otherwise.
- getContentIdentifierConstraint
  
  public ValueConstraint getContentIdentifierConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: content-identifier should be checked. If ContentIdentifier element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getContentIdentifierConstraint in interface ValidationPolicy
  
  Returns:
  
  ValueConstraint if ContentIdentifier element is present in the constraint file, null otherwise.
- getMessageDigestOrSignedPropertiesConstraint
  
  public LevelConstraint getMessageDigestOrSignedPropertiesConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: message-digest (for CAdES) or SignedProperties (for XAdES) should be checked. If the relative element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getMessageDigestOrSignedPropertiesConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if message-digests/SignedProperties element is present in the constraint file, null otherwise.
- getCommitmentTypeIndicationConstraint
  
  public MultiValuesConstraint getCommitmentTypeIndicationConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: commitment-type-indication should be checked. If CommitmentTypeIndication element is absent within the constraint file then null is returned, otherwise the list of identifiers is initialised.
  
  Specified by:
  
  getCommitmentTypeIndicationConstraint in interface ValidationPolicy
  
  Returns:
  
  MultiValuesConstraint if CommitmentTypeIndication element is present in the constraint file, null otherwise.
- getSignerLocationConstraint
  
  public LevelConstraint getSignerLocationConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: signer-location should be checked. If SignerLocation element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getSignerLocationConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if SignerLocation element is present in the constraint file, null otherwise.
- getClaimedRoleConstraint
  
  public MultiValuesConstraint getClaimedRoleConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the unsigned property: claimed-role should be checked. If ClaimedRoles element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getClaimedRoleConstraint in interface ValidationPolicy
  
  Returns:
  
  MultiValuesConstraint if ClaimedRoles element is present in the constraint file, null otherwise.
- getCertifiedRolesConstraint
  
  public MultiValuesConstraint getCertifiedRolesConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Return the mandated signer role.
  
  Specified by:
  
  getCertifiedRolesConstraint in interface ValidationPolicy
  
  Returns:
- getPolicyName
  
  public String getPolicyName()
  
  Description copied from interface: ValidationPolicy
  
  Returns the name of the policy.
  
  Specified by:
  
  getPolicyName in interface ValidationPolicy
  
  Returns:
- getPolicyDescription
  
  public String getPolicyDescription()
  
  Description copied from interface: ValidationPolicy
  
  Returns the policy description.
  
  Specified by:
  
  getPolicyDescription in interface ValidationPolicy
  
  Returns:
- getSignatureCryptographicConstraint
  
  public CryptographicConstraint getSignatureCryptographicConstraint(Context context)
  
  Description copied from interface: ValidationPolicy
  
  This method creates the SignatureCryptographicConstraint corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.
  
  Specified by:
  
  getSignatureCryptographicConstraint in interface ValidationPolicy
  
  Parameters:
  
  context - The context of the signature cryptographic constraints: MainSignature, Timestamp, Revocation
  
  Returns:
  
  SignatureCryptographicConstraint if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.
- getCertificateCryptographicConstraint
  
  public CryptographicConstraint getCertificateCryptographicConstraint(Context context, SubContext subContext)
  
  Description copied from interface: ValidationPolicy
  
  This method creates the SignatureCryptographicConstraint corresponding to the context parameter. If AcceptableEncryptionAlgo is not present in the constraint file the null is returned.
  
  Specified by:
  
  getCertificateCryptographicConstraint in interface ValidationPolicy
  
  Parameters:
  
  context - The context of the signature cryptographic constraints: MainSignature, Timestamp, Revocation
  
  subContext - the sub context of the signature cryptographic constraints: EMPTY (signature itself), SigningCertificate, CACertificate
  
  Returns:
  
  SignatureCryptographicConstraint if AcceptableEncryptionAlgo for a given context element is present in the constraint file, null otherwise.
- getDefaultCryptographicConstraint
  
  public CryptographicConstraint getDefaultCryptographicConstraint()
- getCertificateKeyUsageConstraint
  
  public MultiValuesConstraint getCertificateKeyUsageConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateKeyUsageConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if key-usage for a given context element is present in the constraint file, null otherwise.
- getCertificateExtendedKeyUsageConstraint
  
  public MultiValuesConstraint getCertificateExtendedKeyUsageConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateExtendedKeyUsageConstraint in interface ValidationPolicy
- getCertificateSurnameConstraint
  
  public MultiValuesConstraint getCertificateSurnameConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateSurnameConstraint in interface ValidationPolicy
- getCertificateGivenNameConstraint
  
  public MultiValuesConstraint getCertificateGivenNameConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateGivenNameConstraint in interface ValidationPolicy
- getCertificateCommonNameConstraint
  
  public MultiValuesConstraint getCertificateCommonNameConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateCommonNameConstraint in interface ValidationPolicy
- getCertificatePseudonymConstraint
  
  public MultiValuesConstraint getCertificatePseudonymConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificatePseudonymConstraint in interface ValidationPolicy
- getCertificateCountryConstraint
  
  public MultiValuesConstraint getCertificateCountryConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateCountryConstraint in interface ValidationPolicy
- getCertificateOrganizationNameConstraint
  
  public MultiValuesConstraint getCertificateOrganizationNameConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateOrganizationNameConstraint in interface ValidationPolicy
- getCertificateOrganizationUnitConstraint
  
  public MultiValuesConstraint getCertificateOrganizationUnitConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateOrganizationUnitConstraint in interface ValidationPolicy
- getCertificatePseudoUsageConstraint
  
  public LevelConstraint getCertificatePseudoUsageConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificatePseudoUsageConstraint in interface ValidationPolicy
- getCertificateSerialNumberConstraint
  
  public LevelConstraint getCertificateSerialNumberConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateSerialNumberConstraint in interface ValidationPolicy
- getCertificateNotExpiredConstraint
  
  public LevelConstraint getCertificateNotExpiredConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateNotExpiredConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if Expiration for a given context element is present in the constraint file, null otherwise.
- getProspectiveCertificateChainConstraint
  
  public LevelConstraint getProspectiveCertificateChainConstraint(Context context)
  
  Description copied from interface: ValidationPolicy
  
  This constraint requests the presence of the trust anchor in the certificate chain.
  
  Specified by:
  
  getProspectiveCertificateChainConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if ProspectiveCertificateChain element for a given context element is present in the constraint file, null otherwise.
- getCertificateAuthorityInfoAccessPresentConstraint
  
  public LevelConstraint getCertificateAuthorityInfoAccessPresentConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateAuthorityInfoAccessPresentConstraint in interface ValidationPolicy
- getCertificateRevocationInfoAccessPresentConstraint
  
  public LevelConstraint getCertificateRevocationInfoAccessPresentConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateRevocationInfoAccessPresentConstraint in interface ValidationPolicy
- getCertificateSignatureConstraint
  
  public LevelConstraint getCertificateSignatureConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateSignatureConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if Signature for a given context element is present in the constraint file, null otherwise.
- getUnknownStatusConstraint
  
  public LevelConstraint getUnknownStatusConstraint()
  
  Specified by:
  
  getUnknownStatusConstraint in interface ValidationPolicy
- getOCSPResponseCertHashPresentConstraint
  
  public LevelConstraint getOCSPResponseCertHashPresentConstraint()
  
  Specified by:
  
  getOCSPResponseCertHashPresentConstraint in interface ValidationPolicy
- getOCSPResponseCertHashMatchConstraint
  
  public LevelConstraint getOCSPResponseCertHashMatchConstraint()
  
  Specified by:
  
  getOCSPResponseCertHashMatchConstraint in interface ValidationPolicy
- getRevocationDataAvailableConstraint
  
  public LevelConstraint getRevocationDataAvailableConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getRevocationDataAvailableConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if RevocationDataAvailable for a given context element is present in the constraint file, null otherwise.
- getRevocationDataNextUpdatePresentConstraint
  
  public LevelConstraint getRevocationDataNextUpdatePresentConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getRevocationDataNextUpdatePresentConstraint in interface ValidationPolicy
- getCertificateRevocationFreshnessConstraint
  
  public LevelConstraint getCertificateRevocationFreshnessConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateRevocationFreshnessConstraint in interface ValidationPolicy
- getCertificateNotRevokedConstraint
  
  public LevelConstraint getCertificateNotRevokedConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateNotRevokedConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if Revoked for a given context element is present in the constraint file, null otherwise.
- getCertificateNotOnHoldConstraint
  
  public LevelConstraint getCertificateNotOnHoldConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateNotOnHoldConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if OnHold for a given context element is present in the constraint file, null otherwise.
- getCertificateNotSelfSignedConstraint
  
  public LevelConstraint getCertificateNotSelfSignedConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateNotSelfSignedConstraint in interface ValidationPolicy
- getCertificateSelfSignedConstraint
  
  public LevelConstraint getCertificateSelfSignedConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateSelfSignedConstraint in interface ValidationPolicy
- getTrustedServiceStatusConstraint
  
  public MultiValuesConstraint getTrustedServiceStatusConstraint(Context context)
  
  Specified by:
  
  getTrustedServiceStatusConstraint in interface ValidationPolicy
- getTrustedServiceTypeIdentifierConstraint
  
  public MultiValuesConstraint getTrustedServiceTypeIdentifierConstraint(Context context)
  
  Specified by:
  
  getTrustedServiceTypeIdentifierConstraint in interface ValidationPolicy
- getCertificatePolicyIdsConstraint
  
  public MultiValuesConstraint getCertificatePolicyIdsConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificatePolicyIdsConstraint in interface ValidationPolicy
- getCertificateQCStatementIdsConstraint
  
  public MultiValuesConstraint getCertificateQCStatementIdsConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateQCStatementIdsConstraint in interface ValidationPolicy
- getCertificateIssuedToNaturalPersonConstraint
  
  public LevelConstraint getCertificateIssuedToNaturalPersonConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateIssuedToNaturalPersonConstraint in interface ValidationPolicy
- getCertificateQualificationConstraint
  
  public LevelConstraint getCertificateQualificationConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateQualificationConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if Qualification for a given context element is present in the constraint file, null otherwise.
- getCertificateSupportedByQSCDConstraint
  
  public LevelConstraint getCertificateSupportedByQSCDConstraint(Context context, SubContext subContext)
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the end user certificate used in validating the signature is mandated to be supported by a secure signature creation device (QSCD).
  
  Specified by:
  
  getCertificateSupportedByQSCDConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if SupportedByQSCD for a given context element is present in the constraint file, null otherwise.
- getCertificateIssuedToLegalPersonConstraint
  
  public LevelConstraint getCertificateIssuedToLegalPersonConstraint(Context context, SubContext subContext)
  
  Specified by:
  
  getCertificateIssuedToLegalPersonConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if IssuedToLegalPerson for a given context element is present in the constraint file, null otherwise.
- getSigningCertificateRecognitionConstraint
  
  public LevelConstraint getSigningCertificateRecognitionConstraint(Context context)
  
  Specified by:
  
  getSigningCertificateRecognitionConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if Recognition for a given context element is present in the constraint file, null otherwise.
- getSigningCertificateAttributePresentConstraint
  
  public LevelConstraint getSigningCertificateAttributePresentConstraint(Context context)
  
  Specified by:
  
  getSigningCertificateAttributePresentConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if SigningCertificateAttribute for a given context element is present in the constraint file, null otherwise.
- getUnicitySigningCertificateAttributeConstraint
  
  public LevelConstraint getUnicitySigningCertificateAttributeConstraint(Context context)
  
  Specified by:
  
  getUnicitySigningCertificateAttributeConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if UnicitySigningCertificate for a given context element is present in the constraint file, null otherwise.
- getSigningCertificateDigestValuePresentConstraint
  
  public LevelConstraint getSigningCertificateDigestValuePresentConstraint(Context context)
  
  Specified by:
  
  getSigningCertificateDigestValuePresentConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if DigestValuePresent for a given context element is present in the constraint file, null otherwise.
- getSigningCertificateDigestValueMatchConstraint
  
  public LevelConstraint getSigningCertificateDigestValueMatchConstraint(Context context)
  
  Specified by:
  
  getSigningCertificateDigestValueMatchConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if DigestValueMatch for a given context element is present in the constraint file, null otherwise.
- getSigningCertificateIssuerSerialMatchConstraint
  
  public LevelConstraint getSigningCertificateIssuerSerialMatchConstraint(Context context)
  
  Specified by:
  
  getSigningCertificateIssuerSerialMatchConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if IssuerSerialMatch for a given context element is present in the constraint file, null otherwise.
- getReferenceDataExistenceConstraint
  
  public LevelConstraint getReferenceDataExistenceConstraint(Context context)
  
  Specified by:
  
  getReferenceDataExistenceConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if ReferenceDataExistence for a given context element is present in the constraint file, null otherwise.
- getReferenceDataIntactConstraint
  
  public LevelConstraint getReferenceDataIntactConstraint(Context context)
  
  Specified by:
  
  getReferenceDataIntactConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if ReferenceDataIntact for a given context element is present in the constraint file, null otherwise.
- getManifestEntryObjectExistenceConstraint
  
  public LevelConstraint getManifestEntryObjectExistenceConstraint(Context context)
  
  Specified by:
  
  getManifestEntryObjectExistenceConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if ManifestEntryObjectExistence for a given context element is present in the constraint file, null otherwise.
- getSignatureIntactConstraint
  
  public LevelConstraint getSignatureIntactConstraint(Context context)
  
  Specified by:
  
  getSignatureIntactConstraint in interface ValidationPolicy
  
  Returns:
  
  SignatureDataIntact if SignatureIntact for a given context element is present in the constraint file, null otherwise.
- getSignatureDuplicatedConstraint
  
  public LevelConstraint getSignatureDuplicatedConstraint(Context context)
  
  Specified by:
  
  getSignatureDuplicatedConstraint in interface ValidationPolicy
  
  Returns:
  
  SignatureDuplicated if SignatureDuplicated for a given context element is present in the constraint file, null otherwise.
- getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint
  
  public LevelConstraint getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint()
  
  Description copied from interface: ValidationPolicy
  
  This constraint checks if the certificate is not expired on best-signature-time
  
  Specified by:
  
  getBestSignatureTimeBeforeExpirationDateOfSigningCertificateConstraint in interface ValidationPolicy
- getRevocationTimeAgainstBestSignatureTime
  
  public LevelConstraint getRevocationTimeAgainstBestSignatureTime()
  
  Specified by:
  
  getRevocationTimeAgainstBestSignatureTime in interface ValidationPolicy
- getTimestampCoherenceConstraint
  
  public LevelConstraint getTimestampCoherenceConstraint()
  
  Specified by:
  
  getTimestampCoherenceConstraint in interface ValidationPolicy
- getTimestampDelayConstraint
  
  public TimeConstraint getTimestampDelayConstraint()
  
  Specified by:
  
  getTimestampDelayConstraint in interface ValidationPolicy
- getRevocationFreshnessConstraint
  
  public TimeConstraint getRevocationFreshnessConstraint()
  
  Specified by:
  
  getRevocationFreshnessConstraint in interface ValidationPolicy
- getFullScopeConstraint
  
  public LevelConstraint getFullScopeConstraint()
  
  Specified by:
  
  getFullScopeConstraint in interface ValidationPolicy
- getContentTimestampConstraint
  
  public LevelConstraint getContentTimestampConstraint()
  
  Description copied from interface: ValidationPolicy
  
  Indicates if the signed property: content-time-stamp should be checked. If ContentTimeStamp element is absent within the constraint file then null is returned.
  
  Specified by:
  
  getContentTimestampConstraint in interface ValidationPolicy
  
  Returns:
  
  LevelConstraint if ContentTimeStamp element is present in the constraint file, null otherwise.
- getAcceptedContainerTypesConstraint
  
  public MultiValuesConstraint getAcceptedContainerTypesConstraint()
  
  Specified by:
  
  getAcceptedContainerTypesConstraint in interface ValidationPolicy
- getZipCommentPresentConstraint
  
  public LevelConstraint getZipCommentPresentConstraint()
  
  Specified by:
  
  getZipCommentPresentConstraint in interface ValidationPolicy
- getAcceptedZipCommentsConstraint
  
  public MultiValuesConstraint getAcceptedZipCommentsConstraint()
  
  Specified by:
  
  getAcceptedZipCommentsConstraint in interface ValidationPolicy
- getMimeTypeFilePresentConstraint
  
  public LevelConstraint getMimeTypeFilePresentConstraint()
  
  Specified by:
  
  getMimeTypeFilePresentConstraint in interface ValidationPolicy
- getAcceptedMimeTypeContentsConstraint
  
  public MultiValuesConstraint getAcceptedMimeTypeContentsConstraint()
  
  Specified by:
  
  getAcceptedMimeTypeContentsConstraint in interface ValidationPolicy
- getAllFilesSignedConstraint
  
  public LevelConstraint getAllFilesSignedConstraint()
  
  Specified by:
  
  getAllFilesSignedConstraint in interface ValidationPolicy
- getManifestFilePresentConstraint
  
  public LevelConstraint getManifestFilePresentConstraint()
  
  Specified by:
  
  getManifestFilePresentConstraint in interface ValidationPolicy
- getSignedFilesPresentConstraint
  
  public LevelConstraint getSignedFilesPresentConstraint()
  
  Specified by:
  
  getSignedFilesPresentConstraint in interface ValidationPolicy
- isEIDASConstraintPresent
  
  public boolean isEIDASConstraintPresent()
  
  Specified by:
  
  isEIDASConstraintPresent in interface ValidationPolicy
- getTLFreshnessConstraint
  
  public TimeConstraint getTLFreshnessConstraint()
  
  Specified by:
  
  getTLFreshnessConstraint in interface ValidationPolicy
- getTLWellSignedConstraint
  
  public LevelConstraint getTLWellSignedConstraint()
  
  Specified by:
  
  getTLWellSignedConstraint in interface ValidationPolicy
- getTLNotExpiredConstraint
  
  public LevelConstraint getTLNotExpiredConstraint()
  
  Specified by:
  
  getTLNotExpiredConstraint in interface ValidationPolicy
- getTLVersionConstraint
  
  public ValueConstraint getTLVersionConstraint()
  
  Specified by:
  
  getTLVersionConstraint in interface ValidationPolicy
- getValidationModel
  
  public Model getValidationModel()
  
  Description copied from interface: ValidationPolicy
  
  Returns the used validation model (default is SHELL). Alternatives are CHAIN and HYBRID
  
  Specified by:
  
  getValidationModel in interface ValidationPolicy
  
  Returns:
  
  the validation model to be used
- getSignatureConstraints
  
  public SignatureConstraints getSignatureConstraints()
  
  Specified by:
  
  getSignatureConstraints in interface ValidationPolicy
- getTimestampConstraints
  
  public TimestampConstraints getTimestampConstraints()
  
  Specified by:
  
  getTimestampConstraints in interface ValidationPolicy
- getRevocationConstraints
  
  public RevocationConstraints getRevocationConstraints()
  
  Specified by:
  
  getRevocationConstraints in interface ValidationPolicy
- getEIDASConstraints
  
  public EIDAS getEIDASConstraints()
  
  Specified by:
  
  getEIDASConstraints in interface ValidationPolicy
- getCryptographic
  
  public CryptographicConstraint getCryptographic()
  
  Specified by:
  
  getCryptographic in interface ValidationPolicy

Class EtsiValidationPolicy

Constructor Summary

Method Summary

Methods inherited from class java.lang.Object

Constructor Details

Method Details