Class X509SuiteCompatibility

java.lang.Object

zeroecho.pki.impl.framework.x509.X509SuiteCompatibility

public final class X509SuiteCompatibility
extends Object

Contextual compatibility validation for current classic X.509 suites.

Signature OIDs and SPKI identities are resolved independently and combined only here. An ECDSA signature OID therefore never implies an EC curve. Installed capabilities and policy may further restrict compatible suites.

Method Summary

Modifier and Type	Method	Description
static AlgorithmSuite	requireCompatible(AlgorithmIdentity signature, AlgorithmIdentity publicKey)	Combines compatible signature and key identities.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

requireCompatible

public static AlgorithmSuite requireCompatible(AlgorithmIdentity signature,
 AlgorithmIdentity publicKey)

Combines compatible signature and key identities.

Parameters:

signature - exact signature identity

publicKey - exact SPKI identity

Returns:

complete suite

Throws:

IllegalArgumentException - if family roles are incompatible