Class TrustAnchor

Object
   |
   +--FileSystemIdObject
         |
         +--TrustAnchor

class TrustAnchor

extends FileSystemIdObject

Class implementing a CVC based access controller
Defined in trustanchor.js

Field Detail

chain

Object chain

recentCAROnly

Object recentCAROnly

idIS

<static> Object idIS

TYPE

<static> Object TYPE

TrustAnchor

TrustAnchor(<CVC> root)

Create a TrustAnchor object that handles certificate validation, terminal authentication and access control

Parameters:
root - the root certificate

addCARforPACE

void addCARforPACE(<ASN1> response)

Add recent trust anchor to PACE response

Parameters:
response - the response object to receive tag 87 and 88

checkCertificate

void checkCertificate(<CVC> issuer, <CVC> subject, <Object> dataProvider, <Key> dp)

Check certificate

This method updates the current date for certificates issued by domestic DVCAs.

Parameters:
issuer - the issuing certificate
subject - the subjects certificate
dataProvider - object implementing getDate(), setDate() and updateEFCVCA()
dp - domain parameter for checking the public key

getCertificateFor

CVC getCertificateFor(<PublicKeyReference> chr)

Return certificate for chr

Parameters:
chr - the certificate holder

Returns:
the certificate or null

getPublicKeyFor

Key getPublicKeyFor(<PublicKeyReference> chr)

Get public key from certificate, possibly determine the domain parameter from previous trust anchors

Parameters:
chr - the certificate holder

Returns:
the public key or null

getType

String getType()

Return type of file system object

Returns:
the type string

isIssuer

boolean isIssuer(<PublicKeyReference> chr)

Is a recent trust anchor issuer of the certificate chr in question

Parameters:
chr - the certificate holder

Returns:
true if trust anchor issued certificate

updateEFCVCA

void updateEFCVCA(<Object> dataProvider)

Update EF.CVCA with list of valid trust anchors

Parameters:
dataProvider - object implementing getDate(), setDate() and updateEFCVCA()

validateCertificateIssuedByCVCA

void validateCertificateIssuedByCVCA(<Crypto> crypto, <CVC> cert, <Object> dataProvider)

Validate certificate issued by CVCA

Parameters:
crypto - the crypto object to use for verification
cert - the certificate to validate
dataProvider - object implementing getDate(), setDate() and updateEFCVCA()

validateCertificateIssuedByDVCA

void validateCertificateIssuedByDVCA(<Crypto> crypto, <CVC> cert, <CVC> dvca, <Object> dataProvider)

Validate certificate issued by CVCA

Parameters:
crypto - the crypto object to use for verification
cert - the certificate to validate
dvca - the issuing certificate
dataProvider - object implementing getDate(), setDate() and updateEFCVCA()