summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorKenny Root <kroot@google.com>2016-01-11 15:05:01 -0800
committerKenny Root <kroot@google.com>2016-01-11 15:42:22 -0800
commit64da9515ec7eae2666297731786f0032aa536f83 (patch)
tree0de2c6c23b6a8c09b86813f64c6546b62182b434 /src
parente0bca041c21693c30290feb63121e408a85bc8b0 (diff)
downloadnist-pkits-64da9515ec7eae2666297731786f0032aa536f83.tar.gz
Add policy checking info
In an effort to stay close to what the NIST PKITS documentation specifies for these tests, be explicit about our PKIX parameters we are expecting. Change-Id: Ifd02328fda701016f0ad947e8020ae2dec4737ad
Diffstat (limited to 'src')
-rw-r--r--src/libcore/java/security/cert/X509CertificateNistPkitsTest.java6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/libcore/java/security/cert/X509CertificateNistPkitsTest.java b/src/libcore/java/security/cert/X509CertificateNistPkitsTest.java
index bf98698..5171a64 100644
--- a/src/libcore/java/security/cert/X509CertificateNistPkitsTest.java
+++ b/src/libcore/java/security/cert/X509CertificateNistPkitsTest.java
@@ -36,12 +36,14 @@ import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collection;
+import java.util.Collections;
import java.util.HashSet;
import java.util.Set;
import junit.framework.TestCase;
public class X509CertificateNistPkitsTest extends TestCase {
+ public static final String ANY_POLICY_OID = "2.5.29.32.0";
public static final String RESOURCE_PACKAGE = "/tests/resources/";
public static InputStream getStream(String name) {
@@ -140,6 +142,10 @@ public class X509CertificateNistPkitsTest extends TestCase {
PKIXParameters params = new PKIXParameters(anchors);
params.addCertStore(certStore);
+ params.setExplicitPolicyRequired(false);
+ params.setInitialPolicies(Collections.singleton(ANY_POLICY_OID));
+ params.setPolicyMappingInhibited(false);
+ params.setAnyPolicyInhibited(false);
return params;
}