Constructor Detail

• CertConstraintsParser

  public CertConstraintsParser()

Method Detail

• setSubjectConstraints

  public void setSubjectConstraints(List<String> constraints)

  Set a list of Strings corresponding to regular expression constraints on the subject DN of a certificate

• getCompiledSubjectContraints

  public Collection<Pattern> getCompiledSubjectContraints()

• matches

  public boolean matches(X509Certificate cert)

  Returns:

  true if the certificate's SubjectDN matches the constraints defined in the subject DNConstraints; false, otherwise. The certificate subject DN only has to match ONE of the subject cert constraints (not all).