public class CodeSource extends Objectimplements Serializable
This class extends the concept of a codebase to encapsulate not only the location (URL) but also the certificate chains that were used to verify signed code originating from that location.
| Constructor and Description |
|---|
CodeSource(URL
Constructs a CodeSource and associates it with the specified location and set of certificates.
|
CodeSource(URL
Constructs a CodeSource and associates it with the specified location and set of code signers.
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
equals(Object
Tests for equality between the specified object and this object.
|
Certificate |
getCertificates()
Returns the certificates associated with this CodeSource.
|
CodeSigner |
getCodeSigners()
Returns the code signers associated with this CodeSource.
|
URL |
getLocation()
Returns the location associated with this CodeSource.
|
int |
hashCode()
Returns the hash code value for this object.
|
boolean |
implies(CodeSource
Returns true if this CodeSource object "implies" the specified CodeSource.
|
String |
toString()
Returns a string describing this CodeSource, telling its URL and certificates.
|
public CodeSource(URLurl, Certificate [] certs)
url - the location (URL).
certs - the certificate(s). It may be null. The contents of the array are copied to protect against subsequent modification.
public CodeSource(URLurl, CodeSigner [] signers)
url - the location (URL).
signers - the code signers. It may be null. The contents of the array are copied to protect against subsequent modification.
public int hashCode()
hashCode in class
Object
Object.equals(java.lang.Object) ,
System.identityHashCode(java.lang.Object)
public boolean equals(Objectobj)
equals in class
Object
obj - the object to test for equality with this object.
Object.hashCode() ,
HashMap
public final URLgetLocation()
public final Certificate[] getCertificates()
If this CodeSource object was created using the CodeSource(URL url, CodeSigner[] signers) constructor then its certificate chains are extracted and used to create an array of Certificate objects. Each signer certificate is followed by its supporting certificate chain (which may be empty). Each signer certificate and its supporting certificate chain is ordered bottom-to-top (i.e., with the signer certificate first and the (root) certificate authority last).
public final CodeSigner[] getCodeSigners()
If this CodeSource object was created using the CodeSource(URL url, java.security.cert.Certificate[] certs) constructor then its certificate chains are extracted and used to create an array of CodeSigner objects. Note that only X.509 certificates are examined - all other certificate types are ignored.
public boolean implies(CodeSourcecodesource)
More specifically, this method makes the following checks. If any fail, it returns false. If they all succeed, it returns true.
For example, the codesource objects with the following locations and null certificates all imply the codesource with the location "http://java.sun.com/classes/foo.jar" and null certificates:
http:
http://*.sun.com/classes/*
http://java.sun.com/classes/-
http://java.sun.com/classes/foo.jar
Note that if this CodeSource has a null location and a null certificate chain, then it implies every other CodeSource.
codesource - CodeSource to compare against.