java/15 : java.base/sun/security/provider/certpath/PKIXCertPathValidator.class

PKIXCertPathValidator
https://openjdk.java.net/
GPLv2 + Classpath Exception
public final class sun.security.provider.certpath.PKIXCertPathValidator extends java.security.cert.CertPathValidatorSpi
  minor version: 0
  major version: 59
  flags: flags: (0x0031) ACC_PUBLIC, ACC_FINAL, ACC_SUPER
  this_class: sun.security.provider.certpath.PKIXCertPathValidator
  super_class: java.security.cert.CertPathValidatorSpi
{
  private static final sun.security.util.Debug debug;
    descriptor: Lsun/security/util/Debug;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.util.concurrent.atomic.AtomicLong validationCounter;
    descriptor: Ljava/util/concurrent/atomic/AtomicLong;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=2, locals=0, args_size=0
         0: .line 52
            ldc "certpath"
            invokestatic sun.security.util.Debug.getInstance:(Ljava/lang/String;)Lsun/security/util/Debug;
            putstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
         1: .line 53
            new java.util.concurrent.atomic.AtomicLong
            dup
            invokespecial java.util.concurrent.atomic.AtomicLong.<init>:()V
            putstatic sun.security.provider.certpath.PKIXCertPathValidator.validationCounter:Ljava/util/concurrent/atomic/AtomicLong;
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  public void <init>();
    descriptor: ()V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.PKIXCertPathValidator this
         0: .line 58
            aload 0 /* this */
            invokespecial java.security.cert.CertPathValidatorSpi.<init>:()V
            return
        end local 0 // sun.security.provider.certpath.PKIXCertPathValidator this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/provider/certpath/PKIXCertPathValidator;

  public java.security.cert.CertPathChecker engineGetRevocationChecker();
    descriptor: ()Ljava/security/cert/CertPathChecker;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.PKIXCertPathValidator this
         0: .line 62
            new sun.security.provider.certpath.RevocationChecker
            dup
            invokespecial sun.security.provider.certpath.RevocationChecker.<init>:()V
            areturn
        end local 0 // sun.security.provider.certpath.PKIXCertPathValidator this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/provider/certpath/PKIXCertPathValidator;

  public java.security.cert.CertPathValidatorResult engineValidate(java.security.cert.CertPath, java.security.cert.CertPathParameters);
    descriptor: (Ljava/security/cert/CertPath;Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPathValidatorResult;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=2, locals=4, args_size=3
        start local 0 // sun.security.provider.certpath.PKIXCertPathValidator this
        start local 1 // java.security.cert.CertPath cp
        start local 2 // java.security.cert.CertPathParameters params
         0: .line 83
            aload 1 /* cp */
            aload 2 /* params */
            invokestatic sun.security.provider.certpath.PKIX.checkParams:(Ljava/security/cert/CertPath;Ljava/security/cert/CertPathParameters;)Lsun/security/provider/certpath/PKIX$ValidatorParams;
            astore 3 /* valParams */
        start local 3 // sun.security.provider.certpath.PKIX$ValidatorParams valParams
         1: .line 84
            aload 3 /* valParams */
            invokestatic sun.security.provider.certpath.PKIXCertPathValidator.validate:(Lsun/security/provider/certpath/PKIX$ValidatorParams;)Ljava/security/cert/PKIXCertPathValidatorResult;
            areturn
        end local 3 // sun.security.provider.certpath.PKIX$ValidatorParams valParams
        end local 2 // java.security.cert.CertPathParameters params
        end local 1 // java.security.cert.CertPath cp
        end local 0 // sun.security.provider.certpath.PKIXCertPathValidator this
      LocalVariableTable:
        Start  End  Slot       Name  Signature
            0    2     0       this  Lsun/security/provider/certpath/PKIXCertPathValidator;
            0    2     1         cp  Ljava/security/cert/CertPath;
            0    2     2     params  Ljava/security/cert/CertPathParameters;
            1    2     3  valParams  Lsun/security/provider/certpath/PKIX$ValidatorParams;
    Exceptions:
      throws java.security.cert.CertPathValidatorException, java.security.InvalidAlgorithmParameterException
    MethodParameters:
        Name  Flags
      cp      
      params  

  private static java.security.cert.PKIXCertPathValidatorResult validate(sun.security.provider.certpath.PKIX$ValidatorParams);
    descriptor: (Lsun/security/provider/certpath/PKIX$ValidatorParams;)Ljava/security/cert/PKIXCertPathValidatorResult;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=7, locals=8, args_size=1
        start local 0 // sun.security.provider.certpath.PKIX$ValidatorParams params
         0: .line 90
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ifnull 2
         1: .line 91
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ldc "PKIXCertPathValidator.engineValidate()..."
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         2: .line 95
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 1 /* selector */
        start local 1 // sun.security.provider.certpath.AdaptableX509CertSelector selector
         3: .line 96
            aload 0 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.certificates:()Ljava/util/List;
            astore 2 /* certList */
        start local 2 // java.util.List certList
         4: .line 97
            aload 2 /* certList */
            invokeinterface java.util.List.isEmpty:()Z
            ifne 14
         5: .line 98
            new sun.security.provider.certpath.AdaptableX509CertSelector
            dup
            invokespecial sun.security.provider.certpath.AdaptableX509CertSelector.<init>:()V
            astore 1 /* selector */
         6: .line 99
            aload 2 /* certList */
            iconst_0
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 3 /* firstCert */
        start local 3 // java.security.cert.X509Certificate firstCert
         7: .line 101
            aload 1 /* selector */
            aload 3 /* firstCert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual sun.security.provider.certpath.AdaptableX509CertSelector.setSubject:(Ljavax/security/auth/x500/X500Principal;)V
         8: .line 107
            aload 3 /* firstCert */
            invokestatic sun.security.x509.X509CertImpl.toImpl:(Ljava/security/cert/X509Certificate;)Lsun/security/x509/X509CertImpl;
            astore 4 /* firstCertImpl */
        start local 4 // sun.security.x509.X509CertImpl firstCertImpl
         9: .line 108
            aload 1 /* selector */
        10: .line 109
            aload 4 /* firstCertImpl */
            invokevirtual sun.security.x509.X509CertImpl.getAuthorityKeyIdentifierExtension:()Lsun/security/x509/AuthorityKeyIdentifierExtension;
        11: .line 108
            invokevirtual sun.security.provider.certpath.AdaptableX509CertSelector.setSkiAndSerialNumber:(Lsun/security/x509/AuthorityKeyIdentifierExtension;)V
        end local 4 // sun.security.x509.X509CertImpl firstCertImpl
        12: .line 110
            goto 14
      StackMap locals: sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.AdaptableX509CertSelector java.util.List java.security.cert.X509Certificate
      StackMap stack: java.lang.Exception
        13: pop
        end local 3 // java.security.cert.X509Certificate firstCert
        14: .line 115
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 3 /* lastException */
        start local 3 // java.security.cert.CertPathValidatorException lastException
        15: .line 119
            aload 0 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.trustAnchors:()Ljava/util/Set;
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 5
            goto 35
      StackMap locals: sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.AdaptableX509CertSelector java.util.List java.security.cert.CertPathValidatorException top java.util.Iterator
      StackMap stack:
        16: aload 5
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.TrustAnchor
            astore 4 /* anchor */
        start local 4 // java.security.cert.TrustAnchor anchor
        17: .line 120
            aload 4 /* anchor */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            astore 6 /* trustedCert */
        start local 6 // java.security.cert.X509Certificate trustedCert
        18: .line 121
            aload 6 /* trustedCert */
            ifnull 29
        19: .line 124
            aload 1 /* selector */
            ifnull 23
            aload 1 /* selector */
            aload 6 /* trustedCert */
            invokevirtual sun.security.provider.certpath.AdaptableX509CertSelector.match:(Ljava/security/cert/Certificate;)Z
            ifne 23
        20: .line 125
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ifnull 35
            invokestatic sun.security.util.Debug.isVerbose:()Z
            ifeq 35
        21: .line 126
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ldc "NO - don't try this trustedCert"
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        22: .line 128
            goto 35
        23: .line 131
      StackMap locals: sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.AdaptableX509CertSelector java.util.List java.security.cert.CertPathValidatorException java.security.cert.TrustAnchor java.util.Iterator java.security.cert.X509Certificate
      StackMap stack:
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ifnull 31
        24: .line 132
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ldc "YES - try this trustedCert"
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        25: .line 133
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "anchor.getTrustedCert().getSubjectX500Principal() = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        26: .line 135
            aload 6 /* trustedCert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        27: .line 133
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        28: .line 137
            goto 31
        29: .line 138
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ifnull 31
        30: .line 139
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.debug:Lsun/security/util/Debug;
            ldc "PKIXCertPathValidator.engineValidate(): anchor.getTrustedCert() == null"
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        31: .line 145
      StackMap locals:
      StackMap stack:
            aload 4 /* anchor */
            aload 0 /* params */
            invokestatic sun.security.provider.certpath.PKIXCertPathValidator.validate:(Ljava/security/cert/TrustAnchor;Lsun/security/provider/certpath/PKIX$ValidatorParams;)Ljava/security/cert/PKIXCertPathValidatorResult;
        32: areturn
        33: .line 146
      StackMap locals:
      StackMap stack: java.security.cert.CertPathValidatorException
            astore 7 /* cpe */
        start local 7 // java.security.cert.CertPathValidatorException cpe
        34: .line 148
            aload 7 /* cpe */
            astore 3 /* lastException */
        end local 7 // java.security.cert.CertPathValidatorException cpe
        end local 6 // java.security.cert.X509Certificate trustedCert
        end local 4 // java.security.cert.TrustAnchor anchor
        35: .line 119
      StackMap locals: sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.AdaptableX509CertSelector java.util.List java.security.cert.CertPathValidatorException top java.util.Iterator
      StackMap stack:
            aload 5
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 16
        36: .line 154
            aload 3 /* lastException */
            ifnull 38
        37: .line 155
            aload 3 /* lastException */
            athrow
        38: .line 158
      StackMap locals: sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.AdaptableX509CertSelector java.util.List java.security.cert.CertPathValidatorException
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
        39: .line 159
            ldc "Path does not chain with any of the trust anchors"
        40: .line 160
            aconst_null
            aconst_null
            iconst_m1
            getstatic java.security.cert.PKIXReason.NO_TRUST_ANCHOR:Ljava/security/cert/PKIXReason;
        41: .line 158
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;Ljava/security/cert/CertPath;ILjava/security/cert/CertPathValidatorException$Reason;)V
            athrow
        end local 3 // java.security.cert.CertPathValidatorException lastException
        end local 2 // java.util.List certList
        end local 1 // sun.security.provider.certpath.AdaptableX509CertSelector selector
        end local 0 // sun.security.provider.certpath.PKIX$ValidatorParams params
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   42     0         params  Lsun/security/provider/certpath/PKIX$ValidatorParams;
            3   42     1       selector  Lsun/security/provider/certpath/AdaptableX509CertSelector;
            4   42     2       certList  Ljava/util/List<Ljava/security/cert/X509Certificate;>;
            7   14     3      firstCert  Ljava/security/cert/X509Certificate;
            9   12     4  firstCertImpl  Lsun/security/x509/X509CertImpl;
           15   42     3  lastException  Ljava/security/cert/CertPathValidatorException;
           17   35     4         anchor  Ljava/security/cert/TrustAnchor;
           18   35     6    trustedCert  Ljava/security/cert/X509Certificate;
           34   35     7            cpe  Ljava/security/cert/CertPathValidatorException;
      Exception table:
        from    to  target  type
           8    12      13  Class java.security.cert.CertificateException
           8    12      13  Class java.io.IOException
          31    32      33  Class java.security.cert.CertPathValidatorException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
        Name  Flags
      params  

  private static java.security.cert.PKIXCertPathValidatorResult validate(java.security.cert.TrustAnchor, sun.security.provider.certpath.PKIX$ValidatorParams);
    descriptor: (Ljava/security/cert/TrustAnchor;Lsun/security/provider/certpath/PKIX$ValidatorParams;)Ljava/security/cert/PKIXCertPathValidatorResult;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=9, locals=20, args_size=2
        start local 0 // java.security.cert.TrustAnchor anchor
        start local 1 // sun.security.provider.certpath.PKIX$ValidatorParams params
         0: .line 168
            new sun.security.provider.certpath.UntrustedChecker
            dup
            invokespecial sun.security.provider.certpath.UntrustedChecker.<init>:()V
            astore 2 /* untrustedChecker */
        start local 2 // sun.security.provider.certpath.UntrustedChecker untrustedChecker
         1: .line 169
            aload 0 /* anchor */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            astore 3 /* anchorCert */
        start local 3 // java.security.cert.X509Certificate anchorCert
         2: .line 170
            aload 3 /* anchorCert */
            ifnull 4
         3: .line 171
            aload 2 /* untrustedChecker */
            aload 3 /* anchorCert */
            invokevirtual sun.security.provider.certpath.UntrustedChecker.check:(Ljava/security/cert/Certificate;)V
         4: .line 174
      StackMap locals: sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate
      StackMap stack:
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.certificates:()Ljava/util/List;
            invokeinterface java.util.List.size:()I
            istore 4 /* certPathLen */
        start local 4 // int certPathLen
         5: .line 177
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 5 /* certPathCheckers */
        start local 5 // java.util.List certPathCheckers
         6: .line 179
            aload 5 /* certPathCheckers */
            aload 2 /* untrustedChecker */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
         7: .line 180
            aload 5 /* certPathCheckers */
            new sun.security.provider.certpath.AlgorithmChecker
            dup
            aload 0 /* anchor */
            aconst_null
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.date:()Ljava/util/Date;
         8: .line 181
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.timestamp:()Ljava/security/Timestamp;
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.variant:()Ljava/lang/String;
            invokespecial sun.security.provider.certpath.AlgorithmChecker.<init>:(Ljava/security/cert/TrustAnchor;Ljava/security/AlgorithmConstraints;Ljava/util/Date;Ljava/security/Timestamp;Ljava/lang/String;)V
         9: .line 180
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        10: .line 182
            aload 5 /* certPathCheckers */
            new sun.security.provider.certpath.KeyChecker
            dup
            iload 4 /* certPathLen */
        11: .line 183
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.targetCertConstraints:()Ljava/security/cert/CertSelector;
            invokespecial sun.security.provider.certpath.KeyChecker.<init>:(ILjava/security/cert/CertSelector;)V
        12: .line 182
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        13: .line 184
            aload 5 /* certPathCheckers */
            new sun.security.provider.certpath.ConstraintsChecker
            dup
            iload 4 /* certPathLen */
            invokespecial sun.security.provider.certpath.ConstraintsChecker.<init>:(I)V
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        14: .line 186
            new sun.security.provider.certpath.PolicyNodeImpl
            dup
            aconst_null
            getstatic sun.security.provider.certpath.PolicyChecker.ANY_POLICY:Ljava/lang/String;
            aconst_null
            iconst_0
        15: .line 187
            getstatic sun.security.provider.certpath.PolicyChecker.ANY_POLICY:Ljava/lang/String;
            invokestatic java.util.Collections.singleton:(Ljava/lang/Object;)Ljava/util/Set;
        16: .line 188
            iconst_0
        17: .line 186
            invokespecial sun.security.provider.certpath.PolicyNodeImpl.<init>:(Lsun/security/provider/certpath/PolicyNodeImpl;Ljava/lang/String;Ljava/util/Set;ZLjava/util/Set;Z)V
        18: .line 185
            astore 6 /* rootNode */
        start local 6 // sun.security.provider.certpath.PolicyNodeImpl rootNode
        19: .line 189
            new sun.security.provider.certpath.PolicyChecker
            dup
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.initialPolicies:()Ljava/util/Set;
        20: .line 190
            iload 4 /* certPathLen */
        21: .line 191
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.explicitPolicyRequired:()Z
        22: .line 192
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.policyMappingInhibited:()Z
        23: .line 193
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.anyPolicyInhibited:()Z
        24: .line 194
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.policyQualifiersRejected:()Z
        25: .line 195
            aload 6 /* rootNode */
        26: .line 189
            invokespecial sun.security.provider.certpath.PolicyChecker.<init>:(Ljava/util/Set;IZZZZLsun/security/provider/certpath/PolicyNodeImpl;)V
            astore 7 /* pc */
        start local 7 // sun.security.provider.certpath.PolicyChecker pc
        27: .line 196
            aload 5 /* certPathCheckers */
            aload 7 /* pc */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        28: .line 200
            aconst_null
            astore 8 /* timeToCheck */
        start local 8 // java.util.Date timeToCheck
        29: .line 203
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.variant:()Ljava/lang/String;
            ldc "code signing"
            if_acmpeq 31
        30: .line 204
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.variant:()Ljava/lang/String;
            ldc "plugin code signing"
            if_acmpne 34
        31: .line 205
      StackMap locals: java.security.cert.TrustAnchor sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate int java.util.List sun.security.provider.certpath.PolicyNodeImpl sun.security.provider.certpath.PolicyChecker java.util.Date
      StackMap stack:
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.timestamp:()Ljava/security/Timestamp;
            ifnull 34
        32: .line 206
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.timestamp:()Ljava/security/Timestamp;
            invokevirtual java.security.Timestamp.getTimestamp:()Ljava/util/Date;
            astore 8 /* timeToCheck */
        33: .line 207
            goto 35
        34: .line 208
      StackMap locals:
      StackMap stack:
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.date:()Ljava/util/Date;
            astore 8 /* timeToCheck */
        35: .line 210
      StackMap locals:
      StackMap stack:
            new sun.security.provider.certpath.BasicChecker
            dup
            aload 0 /* anchor */
            aload 8 /* timeToCheck */
        36: .line 211
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.sigProvider:()Ljava/lang/String;
            iconst_0
        37: .line 210
            invokespecial sun.security.provider.certpath.BasicChecker.<init>:(Ljava/security/cert/TrustAnchor;Ljava/util/Date;Ljava/lang/String;Z)V
            astore 9 /* bc */
        start local 9 // sun.security.provider.certpath.BasicChecker bc
        38: .line 212
            aload 5 /* certPathCheckers */
            aload 9 /* bc */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        39: .line 214
            iconst_0
            istore 10 /* revCheckerAdded */
        start local 10 // boolean revCheckerAdded
        40: .line 215
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.certPathCheckers:()Ljava/util/List;
            astore 11 /* checkers */
        start local 11 // java.util.List checkers
        41: .line 216
            aload 11 /* checkers */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 13
            goto 51
      StackMap locals: java.security.cert.TrustAnchor sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate int java.util.List sun.security.provider.certpath.PolicyNodeImpl sun.security.provider.certpath.PolicyChecker java.util.Date sun.security.provider.certpath.BasicChecker int java.util.List top java.util.Iterator
      StackMap stack:
        42: aload 13
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.PKIXCertPathChecker
            astore 12 /* checker */
        start local 12 // java.security.cert.PKIXCertPathChecker checker
        43: .line 217
            aload 12 /* checker */
            instanceof java.security.cert.PKIXRevocationChecker
            ifeq 51
        44: .line 218
            iload 10 /* revCheckerAdded */
            ifeq 48
        45: .line 219
            new java.security.cert.CertPathValidatorException
            dup
        46: .line 220
            ldc "Only one PKIXRevocationChecker can be specified"
        47: .line 219
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        48: .line 222
      StackMap locals: java.security.cert.TrustAnchor sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate int java.util.List sun.security.provider.certpath.PolicyNodeImpl sun.security.provider.certpath.PolicyChecker java.util.Date sun.security.provider.certpath.BasicChecker int java.util.List java.security.cert.PKIXCertPathChecker java.util.Iterator
      StackMap stack:
            iconst_1
            istore 10 /* revCheckerAdded */
        49: .line 224
            aload 12 /* checker */
            instanceof sun.security.provider.certpath.RevocationChecker
            ifeq 51
        50: .line 225
            aload 12 /* checker */
            checkcast sun.security.provider.certpath.RevocationChecker
            aload 0 /* anchor */
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.RevocationChecker.init:(Ljava/security/cert/TrustAnchor;Lsun/security/provider/certpath/PKIX$ValidatorParams;)V
        end local 12 // java.security.cert.PKIXCertPathChecker checker
        51: .line 216
      StackMap locals: java.security.cert.TrustAnchor sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate int java.util.List sun.security.provider.certpath.PolicyNodeImpl sun.security.provider.certpath.PolicyChecker java.util.Date sun.security.provider.certpath.BasicChecker int java.util.List top java.util.Iterator
      StackMap stack:
            aload 13
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 42
        52: .line 231
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.revocationEnabled:()Z
            ifeq 54
            iload 10 /* revCheckerAdded */
            ifne 54
        53: .line 232
            aload 5 /* certPathCheckers */
            new sun.security.provider.certpath.RevocationChecker
            dup
            aload 0 /* anchor */
            aload 1 /* params */
            invokespecial sun.security.provider.certpath.RevocationChecker.<init>:(Ljava/security/cert/TrustAnchor;Lsun/security/provider/certpath/PKIX$ValidatorParams;)V
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        54: .line 235
      StackMap locals: java.security.cert.TrustAnchor sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate int java.util.List sun.security.provider.certpath.PolicyNodeImpl sun.security.provider.certpath.PolicyChecker java.util.Date sun.security.provider.certpath.BasicChecker int java.util.List
      StackMap stack:
            aload 5 /* certPathCheckers */
            aload 11 /* checkers */
            invokeinterface java.util.List.addAll:(Ljava/util/Collection;)Z
            pop
        55: .line 237
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.certPath:()Ljava/security/cert/CertPath;
        56: .line 238
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.certificates:()Ljava/util/List;
        57: .line 239
            aload 5 /* certPathCheckers */
        58: .line 237
            invokestatic sun.security.provider.certpath.PKIXMasterCertPathValidator.validate:(Ljava/security/cert/CertPath;Ljava/util/List;Ljava/util/List;)V
        59: .line 241
            new jdk.internal.event.X509ValidationEvent
            dup
            invokespecial jdk.internal.event.X509ValidationEvent.<init>:()V
            astore 12 /* xve */
        start local 12 // jdk.internal.event.X509ValidationEvent xve
        60: .line 242
            aload 12 /* xve */
            invokevirtual jdk.internal.event.X509ValidationEvent.shouldCommit:()Z
            ifne 61
            invokestatic jdk.internal.event.EventHelper.isLoggingSecurity:()Z
            ifeq 82
        61: .line 243
      StackMap locals: jdk.internal.event.X509ValidationEvent
      StackMap stack:
            aload 1 /* params */
            invokevirtual sun.security.provider.certpath.PKIX$ValidatorParams.certificates:()Ljava/util/List;
            invokeinterface java.util.List.stream:()Ljava/util/stream/Stream;
        62: .line 244
            invokedynamic applyAsInt()Ljava/util/function/ToIntFunction;
              Bootstrap: invokestatic java.lang.invoke.LambdaMetafactory.metafactory:(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodHandle;Ljava/lang/invoke/MethodType;)Ljava/lang/invoke/CallSite;
                Method arguments:
                  (Ljava/lang/Object;)I
                  sun/security/provider/certpath/PKIXCertPathValidator.lambda$0(Ljava/security/cert/X509Certificate;)I (6)
                  (Ljava/security/cert/X509Certificate;)I
            invokeinterface java.util.stream.Stream.mapToInt:(Ljava/util/function/ToIntFunction;)Ljava/util/stream/IntStream;
        63: .line 245
            invokeinterface java.util.stream.IntStream.toArray:()[I
        64: .line 243
            astore 13 /* certIds */
        start local 13 // int[] certIds
        65: .line 247
            aload 0 /* anchor */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509Certificate.hashCode:()I
        66: .line 246
            istore 14 /* anchorCertId */
        start local 14 // int anchorCertId
        67: .line 248
            aload 12 /* xve */
            invokevirtual jdk.internal.event.X509ValidationEvent.shouldCommit:()Z
            ifeq 80
        68: .line 249
            aload 12 /* xve */
            iload 14 /* anchorCertId */
            i2l
            putfield jdk.internal.event.X509ValidationEvent.certificateId:J
        69: .line 250
            iconst_1
            istore 15 /* certificatePos */
        start local 15 // int certificatePos
        70: .line 251
            aload 12 /* xve */
            iload 15 /* certificatePos */
            putfield jdk.internal.event.X509ValidationEvent.certificatePosition:I
        71: .line 252
            aload 12 /* xve */
            getstatic sun.security.provider.certpath.PKIXCertPathValidator.validationCounter:Ljava/util/concurrent/atomic/AtomicLong;
            invokevirtual java.util.concurrent.atomic.AtomicLong.incrementAndGet:()J
            putfield jdk.internal.event.X509ValidationEvent.validationCounter:J
        72: .line 253
            aload 12 /* xve */
            invokevirtual jdk.internal.event.X509ValidationEvent.commit:()V
        73: .line 255
            aload 13 /* certIds */
            dup
            astore 19
            arraylength
            istore 18
            iconst_0
            istore 17
            goto 79
      StackMap locals: java.security.cert.TrustAnchor sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate int java.util.List sun.security.provider.certpath.PolicyNodeImpl sun.security.provider.certpath.PolicyChecker java.util.Date sun.security.provider.certpath.BasicChecker int java.util.List jdk.internal.event.X509ValidationEvent int[] int int top int int int[]
      StackMap stack:
        74: aload 19
            iload 17
            iaload
            istore 16 /* id */
        start local 16 // int id
        75: .line 256
            aload 12 /* xve */
            iload 16 /* id */
            i2l
            putfield jdk.internal.event.X509ValidationEvent.certificateId:J
        76: .line 257
            aload 12 /* xve */
            iinc 15 /* certificatePos */ 1
            iload 15 /* certificatePos */
            putfield jdk.internal.event.X509ValidationEvent.certificatePosition:I
        77: .line 258
            aload 12 /* xve */
            invokevirtual jdk.internal.event.X509ValidationEvent.commit:()V
        end local 16 // int id
        78: .line 255
            iinc 17 1
      StackMap locals:
      StackMap stack:
        79: iload 17
            iload 18
            if_icmplt 74
        end local 15 // int certificatePos
        80: .line 262
      StackMap locals: java.security.cert.TrustAnchor sun.security.provider.certpath.PKIX$ValidatorParams sun.security.provider.certpath.UntrustedChecker java.security.cert.X509Certificate int java.util.List sun.security.provider.certpath.PolicyNodeImpl sun.security.provider.certpath.PolicyChecker java.util.Date sun.security.provider.certpath.BasicChecker int java.util.List jdk.internal.event.X509ValidationEvent int[] int
      StackMap stack:
            invokestatic jdk.internal.event.EventHelper.isLoggingSecurity:()Z
            ifeq 82
        81: .line 263
            iload 14 /* anchorCertId */
            aload 13 /* certIds */
            invokestatic jdk.internal.event.EventHelper.logX509ValidationEvent:(I[I)V
        end local 14 // int anchorCertId
        end local 13 // int[] certIds
        82: .line 266
      StackMap locals:
      StackMap stack:
            new java.security.cert.PKIXCertPathValidatorResult
            dup
            aload 0 /* anchor */
            aload 7 /* pc */
            invokevirtual sun.security.provider.certpath.PolicyChecker.getPolicyTree:()Ljava/security/cert/PolicyNode;
        83: .line 267
            aload 9 /* bc */
            invokevirtual sun.security.provider.certpath.BasicChecker.getPublicKey:()Ljava/security/PublicKey;
        84: .line 266
            invokespecial java.security.cert.PKIXCertPathValidatorResult.<init>:(Ljava/security/cert/TrustAnchor;Ljava/security/cert/PolicyNode;Ljava/security/PublicKey;)V
            areturn
        end local 12 // jdk.internal.event.X509ValidationEvent xve
        end local 11 // java.util.List checkers
        end local 10 // boolean revCheckerAdded
        end local 9 // sun.security.provider.certpath.BasicChecker bc
        end local 8 // java.util.Date timeToCheck
        end local 7 // sun.security.provider.certpath.PolicyChecker pc
        end local 6 // sun.security.provider.certpath.PolicyNodeImpl rootNode
        end local 5 // java.util.List certPathCheckers
        end local 4 // int certPathLen
        end local 3 // java.security.cert.X509Certificate anchorCert
        end local 2 // sun.security.provider.certpath.UntrustedChecker untrustedChecker
        end local 1 // sun.security.provider.certpath.PKIX$ValidatorParams params
        end local 0 // java.security.cert.TrustAnchor anchor
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0   85     0            anchor  Ljava/security/cert/TrustAnchor;
            0   85     1            params  Lsun/security/provider/certpath/PKIX$ValidatorParams;
            1   85     2  untrustedChecker  Lsun/security/provider/certpath/UntrustedChecker;
            2   85     3        anchorCert  Ljava/security/cert/X509Certificate;
            5   85     4       certPathLen  I
            6   85     5  certPathCheckers  Ljava/util/List<Ljava/security/cert/PKIXCertPathChecker;>;
           19   85     6          rootNode  Lsun/security/provider/certpath/PolicyNodeImpl;
           27   85     7                pc  Lsun/security/provider/certpath/PolicyChecker;
           29   85     8       timeToCheck  Ljava/util/Date;
           38   85     9                bc  Lsun/security/provider/certpath/BasicChecker;
           40   85    10   revCheckerAdded  Z
           41   85    11          checkers  Ljava/util/List<Ljava/security/cert/PKIXCertPathChecker;>;
           43   51    12           checker  Ljava/security/cert/PKIXCertPathChecker;
           60   85    12               xve  Ljdk/internal/event/X509ValidationEvent;
           65   82    13           certIds  [I
           67   82    14      anchorCertId  I
           70   80    15    certificatePos  I
           75   78    16                id  I
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
        Name  Flags
      anchor  
      params  

  private static int lambda$0(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)I
    flags: (0x100a) ACC_PRIVATE, ACC_STATIC, ACC_SYNTHETIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // java.security.cert.X509Certificate x
         0: .line 244
            aload 0 /* x */
            invokevirtual java.security.cert.X509Certificate.hashCode:()I
            ireturn
        end local 0 // java.security.cert.X509Certificate x
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0     x  Ljava/security/cert/X509Certificate;
}
SourceFile: "PKIXCertPathValidator.java"
InnerClasses:
  public final Lookup = java.lang.invoke.MethodHandles$Lookup of java.lang.invoke.MethodHandles
  public abstract Reason = java.security.cert.CertPathValidatorException$Reason of java.security.cert.CertPathValidatorException
  ValidatorParams = sun.security.provider.certpath.PKIX$ValidatorParams of sun.security.provider.certpath.PKIX
/

java/ 15/ java.base/sun/security/provider/certpath/PKIXCertPathValidator.class
