Interface NamespacePolicy

All Known Implementing Classes:
OpensslNamespacePolicyImpl

public interface NamespacePolicy
Represents a namespace policy, i.e. defines which subject DNs are permitted or denied for an issuer.
Author:
K. Benedyczak
  • Method Details

    • getIssuer

      String getIssuer()
      Returns:
      the issuer
    • isPermit

      boolean isPermit()
      Returns:
      whether the policy is permit or deny
    • getIdentification

      String getIdentification()
      Returns:
      the identification
    • getDefinedFor

      String getDefinedFor()
      Returns:
      hash of the CA where the policy is defined. It can be the getIssuer() hash or it may be its parent CA subject name hash, if the namespace was defined in its namespaces file.
    • isSubjectMatching

      boolean isSubjectMatching(X500Principal subject)
      Checks whether the given subject name is matching this policy.
      Parameters:
      subject - to be checked
      Returns:
      true if subject is matched, false otherwise