程序包 java.security

类 CodeSource

java.lang.Object

java.security.CodeSource

所有已实现的接口:

Serializable

public class CodeSource
extends Object
implements Serializable

This class extends the concept of a codebase to encapsulate not only the location (URL) but also the certificate chains that were used to verify signed code originating from that location.

另请参阅:

序列化表格

构造器概要

构造器

构造器	说明
CodeSource(URL url, Certificate[] certs)	Constructs a CodeSource and associates it with the specified location and set of certificates.
CodeSource(URL url, CodeSigner[] signers)	Constructs a CodeSource and associates it with the specified location and set of code signers.

方法概要

限定符和类型	方法	说明
Certificate[]	getCertificates()	Returns the certificates associated with this CodeSource.
CodeSigner[]	getCodeSigners()	Returns the code signers associated with this CodeSource.
URL	getLocation()	Returns the location associated with this CodeSource.
boolean	implies(CodeSource codesource)	Returns true if this CodeSource object "implies" the specified CodeSource.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

CodeSource

public CodeSource(URL url,
                  Certificate[] certs)

Constructs a CodeSource and associates it with the specified location and set of certificates.

参数:

url - the location (URL).

certs - the certificate(s). It may be null. The contents of the array are copied to protect against subsequent modification.

CodeSource

public CodeSource(URL url,
                  CodeSigner[] signers)

Constructs a CodeSource and associates it with the specified location and set of code signers.

参数:

url - the location (URL).

signers - the code signers. It may be null. The contents of the array are copied to protect against subsequent modification.

从以下版本开始:

1.5

方法详细资料

getLocation

public final URL getLocation()

Returns the location associated with this CodeSource.

返回:

the location (URL).

getCertificates

public final Certificate[] getCertificates()

Returns the certificates associated with this CodeSource.

If this CodeSource object was created using the CodeSource(java.net.URL,java.security.CodeSigner[]) constructor then its certificate chains are extracted and used to create an array of Certificate objects. Each signer certificate is followed by its supporting certificate chain (which may be empty). Each signer certificate and its supporting certificate chain is ordered bottom-to-top (i.e., with the signer certificate first and the (root) certificate authority last).

返回:

A copy of the certificates array, or null if there is none.

getCodeSigners

public final CodeSigner[] getCodeSigners()

Returns the code signers associated with this CodeSource.

If this CodeSource object was created using the CodeSource(java.net.URL,java.security.cert.Certificate[] certs) constructor then its certificate chains are extracted and used to create an array of CodeSigner objects. Note that only X.509 certificates are examined - all other certificate types are ignored.

返回:

A copy of the code signer array, or null if there is none.

从以下版本开始:

1.5

implies

public boolean implies(CodeSource codesource)

Returns true if this CodeSource object "implies" the specified CodeSource.

More specifically, this method makes the following checks. If any fail, it returns false. If they all succeed, it returns true.

• codesource must not be null.
• If this object's certificates are not null, then all of this object's certificates must be present in codesource's certificates.
• If this object's location (getLocation()) is not null, then the following checks are made against this object's location and codesource's:
  • codesource's location must not be null.
  • If this object's location equals codesource's location, then return true.
  • This object's protocol (getLocation().getProtocol()) must be equal to codesource's protocol, ignoring case.
  • If this object's host (getLocation().getHost()) is not null, then the SocketPermission constructed with this object's host must imply the SocketPermission constructed with codesource's host.
  • If this object's port (getLocation().getPort()) is not equal to -1 (that is, if a port is specified), it must equal codesource's port or default port (codesource.getLocation().getDefaultPort()).
  • If this object's file (getLocation().getFile()) doesn't equal codesource's file, then the following checks are made: If this object's file ends with "/-", then codesource's file must start with this object's file (exclusive the trailing "-"). If this object's file ends with a "/*", then codesource's file must start with this object's file and must not have any further "/" separators. If this object's file doesn't end with a "/", then codesource's file must match this object's file with a '/' appended.
  • If this object's reference (getLocation().getRef()) is not null, it must equal codesource's reference.

For example, the codesource objects with the following locations and null certificates all imply the codesource with the location "http://java.sun.com/classes/foo.jar" and null certificates:

     http:
     http://*.sun.com/classes/*
     http://java.sun.com/classes/-
     http://java.sun.com/classes/foo.jar
 

Note that if this CodeSource has a null location and a null certificate chain, then it implies every other CodeSource.

参数:

codesource - CodeSource to compare against.

返回:

true if the specified codesource is implied by this codesource, false if not.