# PKIXParameters

public class **PKIXParameters** extends [Object](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html)  
implements [CertPathParameters](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertPathParameters.html)

|---|---|---|
| Known Direct Subclasses [PKIXBuilderParameters](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXBuilderParameters.html) |---|---| | [PKIXBuilderParameters](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXBuilderParameters.html) | Parameters used as input for the PKIX `CertPathBuilder` algorithm. | |||

Parameters used as input for the PKIX `CertPathValidator`
algorithm.


A PKIX `CertPathValidator` uses these parameters to
validate a `CertPath` according to the PKIX certification path
validation algorithm.

To instantiate a `PKIXParameters` object, an
application must specify one or more *most-trusted CAs* as defined by
the PKIX certification path validation algorithm. The most-trusted CAs
can be specified using one of two constructors. An application
can call `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#PKIXParameters(java.util.Set<java.security.cert.TrustAnchor>)`,
specifying a `Set` of `TrustAnchor` objects, each
of which identify a most-trusted CA. Alternatively, an application can call
`https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#PKIXParameters(java.security.KeyStore)`, specifying a
`KeyStore` instance containing trusted certificate entries, each
of which will be considered as a most-trusted CA.


Once a `PKIXParameters` object has been created, other parameters
can be specified (by calling `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setInitialPolicies(java.util.Set<java.lang.String>)`
or `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setDate(java.util.Date)`, for instance) and then the
`PKIXParameters` is passed along with the `CertPath`
to be validated to `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertPathValidator.html#validate(java.security.cert.CertPath,%20java.security.cert.CertPathParameters)`.


Any parameter that is not set (or is set to `null`) will
be set to the default value for that parameter. The default value for the
`date` parameter is `null`, which indicates
the current time when the path is validated. The default for the
remaining parameters is the least constrained.


**Concurrent Access**


Unless otherwise specified, the methods defined in this class are not
thread-safe. Multiple threads that need to access a single
object concurrently should synchronize amongst themselves and
provide the necessary locking. Multiple threads each manipulating
separate objects need not synchronize.

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertPathValidator.html`

### Public Constructor Summary

|---|---|
|   | [PKIXParameters](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#PKIXParameters(java.util.Set<java.security.cert.TrustAnchor>))([Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[TrustAnchor](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/TrustAnchor.html)\> trustAnchors) Creates an instance of `PKIXParameters` with the specified `Set` of most-trusted CAs. |
|   | [PKIXParameters](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#PKIXParameters(java.security.KeyStore))([KeyStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/KeyStore.html) keystore) Creates an instance of `PKIXParameters` that populates the set of most-trusted CAs from the trusted certificate entries contained in the specified `KeyStore`. |

### Public Method Summary

|---|---|
| void | [addCertPathChecker](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#addCertPathChecker(java.security.cert.PKIXCertPathChecker))([PKIXCertPathChecker](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXCertPathChecker.html) checker) Adds a `PKIXCertPathChecker` to the list of certification path checkers. |
| void | [addCertStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#addCertStore(java.security.cert.CertStore))([CertStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertStore.html) store) Adds a `CertStore` to the end of the list of `CertStore`s used in finding certificates and CRLs. |
| [Object](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html) | [clone](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#clone())() Makes a copy of this `PKIXParameters` object. |
| [List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[PKIXCertPathChecker](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXCertPathChecker.html)\> | [getCertPathCheckers](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getCertPathCheckers())() Returns the `List` of certification path checkers. |
| [List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[CertStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertStore.html)\> | [getCertStores](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getCertStores())() Returns an immutable `List` of `CertStore`s that are used to find certificates and CRLs. |
| [Date](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Date.html) | [getDate](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getDate())() Returns the time for which the validity of the certification path should be determined. |
| [Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html)\> | [getInitialPolicies](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getInitialPolicies())() Returns an immutable `Set` of initial policy identifiers (OID strings), indicating that any one of these policies would be acceptable to the certificate user for the purposes of certification path processing. |
| boolean | [getPolicyQualifiersRejected](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getPolicyQualifiersRejected())() Gets the PolicyQualifiersRejected flag. |
| [String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html) | [getSigProvider](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getSigProvider())() Returns the signature provider's name, or `null` if not set. |
| [CertSelector](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertSelector.html) | [getTargetCertConstraints](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getTargetCertConstraints())() Returns the required constraints on the target certificate. |
| [Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[TrustAnchor](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/TrustAnchor.html)\> | [getTrustAnchors](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getTrustAnchors())() Returns an immutable `Set` of the most-trusted CAs. |
| boolean | [isAnyPolicyInhibited](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#isAnyPolicyInhibited())() Checks whether the any policy OID should be processed if it is included in a certificate. |
| boolean | [isExplicitPolicyRequired](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#isExplicitPolicyRequired())() Checks if explicit policy is required. |
| boolean | [isPolicyMappingInhibited](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#isPolicyMappingInhibited())() Checks if policy mapping is inhibited. |
| boolean | [isRevocationEnabled](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#isRevocationEnabled())() Checks the RevocationEnabled flag. |
| void | [setAnyPolicyInhibited](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setAnyPolicyInhibited(boolean))(boolean val) Sets state to determine if the any policy OID should be processed if it is included in a certificate. |
| void | [setCertPathCheckers](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setCertPathCheckers(java.util.List<java.security.cert.PKIXCertPathChecker>))([List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[PKIXCertPathChecker](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXCertPathChecker.html)\> checkers) Sets a `List` of additional certification path checkers. |
| void | [setCertStores](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setCertStores(java.util.List<java.security.cert.CertStore>))([List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[CertStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertStore.html)\> stores) Sets the list of `CertStore`s to be used in finding certificates and CRLs. |
| void | [setDate](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setDate(java.util.Date))([Date](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Date.html) date) Sets the time for which the validity of the certification path should be determined. |
| void | [setExplicitPolicyRequired](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setExplicitPolicyRequired(boolean))(boolean val) Sets the ExplicitPolicyRequired flag. |
| void | [setInitialPolicies](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setInitialPolicies(java.util.Set<java.lang.String>))([Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html)\> initialPolicies) Sets the `Set` of initial policy identifiers (OID strings), indicating that any one of these policies would be acceptable to the certificate user for the purposes of certification path processing. |
| void | [setPolicyMappingInhibited](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setPolicyMappingInhibited(boolean))(boolean val) Sets the PolicyMappingInhibited flag. |
| void | [setPolicyQualifiersRejected](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setPolicyQualifiersRejected(boolean))(boolean qualifiersRejected) Sets the PolicyQualifiersRejected flag. |
| void | [setRevocationEnabled](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setRevocationEnabled(boolean))(boolean val) Sets the RevocationEnabled flag. |
| void | [setSigProvider](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setSigProvider(java.lang.String))([String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html) sigProvider) Sets the signature provider's name. |
| void | [setTargetCertConstraints](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setTargetCertConstraints(java.security.cert.CertSelector))([CertSelector](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertSelector.html) selector) Sets the required constraints on the target certificate. |
| void | [setTrustAnchors](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setTrustAnchors(java.util.Set<java.security.cert.TrustAnchor>))([Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[TrustAnchor](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/TrustAnchor.html)\> trustAnchors) Sets the `Set` of most-trusted CAs. |
| [String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html) | [toString](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#toString())() Returns a formatted string describing the parameters. |

### Inherited Method Summary

From class [java.lang.Object](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html)

|---|---|
| [Object](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html) | [clone](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#clone())() Creates and returns a copy of this `Object`. |
| boolean | [equals](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#equals(java.lang.Object))([Object](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html) obj) Compares this instance with the specified object and indicates if they are equal. |
| void | [finalize](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#finalize())() Invoked when the garbage collector has detected that this instance is no longer reachable. |
| final [Class](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Class.html)\<?\> | [getClass](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#getClass())() Returns the unique instance of `https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Class.html` that represents this object's class. |
| int | [hashCode](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#hashCode())() Returns an integer hash code for this object. |
| final void | [notify](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#notify())() Causes a thread which is waiting on this object's monitor (by means of calling one of the `wait()` methods) to be woken up. |
| final void | [notifyAll](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#notifyAll())() Causes all threads which are waiting on this object's monitor (by means of calling one of the `wait()` methods) to be woken up. |
| [String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html) | [toString](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#toString())() Returns a string containing a concise, human-readable description of this object. |
| final void | [wait](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#wait(long,%20int))(long timeout, int nanos) Causes the calling thread to wait until another thread calls the `notify()` or `notifyAll()` method of this object or until the specified timeout expires. |
| final void | [wait](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#wait(long))(long timeout) Causes the calling thread to wait until another thread calls the `notify()` or `notifyAll()` method of this object or until the specified timeout expires. |
| final void | [wait](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html#wait())() Causes the calling thread to wait until another thread calls the `notify()` or `notifyAll()` method of this object. |

From interface [java.security.cert.CertPathParameters](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertPathParameters.html)

|---|---|
| abstract [Object](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html) | [clone](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertPathParameters.html#clone())() Makes a copy of this `CertPathParameters`. |

## Public Constructors

#### public
**PKIXParameters**
([Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[TrustAnchor](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/TrustAnchor.html)\> trustAnchors)

Creates an instance of `PKIXParameters` with the specified
`Set` of most-trusted CAs. Each element of the
set is a `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/TrustAnchor.html`.


Note that the `Set` is copied to protect against
subsequent modifications.

##### Parameters

| trustAnchors | a `Set` of `TrustAnchor`s |
|---|---|

##### Throws

| [InvalidAlgorithmParameterException](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/InvalidAlgorithmParameterException.html) | if the specified `Set` is empty `(trustAnchors.isEmpty() == true)` |
| [NullPointerException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/NullPointerException.html) | if the specified `Set` is `null` |
| [ClassCastException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/ClassCastException.html) | if any of the elements in the `Set` are not of type `java.security.cert.TrustAnchor` |
|---|---|

#### public
**PKIXParameters**
([KeyStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/KeyStore.html) keystore)

Creates an instance of `PKIXParameters` that
populates the set of most-trusted CAs from the trusted
certificate entries contained in the specified `KeyStore`.
Only keystore entries that contain trusted `X509Certificates`
are considered; all other certificate types are ignored.

##### Parameters

| keystore | a `KeyStore` from which the set of most-trusted CAs will be populated |
|---|---|

##### Throws

| [KeyStoreException](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/KeyStoreException.html) | if the keystore has not been initialized |
| [InvalidAlgorithmParameterException](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/InvalidAlgorithmParameterException.html) | if the keystore does not contain at least one trusted certificate entry |
| [NullPointerException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/NullPointerException.html) | if the keystore is `null` |
|---|---|

## Public Methods

#### public void
**addCertPathChecker**
([PKIXCertPathChecker](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXCertPathChecker.html) checker)

Adds a `PKIXCertPathChecker` to the list of certification
path checkers. See the `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setCertPathCheckers(java.util.List<java.security.cert.PKIXCertPathChecker>)`
method for more details.


Note that the `PKIXCertPathChecker` is cloned to protect
against subsequent modifications.

##### Parameters

| checker | a `PKIXCertPathChecker` to add to the list of checks. If `null`, the checker is ignored (not added to list). |
|---|---|

#### public void
**addCertStore**
([CertStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertStore.html) store)

Adds a `CertStore` to the end of the list of
`CertStore`s used in finding certificates and CRLs.

##### Parameters

| store | the `CertStore` to add. If `null`, the store is ignored (not added to list). |
|---|---|

#### public [Object](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/Object.html)
**clone**
()

Makes a copy of this `PKIXParameters` object. Changes
to the copy will not affect the original and vice versa.

##### Returns

- a copy of this `PKIXParameters` object

#### public [List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[PKIXCertPathChecker](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXCertPathChecker.html)\>
**getCertPathCheckers**
()

Returns the `List` of certification path checkers.
The returned `List` is immutable, and each
`PKIXCertPathChecker` in the `List` is cloned
to protect against subsequent modifications.

##### Returns

- an immutable `List` of `PKIXCertPathChecker`s (may be empty, but not `null`)

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setCertPathCheckers(java.util.List<java.security.cert.PKIXCertPathChecker>)`

#### public [List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[CertStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertStore.html)\>
**getCertStores**
()

Returns an immutable `List` of `CertStore`s that
are used to find certificates and CRLs.

##### Returns

- an immutable `List` of `CertStore`s (may be empty, but never `null`)

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setCertStores(java.util.List<java.security.cert.CertStore>)`

#### public [Date](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Date.html)
**getDate**
()

Returns the time for which the validity of the certification path
should be determined. If `null`, the current time is used.


Note that the `Date` returned is copied to protect against
subsequent modifications.

##### Returns

- the `Date`, or `null` if not set

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setDate(java.util.Date)`

#### public [Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html)\>
**getInitialPolicies**
()

Returns an immutable `Set` of initial
policy identifiers (OID strings), indicating that any one of these
policies would be acceptable to the certificate user for the purposes of
certification path processing. The default return value is an empty
`Set`, which is interpreted as meaning that any policy would
be acceptable.

##### Returns

- an immutable `Set` of initial policy OIDs in `String` format, or an empty `Set` (implying any policy is acceptable). Never returns `null`.

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setInitialPolicies(java.util.Set<java.lang.String>)`

#### public boolean
**getPolicyQualifiersRejected**
()

Gets the PolicyQualifiersRejected flag. If this flag is true,
certificates that include policy qualifiers in a certificate policies
extension that is marked critical are rejected.
If the flag is false, certificates are not rejected on this basis.

When a `PKIXParameters` object is created, this flag is
set to true. This setting reflects the most common (and simplest)
strategy for processing policy qualifiers. Applications that want to use
a more sophisticated policy must set this flag to false.

##### Returns

- the current value of the PolicyQualifiersRejected flag

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setPolicyQualifiersRejected(boolean)`

#### public [String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html)
**getSigProvider**
()

Returns the signature provider's name, or `null`
if not set.

##### Returns

- the signature provider's name (or `null`)

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setSigProvider(java.lang.String)`

#### public [CertSelector](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertSelector.html)
**getTargetCertConstraints**
()

Returns the required constraints on the target certificate.
The constraints are returned as an instance of `CertSelector`.
If `null`, no constraints are defined.

Note that the `CertSelector` returned is cloned
to protect against subsequent modifications.

##### Returns

- a `CertSelector` specifying the constraints on the target certificate (or `null`)

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setTargetCertConstraints(java.security.cert.CertSelector)`

#### public [Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[TrustAnchor](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/TrustAnchor.html)\>
**getTrustAnchors**
()

Returns an immutable `Set` of the most-trusted
CAs.

##### Returns

- an immutable `Set` of `TrustAnchor`s (never `null`)

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setTrustAnchors(java.util.Set<java.security.cert.TrustAnchor>)`

#### public boolean
**isAnyPolicyInhibited**
()

Checks whether the any policy OID should be processed if it
is included in a certificate.

##### Returns

- `true` if the any policy OID is inhibited, `false` otherwise

#### public boolean
**isExplicitPolicyRequired**
()

Checks if explicit policy is required. If this flag is true, an
acceptable policy needs to be explicitly identified in every certificate.
By default, the ExplicitPolicyRequired flag is false.

##### Returns

- `true` if explicit policy is required, `false` otherwise

#### public boolean
**isPolicyMappingInhibited**
()

Checks if policy mapping is inhibited. If this flag is true, policy
mapping is inhibited. By default, policy mapping is not inhibited (the
flag is false).

##### Returns

- true if policy mapping is inhibited, false otherwise

#### public boolean
**isRevocationEnabled**
()

Checks the RevocationEnabled flag. If this flag is true, the default
revocation checking mechanism of the underlying PKIX service provider
will be used. If this flag is false, the default revocation checking
mechanism will be disabled (not used). See the `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setRevocationEnabled(boolean)` method for more details on
setting the value of this flag.

##### Returns

- the current value of the RevocationEnabled flag

#### public void
**setAnyPolicyInhibited**
(boolean val)

Sets state to determine if the any policy OID should be processed
if it is included in a certificate. By default, the any policy OID
is not inhibited (`https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#isAnyPolicyInhibited()`
returns `false`).

##### Parameters

| val | `true` if the any policy OID is to be inhibited, `false` otherwise |
|---|---|

#### public void
**setCertPathCheckers**
([List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[PKIXCertPathChecker](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXCertPathChecker.html)\> checkers)

Sets a `List` of additional certification path checkers. If
the specified `List` contains an object that is not a
`PKIXCertPathChecker`, it is ignored.


Each `PKIXCertPathChecker` specified implements
additional checks on a certificate. Typically, these are checks to
process and verify private extensions contained in certificates.
Each `PKIXCertPathChecker` should be instantiated with any
initialization parameters needed to execute the check.


This method allows sophisticated applications to extend a PKIX
`CertPathValidator` or `CertPathBuilder`.
Each of the specified `PKIXCertPathChecker`s will be called,
in turn, by a PKIX `CertPathValidator` or
`CertPathBuilder` for each certificate processed or
validated.


Regardless of whether these additional `PKIXCertPathChecker`s
are set, a PKIX `CertPathValidator` or
`CertPathBuilder` must perform all of the required PKIX
checks on each certificate. The one exception to this rule is if the
RevocationEnabled flag is set to false (see the `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setRevocationEnabled(boolean)` method).


Note that the `List` supplied here is copied and each
`PKIXCertPathChecker` in the list is cloned to protect
against subsequent modifications.

##### Parameters

| checkers | a `List` of `PKIXCertPathChecker`s. May be `null`, in which case no additional checkers will be used. |
|---|---|

##### Throws

| [ClassCastException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/ClassCastException.html) | if any of the elements in the list are not of type `java.security.cert.PKIXCertPathChecker` |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getCertPathCheckers()`

#### public void
**setCertStores**
([List](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/List.html)\<[CertStore](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertStore.html)\> stores)

Sets the list of `CertStore`s to be used in finding
certificates and CRLs. May be `null`, in which case
no `CertStore`s will be used. The first
`CertStore`s in the list may be preferred to those that
appear later.


Note that the `List` is copied to protect against
subsequent modifications.

##### Parameters

| stores | a `List` of `CertStore`s (or `null`) |
|---|---|

##### Throws

| [ClassCastException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/ClassCastException.html) | if any of the elements in the list are not of type `java.security.cert.CertStore` |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getCertStores()`

#### public void
**setDate**
([Date](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Date.html) date)

Sets the time for which the validity of the certification path
should be determined. If `null`, the current time is used.


Note that the `Date` supplied here is copied to protect
against subsequent modifications.

##### Parameters

| date | the `Date`, or `null` for the current time |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getDate()`

#### public void
**setExplicitPolicyRequired**
(boolean val)

Sets the ExplicitPolicyRequired flag. If this flag is true, an
acceptable policy needs to be explicitly identified in every certificate.
By default, the ExplicitPolicyRequired flag is false.

##### Parameters

| val | `true` if explicit policy is to be required, `false` otherwise |
|---|---|

#### public void
**setInitialPolicies**
([Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html)\> initialPolicies)

Sets the `Set` of initial policy identifiers
(OID strings), indicating that any one of these
policies would be acceptable to the certificate user for the purposes of
certification path processing. By default, any policy is acceptable
(i.e. all policies), so a user that wants to allow any policy as
acceptable does not need to call this method, or can call it
with an empty `Set` (or `null`).


Note that the `Set` is copied to protect against
subsequent modifications.

##### Parameters

| initialPolicies | a `Set` of initial policy OIDs in `String` format (or `null`) |
|---|---|

##### Throws

| [ClassCastException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/ClassCastException.html) | if any of the elements in the set are not of type `String` |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getInitialPolicies()`

#### public void
**setPolicyMappingInhibited**
(boolean val)

Sets the PolicyMappingInhibited flag. If this flag is true, policy
mapping is inhibited. By default, policy mapping is not inhibited (the
flag is false).

##### Parameters

| val | `true` if policy mapping is to be inhibited, `false` otherwise |
|---|---|

#### public void
**setPolicyQualifiersRejected**
(boolean qualifiersRejected)

Sets the PolicyQualifiersRejected flag. If this flag is true,
certificates that include policy qualifiers in a certificate
policies extension that is marked critical are rejected.
If the flag is false, certificates are not rejected on this basis.

When a `PKIXParameters` object is created, this flag is
set to true. This setting reflects the most common (and simplest)
strategy for processing policy qualifiers. Applications that want to use
a more sophisticated policy must set this flag to false.


Note that the PKIX certification path validation algorithm specifies
that any policy qualifier in a certificate policies extension that is
marked critical must be processed and validated. Otherwise the
certification path must be rejected. If the policyQualifiersRejected flag
is set to false, it is up to the application to validate all policy
qualifiers in this manner in order to be PKIX compliant.

##### Parameters

| qualifiersRejected | the new value of the PolicyQualifiersRejected flag |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getPolicyQualifiersRejected()`
- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PolicyQualifierInfo.html`

#### public void
**setRevocationEnabled**
(boolean val)

Sets the RevocationEnabled flag. If this flag is true, the default
revocation checking mechanism of the underlying PKIX service provider
will be used. If this flag is false, the default revocation checking
mechanism will be disabled (not used).


When a `PKIXParameters` object is created, this flag is set
to true. This setting reflects the most common strategy for checking
revocation, since each service provider must support revocation
checking to be PKIX compliant. Sophisticated applications should set
this flag to false when it is not practical to use a PKIX service
provider's default revocation checking mechanism or when an alternative
revocation checking mechanism is to be substituted (by also calling the
`https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#addCertPathChecker(java.security.cert.PKIXCertPathChecker)` or `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#setCertPathCheckers(java.util.List<java.security.cert.PKIXCertPathChecker>)` methods).

##### Parameters

| val | the new value of the RevocationEnabled flag |
|---|---|

#### public void
**setSigProvider**
([String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html) sigProvider)

Sets the signature provider's name. The specified provider will be
preferred when creating `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/Signature.html`
objects. If `null` or not set, the first provider found
supporting the algorithm will be used.

##### Parameters

| sigProvider | the signature provider's name (or `null`) |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getSigProvider()`

#### public void
**setTargetCertConstraints**
([CertSelector](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/CertSelector.html) selector)

Sets the required constraints on the target certificate.
The constraints are specified as an instance of
`CertSelector`. If `null`, no constraints are
defined.

Note that the `CertSelector` specified is cloned
to protect against subsequent modifications.

##### Parameters

| selector | a `CertSelector` specifying the constraints on the target certificate (or `null`) |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getTargetCertConstraints()`

#### public void
**setTrustAnchors**
([Set](https://developers.google.com/j2objc/javadoc/jre/reference/java/util/Set.html)\<[TrustAnchor](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/TrustAnchor.html)\> trustAnchors)

Sets the `Set` of most-trusted CAs.


Note that the `Set` is copied to protect against
subsequent modifications.

##### Parameters

| trustAnchors | a `Set` of `TrustAnchor`s |
|---|---|

##### Throws

| [InvalidAlgorithmParameterException](https://developers.google.com/j2objc/javadoc/jre/reference/java/security/InvalidAlgorithmParameterException.html) | if the specified `Set` is empty `(trustAnchors.isEmpty() == true)` |
| [NullPointerException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/NullPointerException.html) | if the specified `Set` is `null` |
| [ClassCastException](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/ClassCastException.html) | if any of the elements in the set are not of type `java.security.cert.TrustAnchor` |
|---|---|

##### See Also

- `https://developers.google.com/j2objc/javadoc/jre/reference/java/security/cert/PKIXParameters.html#getTrustAnchors()`

#### public [String](https://developers.google.com/j2objc/javadoc/jre/reference/java/lang/String.html)
**toString**
()

Returns a formatted string describing the parameters.

##### Returns

- a formatted string describing the parameters.