怎么检查 X509Certificate 是否为 CA 证书?

本教程将介绍如何检查 X509Certificate 是否为 CA 证书?的处理方法,这篇教程是从别的地方看到的,然后加了一些国外程序员的疑问与解答,希望能对你有所帮助,好了,下面开始学习吧。

怎么检查 X509Certificate 是否为 CA 证书? 教程 第1张

问题描述

I have a X509Certificate instance in Java and I need to identify if it is a CA certificate or user certificate.

Can anyone provide any help?

Thanks in advance!

解决方案

According to research I have performed, it can be checked by checking basic constraints!
Check the API for returning results of getBasicConstraints() method.

So if the method returns result != -1, a certificate can be considered as a CA certificate.

I have checked this with several CA certificates (root and intermediate), and it works as described.
I have also checked this method with several user certificates, and the method returns -1 as result.

好了关于怎么检查 X509Certificate 是否为 CA 证书?的教程就到这里就结束了,希望趣模板源码网找到的这篇技术文章能帮助到大家,更多技术教程可以在站内搜索。