java/10 : java.base/sun/security/validator/EndEntityChecker.class

EndEntityChecker
https://openjdk.java.net/
GPLv2 + Classpath Exception
class sun.security.validator.EndEntityChecker
  minor version: 0
  major version: 59
  flags: flags: (0x0020) ACC_SUPER
  this_class: sun.security.validator.EndEntityChecker
  super_class: java.lang.Object
{
  private static final java.lang.String OID_EXTENDED_KEY_USAGE;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "2.5.29.37"

  private static final java.lang.String OID_EKU_TLS_SERVER;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "1.3.6.1.5.5.7.3.1"

  private static final java.lang.String OID_EKU_TLS_CLIENT;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "1.3.6.1.5.5.7.3.2"

  private static final java.lang.String OID_EKU_CODE_SIGNING;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "1.3.6.1.5.5.7.3.3"

  private static final java.lang.String OID_EKU_TIME_STAMPING;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "1.3.6.1.5.5.7.3.8"

  private static final java.lang.String OID_EKU_ANY_USAGE;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "2.5.29.37.0"

  private static final java.lang.String OID_EKU_NS_SGC;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "2.16.840.1.113730.4.1"

  private static final java.lang.String OID_EKU_MS_SGC;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "1.3.6.1.4.1.311.10.3.3"

  private static final java.lang.String OID_SUBJECT_ALT_NAME;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "2.5.29.17"

  private static final java.lang.String NSCT_SSL_CLIENT;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "ssl_client"

  private static final java.lang.String NSCT_SSL_SERVER;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "ssl_server"

  private static final java.lang.String NSCT_CODE_SIGNING;
    descriptor: Ljava/lang/String;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: "object_signing"

  private static final int KU_SIGNATURE;
    descriptor: I
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 0

  private static final int KU_KEY_ENCIPHERMENT;
    descriptor: I
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 2

  private static final int KU_KEY_AGREEMENT;
    descriptor: I
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 4

  private static final java.util.Collection<java.lang.String> KU_SERVER_SIGNATURE;
    descriptor: Ljava/util/Collection;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    Signature: Ljava/util/Collection<Ljava/lang/String;>;

  private static final java.util.Collection<java.lang.String> KU_SERVER_ENCRYPTION;
    descriptor: Ljava/util/Collection;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    Signature: Ljava/util/Collection<Ljava/lang/String;>;

  private static final java.util.Collection<java.lang.String> KU_SERVER_KEY_AGREEMENT;
    descriptor: Ljava/util/Collection;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    Signature: Ljava/util/Collection<Ljava/lang/String;>;

  private final java.lang.String variant;
    descriptor: Ljava/lang/String;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final java.lang.String type;
    descriptor: Ljava/lang/String;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=0, args_size=0
         0: .line 108
            bipush 6
            anewarray java.lang.String
            dup
            iconst_0
         1: .line 109
            ldc "DHE_DSS"
            aastore
            dup
            iconst_1
            ldc "DHE_RSA"
            aastore
            dup
            iconst_2
            ldc "ECDHE_ECDSA"
            aastore
            dup
            iconst_3
            ldc "ECDHE_RSA"
            aastore
            dup
            iconst_4
         2: .line 110
            ldc "RSA_EXPORT"
            aastore
            dup
            iconst_5
            ldc "UNKNOWN"
            aastore
         3: .line 109
            invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
            putstatic sun.security.validator.EndEntityChecker.KU_SERVER_SIGNATURE:Ljava/util/Collection;
         4: .line 113
            iconst_1
            anewarray java.lang.String
            dup
            iconst_0
         5: .line 114
            ldc "RSA"
            aastore
            invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
            putstatic sun.security.validator.EndEntityChecker.KU_SERVER_ENCRYPTION:Ljava/util/Collection;
         6: .line 117
            iconst_4
            anewarray java.lang.String
            dup
            iconst_0
         7: .line 118
            ldc "DH_DSS"
            aastore
            dup
            iconst_1
            ldc "DH_RSA"
            aastore
            dup
            iconst_2
            ldc "ECDH_ECDSA"
            aastore
            dup
            iconst_3
            ldc "ECDH_RSA"
            aastore
            invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
            putstatic sun.security.validator.EndEntityChecker.KU_SERVER_KEY_AGREEMENT:Ljava/util/Collection;
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  private void <init>(java.lang.String, java.lang.String);
    descriptor: (Ljava/lang/String;Ljava/lang/String;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=2, locals=3, args_size=3
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.lang.String type
        start local 2 // java.lang.String variant
         0: .line 126
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
         1: .line 127
            aload 0 /* this */
            aload 1 /* type */
            putfield sun.security.validator.EndEntityChecker.type:Ljava/lang/String;
         2: .line 128
            aload 0 /* this */
            aload 2 /* variant */
            putfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
         3: .line 129
            return
        end local 2 // java.lang.String variant
        end local 1 // java.lang.String type
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0    4     0     this  Lsun/security/validator/EndEntityChecker;
            0    4     1     type  Ljava/lang/String;
            0    4     2  variant  Ljava/lang/String;
    MethodParameters:
         Name  Flags
      type     
      variant  

  static sun.security.validator.EndEntityChecker getInstance(java.lang.String, java.lang.String);
    descriptor: (Ljava/lang/String;Ljava/lang/String;)Lsun/security/validator/EndEntityChecker;
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=2, args_size=2
        start local 0 // java.lang.String type
        start local 1 // java.lang.String variant
         0: .line 132
            new sun.security.validator.EndEntityChecker
            dup
            aload 0 /* type */
            aload 1 /* variant */
            invokespecial sun.security.validator.EndEntityChecker.<init>:(Ljava/lang/String;Ljava/lang/String;)V
            areturn
        end local 1 // java.lang.String variant
        end local 0 // java.lang.String type
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0    1     0     type  Ljava/lang/String;
            0    1     1  variant  Ljava/lang/String;
    MethodParameters:
         Name  Flags
      type     
      variant  

  void check(java.security.cert.X509Certificate, java.lang.Object, boolean);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/lang/Object;Z)V
    flags: (0x0000) 
    Code:
      stack=5, locals=5, args_size=4
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
        start local 2 // java.lang.Object parameter
        start local 3 // boolean checkUnresolvedCritExts
         0: .line 137
            aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "generic"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 2
         1: .line 138
            return
         2: .line 141
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* cert */
            invokevirtual sun.security.validator.EndEntityChecker.getCriticalExtensions:(Ljava/security/cert/X509Certificate;)Ljava/util/Set;
            astore 4 /* exts */
        start local 4 // java.util.Set exts
         3: .line 142
            aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "tls server"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 6
         4: .line 143
            aload 0 /* this */
            aload 1 /* cert */
            aload 2 /* parameter */
            checkcast java.lang.String
            aload 4 /* exts */
            invokevirtual sun.security.validator.EndEntityChecker.checkTLSServer:(Ljava/security/cert/X509Certificate;Ljava/lang/String;Ljava/util/Set;)V
         5: .line 144
            goto 22
      StackMap locals: java.util.Set
      StackMap stack:
         6: aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "tls client"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 9
         7: .line 145
            aload 0 /* this */
            aload 1 /* cert */
            aload 4 /* exts */
            invokevirtual sun.security.validator.EndEntityChecker.checkTLSClient:(Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
         8: .line 146
            goto 22
      StackMap locals:
      StackMap stack:
         9: aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "code signing"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 12
        10: .line 147
            aload 0 /* this */
            aload 1 /* cert */
            aload 4 /* exts */
            invokevirtual sun.security.validator.EndEntityChecker.checkCodeSigning:(Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
        11: .line 148
            goto 22
      StackMap locals:
      StackMap stack:
        12: aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "jce signing"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 15
        13: .line 149
            aload 0 /* this */
            aload 1 /* cert */
            aload 4 /* exts */
            invokevirtual sun.security.validator.EndEntityChecker.checkCodeSigning:(Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
        14: .line 150
            goto 22
      StackMap locals:
      StackMap stack:
        15: aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "plugin code signing"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 18
        16: .line 151
            aload 0 /* this */
            aload 1 /* cert */
            aload 4 /* exts */
            invokevirtual sun.security.validator.EndEntityChecker.checkCodeSigning:(Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
        17: .line 152
            goto 22
      StackMap locals:
      StackMap stack:
        18: aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "tsa server"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 21
        19: .line 153
            aload 0 /* this */
            aload 1 /* cert */
            aload 4 /* exts */
            invokevirtual sun.security.validator.EndEntityChecker.checkTSAServer:(Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
        20: .line 154
            goto 22
        21: .line 155
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertificateException
            dup
            new java.lang.StringBuilder
            dup
            ldc "Unknown variant: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
        22: .line 159
      StackMap locals:
      StackMap stack:
            iload 3 /* checkUnresolvedCritExts */
            ifeq 24
        23: .line 160
            aload 0 /* this */
            aload 4 /* exts */
            invokevirtual sun.security.validator.EndEntityChecker.checkRemainingExtensions:(Ljava/util/Set;)V
        24: .line 162
      StackMap locals:
      StackMap stack:
            return
        end local 4 // java.util.Set exts
        end local 3 // boolean checkUnresolvedCritExts
        end local 2 // java.lang.Object parameter
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot                     Name  Signature
            0   25     0                     this  Lsun/security/validator/EndEntityChecker;
            0   25     1                     cert  Ljava/security/cert/X509Certificate;
            0   25     2                parameter  Ljava/lang/Object;
            0   25     3  checkUnresolvedCritExts  Z
            3   25     4                     exts  Ljava/util/Set<Ljava/lang/String;>;
    Exceptions:
      throws java.security.cert.CertificateException
    MethodParameters:
                         Name  Flags
      cert                     
      parameter                
      checkUnresolvedCritExts  

  private java.util.Set<java.lang.String> getCriticalExtensions(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)Ljava/util/Set;
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=1, locals=3, args_size=2
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
         0: .line 169
            aload 1 /* cert */
            invokevirtual java.security.cert.X509Certificate.getCriticalExtensionOIDs:()Ljava/util/Set;
            astore 2 /* exts */
        start local 2 // java.util.Set exts
         1: .line 170
            aload 2 /* exts */
            ifnonnull 3
         2: .line 171
            invokestatic java.util.Collections.emptySet:()Ljava/util/Set;
            astore 2 /* exts */
         3: .line 173
      StackMap locals: java.util.Set
      StackMap stack:
            aload 2 /* exts */
            areturn
        end local 2 // java.util.Set exts
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    4     0  this  Lsun/security/validator/EndEntityChecker;
            0    4     1  cert  Ljava/security/cert/X509Certificate;
            1    4     2  exts  Ljava/util/Set<Ljava/lang/String;>;
    Signature: (Ljava/security/cert/X509Certificate;)Ljava/util/Set<Ljava/lang/String;>;
    MethodParameters:
      Name  Flags
      cert  

  private void checkRemainingExtensions(java.util.Set<java.lang.String>);
    descriptor: (Ljava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=2, args_size=2
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.util.Set exts
         0: .line 183
            aload 1 /* exts */
            ldc "2.5.29.19"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
         1: .line 189
            aload 1 /* exts */
            ldc "2.5.29.17"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
         2: .line 191
            aload 1 /* exts */
            invokeinterface java.util.Set.isEmpty:()Z
            ifne 6
         3: .line 192
            new java.security.cert.CertificateException
            dup
            new java.lang.StringBuilder
            dup
            ldc "Certificate contains unsupported critical extensions: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
         4: .line 193
            aload 1 /* exts */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         5: .line 192
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
         6: .line 195
      StackMap locals:
      StackMap stack:
            return
        end local 1 // java.util.Set exts
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    7     0  this  Lsun/security/validator/EndEntityChecker;
            0    7     1  exts  Ljava/util/Set<Ljava/lang/String;>;
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: (Ljava/util/Set<Ljava/lang/String;>;)V
    MethodParameters:
      Name  Flags
      exts  

  private boolean checkEKU(java.security.cert.X509Certificate, java.util.Set<java.lang.String>, java.lang.String);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=2, locals=5, args_size=4
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
        start local 2 // java.util.Set exts
        start local 3 // java.lang.String expectedEKU
         0: .line 203
            aload 1 /* cert */
            invokevirtual java.security.cert.X509Certificate.getExtendedKeyUsage:()Ljava/util/List;
            astore 4 /* eku */
        start local 4 // java.util.List eku
         1: .line 204
            aload 4 /* eku */
            ifnonnull 3
         2: .line 205
            iconst_1
            ireturn
         3: .line 207
      StackMap locals: java.util.List
      StackMap stack:
            aload 4 /* eku */
            aload 3 /* expectedEKU */
            invokeinterface java.util.List.contains:(Ljava/lang/Object;)Z
            ifne 4
            aload 4 /* eku */
            ldc "2.5.29.37.0"
            invokeinterface java.util.List.contains:(Ljava/lang/Object;)Z
            ifne 4
            iconst_0
            ireturn
      StackMap locals:
      StackMap stack:
         4: iconst_1
            ireturn
        end local 4 // java.util.List eku
        end local 3 // java.lang.String expectedEKU
        end local 2 // java.util.Set exts
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0    5     0         this  Lsun/security/validator/EndEntityChecker;
            0    5     1         cert  Ljava/security/cert/X509Certificate;
            0    5     2         exts  Ljava/util/Set<Ljava/lang/String;>;
            0    5     3  expectedEKU  Ljava/lang/String;
            1    5     4          eku  Ljava/util/List<Ljava/lang/String;>;
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/util/Set<Ljava/lang/String;>;Ljava/lang/String;)Z
    MethodParameters:
             Name  Flags
      cert         
      exts         
      expectedEKU  

  private boolean checkKeyUsage(java.security.cert.X509Certificate, int);
    descriptor: (Ljava/security/cert/X509Certificate;I)Z
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=2, locals=4, args_size=3
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
        start local 2 // int bit
         0: .line 217
            aload 1 /* cert */
            invokevirtual java.security.cert.X509Certificate.getKeyUsage:()[Z
            astore 3 /* keyUsage */
        start local 3 // boolean[] keyUsage
         1: .line 218
            aload 3 /* keyUsage */
            ifnonnull 3
         2: .line 219
            iconst_1
            ireturn
         3: .line 221
      StackMap locals: boolean[]
      StackMap stack:
            aload 3 /* keyUsage */
            arraylength
            iload 2 /* bit */
            if_icmple 4
            aload 3 /* keyUsage */
            iload 2 /* bit */
            baload
            ifeq 4
            iconst_1
            ireturn
      StackMap locals:
      StackMap stack:
         4: iconst_0
            ireturn
        end local 3 // boolean[] keyUsage
        end local 2 // int bit
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot      Name  Signature
            0    5     0      this  Lsun/security/validator/EndEntityChecker;
            0    5     1      cert  Ljava/security/cert/X509Certificate;
            0    5     2       bit  I
            1    5     3  keyUsage  [Z
    Exceptions:
      throws java.security.cert.CertificateException
    MethodParameters:
      Name  Flags
      cert  
      bit   

  private void checkTLSClient(java.security.cert.X509Certificate, java.util.Set<java.lang.String>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=3, args_size=3
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
        start local 2 // java.util.Set exts
         0: .line 231
            aload 0 /* this */
            aload 1 /* cert */
            iconst_0
            invokevirtual sun.security.validator.EndEntityChecker.checkKeyUsage:(Ljava/security/cert/X509Certificate;I)Z
            ifne 5
         1: .line 232
            new sun.security.validator.ValidatorException
            dup
         2: .line 233
            ldc "KeyUsage does not allow digital signatures"
         3: .line 234
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
         4: .line 232
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
         5: .line 237
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* cert */
            aload 2 /* exts */
            ldc "1.3.6.1.5.5.7.3.2"
            invokevirtual sun.security.validator.EndEntityChecker.checkEKU:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
            ifne 9
         6: .line 238
            new sun.security.validator.ValidatorException
            dup
            ldc "Extended key usage does not permit use for TLS client authentication"
         7: .line 240
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
         8: .line 238
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
         9: .line 243
      StackMap locals:
      StackMap stack:
            aload 1 /* cert */
            ldc "ssl_client"
            invokestatic sun.security.validator.SimpleValidator.getNetscapeCertTypeBit:(Ljava/security/cert/X509Certificate;Ljava/lang/String;)Z
            ifne 14
        10: .line 244
            new sun.security.validator.ValidatorException
            dup
        11: .line 245
            ldc "Netscape cert type does not permit use for SSL client"
        12: .line 246
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
        13: .line 244
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        14: .line 250
      StackMap locals:
      StackMap stack:
            aload 2 /* exts */
            ldc "2.5.29.15"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        15: .line 251
            aload 2 /* exts */
            ldc "2.5.29.37"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        16: .line 252
            aload 2 /* exts */
            ldc "2.16.840.1.113730.1.1"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        17: .line 253
            return
        end local 2 // java.util.Set exts
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   18     0  this  Lsun/security/validator/EndEntityChecker;
            0   18     1  cert  Ljava/security/cert/X509Certificate;
            0   18     2  exts  Ljava/util/Set<Ljava/lang/String;>;
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/util/Set<Ljava/lang/String;>;)V
    MethodParameters:
      Name  Flags
      cert  
      exts  

  private void checkTLSServer(java.security.cert.X509Certificate, java.lang.String, java.util.Set<java.lang.String>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/lang/String;Ljava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=4, args_size=4
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
        start local 2 // java.lang.String parameter
        start local 3 // java.util.Set exts
         0: .line 263
            getstatic sun.security.validator.EndEntityChecker.KU_SERVER_ENCRYPTION:Ljava/util/Collection;
            aload 2 /* parameter */
            invokeinterface java.util.Collection.contains:(Ljava/lang/Object;)Z
            ifeq 6
         1: .line 264
            aload 0 /* this */
            aload 1 /* cert */
            iconst_2
            invokevirtual sun.security.validator.EndEntityChecker.checkKeyUsage:(Ljava/security/cert/X509Certificate;I)Z
            ifne 19
         2: .line 265
            new sun.security.validator.ValidatorException
            dup
         3: .line 266
            ldc "KeyUsage does not allow key encipherment"
         4: .line 267
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
         5: .line 265
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
         6: .line 269
      StackMap locals:
      StackMap stack:
            getstatic sun.security.validator.EndEntityChecker.KU_SERVER_SIGNATURE:Ljava/util/Collection;
            aload 2 /* parameter */
            invokeinterface java.util.Collection.contains:(Ljava/lang/Object;)Z
            ifeq 12
         7: .line 270
            aload 0 /* this */
            aload 1 /* cert */
            iconst_0
            invokevirtual sun.security.validator.EndEntityChecker.checkKeyUsage:(Ljava/security/cert/X509Certificate;I)Z
            ifne 19
         8: .line 271
            new sun.security.validator.ValidatorException
            dup
         9: .line 272
            ldc "KeyUsage does not allow digital signatures"
        10: .line 273
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
        11: .line 271
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        12: .line 275
      StackMap locals:
      StackMap stack:
            getstatic sun.security.validator.EndEntityChecker.KU_SERVER_KEY_AGREEMENT:Ljava/util/Collection;
            aload 2 /* parameter */
            invokeinterface java.util.Collection.contains:(Ljava/lang/Object;)Z
            ifeq 18
        13: .line 276
            aload 0 /* this */
            aload 1 /* cert */
            iconst_4
            invokevirtual sun.security.validator.EndEntityChecker.checkKeyUsage:(Ljava/security/cert/X509Certificate;I)Z
            ifne 19
        14: .line 277
            new sun.security.validator.ValidatorException
            dup
        15: .line 278
            ldc "KeyUsage does not allow key agreement"
        16: .line 279
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
        17: .line 277
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        18: .line 282
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertificateException
            dup
            new java.lang.StringBuilder
            dup
            ldc "Unknown authType: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 2 /* parameter */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
        19: .line 285
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* cert */
            aload 3 /* exts */
            ldc "1.3.6.1.5.5.7.3.1"
            invokevirtual sun.security.validator.EndEntityChecker.checkEKU:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
            ifne 26
        20: .line 288
            aload 0 /* this */
            aload 1 /* cert */
            aload 3 /* exts */
            ldc "1.3.6.1.4.1.311.10.3.3"
            invokevirtual sun.security.validator.EndEntityChecker.checkEKU:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
            ifne 26
        21: .line 289
            aload 0 /* this */
            aload 1 /* cert */
            aload 3 /* exts */
            ldc "2.16.840.1.113730.4.1"
            invokevirtual sun.security.validator.EndEntityChecker.checkEKU:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
            ifne 26
        22: .line 290
            new sun.security.validator.ValidatorException
            dup
        23: .line 291
            ldc "Extended key usage does not permit use for TLS server authentication"
        24: .line 293
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
        25: .line 290
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        26: .line 297
      StackMap locals:
      StackMap stack:
            aload 1 /* cert */
            ldc "ssl_server"
            invokestatic sun.security.validator.SimpleValidator.getNetscapeCertTypeBit:(Ljava/security/cert/X509Certificate;Ljava/lang/String;)Z
            ifne 31
        27: .line 298
            new sun.security.validator.ValidatorException
            dup
        28: .line 299
            ldc "Netscape cert type does not permit use for SSL server"
        29: .line 300
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
        30: .line 298
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        31: .line 304
      StackMap locals:
      StackMap stack:
            aload 3 /* exts */
            ldc "2.5.29.15"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        32: .line 305
            aload 3 /* exts */
            ldc "2.5.29.37"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        33: .line 306
            aload 3 /* exts */
            ldc "2.16.840.1.113730.1.1"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        34: .line 307
            return
        end local 3 // java.util.Set exts
        end local 2 // java.lang.String parameter
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot       Name  Signature
            0   35     0       this  Lsun/security/validator/EndEntityChecker;
            0   35     1       cert  Ljava/security/cert/X509Certificate;
            0   35     2  parameter  Ljava/lang/String;
            0   35     3       exts  Ljava/util/Set<Ljava/lang/String;>;
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/lang/String;Ljava/util/Set<Ljava/lang/String;>;)V
    MethodParameters:
           Name  Flags
      cert       
      parameter  
      exts       

  private void checkCodeSigning(java.security.cert.X509Certificate, java.util.Set<java.lang.String>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=3, args_size=3
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
        start local 2 // java.util.Set exts
         0: .line 315
            aload 0 /* this */
            aload 1 /* cert */
            iconst_0
            invokevirtual sun.security.validator.EndEntityChecker.checkKeyUsage:(Ljava/security/cert/X509Certificate;I)Z
            ifne 5
         1: .line 316
            new sun.security.validator.ValidatorException
            dup
         2: .line 317
            ldc "KeyUsage does not allow digital signatures"
         3: .line 318
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
         4: .line 316
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
         5: .line 321
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* cert */
            aload 2 /* exts */
            ldc "1.3.6.1.5.5.7.3.3"
            invokevirtual sun.security.validator.EndEntityChecker.checkEKU:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
            ifne 10
         6: .line 322
            new sun.security.validator.ValidatorException
            dup
         7: .line 323
            ldc "Extended key usage does not permit use for code signing"
         8: .line 324
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
         9: .line 322
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        10: .line 329
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.validator.EndEntityChecker.variant:Ljava/lang/String;
            ldc "jce signing"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifne 17
        11: .line 330
            aload 1 /* cert */
            ldc "object_signing"
            invokestatic sun.security.validator.SimpleValidator.getNetscapeCertTypeBit:(Ljava/security/cert/X509Certificate;Ljava/lang/String;)Z
            ifne 16
        12: .line 331
            new sun.security.validator.ValidatorException
            dup
        13: .line 332
            ldc "Netscape cert type does not permit use for code signing"
        14: .line 333
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
        15: .line 331
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        16: .line 335
      StackMap locals:
      StackMap stack:
            aload 2 /* exts */
            ldc "2.16.840.1.113730.1.1"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        17: .line 339
      StackMap locals:
      StackMap stack:
            aload 2 /* exts */
            ldc "2.5.29.15"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        18: .line 340
            aload 2 /* exts */
            ldc "2.5.29.37"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        19: .line 341
            return
        end local 2 // java.util.Set exts
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   20     0  this  Lsun/security/validator/EndEntityChecker;
            0   20     1  cert  Ljava/security/cert/X509Certificate;
            0   20     2  exts  Ljava/util/Set<Ljava/lang/String;>;
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/util/Set<Ljava/lang/String;>;)V
    MethodParameters:
      Name  Flags
      cert  
      exts  

  private void checkTSAServer(java.security.cert.X509Certificate, java.util.Set<java.lang.String>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=3, args_size=3
        start local 0 // sun.security.validator.EndEntityChecker this
        start local 1 // java.security.cert.X509Certificate cert
        start local 2 // java.util.Set exts
         0: .line 350
            aload 0 /* this */
            aload 1 /* cert */
            iconst_0
            invokevirtual sun.security.validator.EndEntityChecker.checkKeyUsage:(Ljava/security/cert/X509Certificate;I)Z
            ifne 5
         1: .line 351
            new sun.security.validator.ValidatorException
            dup
         2: .line 352
            ldc "KeyUsage does not allow digital signatures"
         3: .line 353
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
         4: .line 351
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
         5: .line 356
      StackMap locals:
      StackMap stack:
            aload 1 /* cert */
            invokevirtual java.security.cert.X509Certificate.getExtendedKeyUsage:()Ljava/util/List;
            ifnonnull 10
         6: .line 357
            new sun.security.validator.ValidatorException
            dup
         7: .line 358
            ldc "Certificate does not contain an extended key usage extension required for a TSA server"
         8: .line 360
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
         9: .line 357
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        10: .line 363
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* cert */
            aload 2 /* exts */
            ldc "1.3.6.1.5.5.7.3.8"
            invokevirtual sun.security.validator.EndEntityChecker.checkEKU:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
            ifne 15
        11: .line 364
            new sun.security.validator.ValidatorException
            dup
        12: .line 365
            ldc "Extended key usage does not permit use for TSA server"
        13: .line 366
            getstatic sun.security.validator.ValidatorException.T_EE_EXTENSIONS:Ljava/lang/Object;
            aload 1 /* cert */
        14: .line 364
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Object;Ljava/security/cert/X509Certificate;)V
            athrow
        15: .line 370
      StackMap locals:
      StackMap stack:
            aload 2 /* exts */
            ldc "2.5.29.15"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        16: .line 371
            aload 2 /* exts */
            ldc "2.5.29.37"
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        17: .line 372
            return
        end local 2 // java.util.Set exts
        end local 1 // java.security.cert.X509Certificate cert
        end local 0 // sun.security.validator.EndEntityChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   18     0  this  Lsun/security/validator/EndEntityChecker;
            0   18     1  cert  Ljava/security/cert/X509Certificate;
            0   18     2  exts  Ljava/util/Set<Ljava/lang/String;>;
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/util/Set<Ljava/lang/String;>;)V
    MethodParameters:
      Name  Flags
      cert  
      exts  
}
SourceFile: "EndEntityChecker.java"
/

java/ 10/ java.base/sun/security/validator/EndEntityChecker.class
