| Package | Description | 
|---|---|
| java.security | Provides the classes and interfaces for the security framework. | 
| java.security.cert | Provides classes and interfaces for parsing and managing
 certificates, certificate revocation lists (CRLs), and
 certification paths. | 
| javax.net.ssl | Provides classes for the secure socket package. | 
| Modifier and Type | Method | Description | 
|---|---|---|
| abstract void | KeyStoreSpi. engineLoad(InputStream stream,
          char[] password)Loads the keystore from the given input stream. | |
| void | KeyStoreSpi. engineLoad(KeyStore.LoadStoreParameter param)Loads the keystore using the given
  KeyStore.LoadStoreParameter. | |
| void | KeyStoreSpi. engineStore(KeyStore.LoadStoreParameter param)Stores this keystore using the given
  KeyStore.LoadStoreParmeter. | |
| abstract void | KeyStoreSpi. engineStore(OutputStream stream,
           char[] password)Stores this keystore to the given output stream, and protects its
 integrity with the given password. | |
| void | KeyStore. load(InputStream stream,
    char[] password)Loads this KeyStore from the given input stream. | |
| void | KeyStore. load(KeyStore.LoadStoreParameter param)Loads this keystore using the given  LoadStoreParameter. | |
| void | KeyStore. store(KeyStore.LoadStoreParameter param)Stores this keystore using the given  LoadStoreParameter. | |
| void | KeyStore. store(OutputStream stream,
     char[] password)Stores this keystore to the given output stream, and protects its
 integrity with the given password. | 
| Modifier and Type | Class | Description | 
|---|---|---|
| class  | CertificateEncodingExceptionCertificate Encoding Exception. | |
| class  | CertificateExpiredExceptionCertificate Expired Exception. | |
| class  | CertificateNotYetValidExceptionCertificate is not yet valid exception. | |
| class  | CertificateParsingExceptionCertificate Parsing Exception. | |
| class  | CertificateRevokedExceptionAn exception that indicates an X.509 certificate is revoked. | 
| Modifier and Type | Method | Description | 
|---|---|---|
| abstract Certificate | CertificateFactorySpi. engineGenerateCertificate(InputStream inStream)Generates a certificate object and initializes it with
 the data read from the input stream  inStream. | |
| abstract Collection<? extends Certificate> | CertificateFactorySpi. engineGenerateCertificates(InputStream inStream)Returns a (possibly empty) collection view of the certificates read
 from the given input stream  inStream. | |
| CertPath | CertificateFactorySpi. engineGenerateCertPath(InputStream inStream)Generates a  CertPathobject and initializes it with
 the data read from theInputStreaminStream. | |
| CertPath | CertificateFactorySpi. engineGenerateCertPath(InputStream inStream,
                      String encoding)Generates a  CertPathobject and initializes it with
 the data read from theInputStreaminStream. | |
| CertPath | CertificateFactorySpi. engineGenerateCertPath(List<? extends Certificate> certificates)Generates a  CertPathobject and initializes it with
 aListofCertificates. | |
| Certificate | CertificateFactory. generateCertificate(InputStream inStream)Generates a certificate object and initializes it with
 the data read from the input stream  inStream. | |
| Collection<? extends Certificate> | CertificateFactory. generateCertificates(InputStream inStream)Returns a (possibly empty) collection view of the certificates read
 from the given input stream  inStream. | |
| CertPath | CertificateFactory. generateCertPath(InputStream inStream)Generates a  CertPathobject and initializes it with
 the data read from theInputStreaminStream. | |
| CertPath | CertificateFactory. generateCertPath(InputStream inStream,
                String encoding)Generates a  CertPathobject and initializes it with
 the data read from theInputStreaminStream. | |
| CertPath | CertificateFactory. generateCertPath(List<? extends Certificate> certificates)Generates a  CertPathobject and initializes it with
 aListofCertificates. | |
| static CertificateFactory | CertificateFactory. getInstance(String type)Returns a certificate factory object that implements the
 specified certificate type. | |
| static CertificateFactory | CertificateFactory. getInstance(String type,
           Provider provider)Returns a certificate factory object for the specified
 certificate type. | |
| static CertificateFactory | CertificateFactory. getInstance(String type,
           String provider)Returns a certificate factory object for the specified
 certificate type. | |
| abstract void | Certificate. verify(PublicKey key)Verifies that this certificate was signed using the
 private key that corresponds to the specified public key. | |
| void | X509Certificate. verify(PublicKey key,
      Provider sigProvider)Verifies that this certificate was signed using the
 private key that corresponds to the specified public key. | |
| void | Certificate. verify(PublicKey key,
      Provider sigProvider)Verifies that this certificate was signed using the
 private key that corresponds to the specified public key. | |
| abstract void | Certificate. verify(PublicKey key,
      String sigProvider)Verifies that this certificate was signed using the
 private key that corresponds to the specified public key. | 
| Modifier and Type | Method | Description | 
|---|---|---|
| void | X509TrustManager. checkClientTrusted(X509Certificate[] chain,
                  String authType)Given the partial or complete certificate chain provided by the
 peer, build a certificate path to a trusted root and return if
 it can be validated and is trusted for client SSL
 authentication based on the authentication type. | |
| abstract void | X509ExtendedTrustManager. checkClientTrusted(X509Certificate[] chain,
                  String authType,
                  Socket socket)Given the partial or complete certificate chain provided by the
 peer, build and validate the certificate path based on the
 authentication type and ssl parameters. | |
| abstract void | X509ExtendedTrustManager. checkClientTrusted(X509Certificate[] chain,
                  String authType,
                  SSLEngine engine)Given the partial or complete certificate chain provided by the
 peer, build and validate the certificate path based on the
 authentication type and ssl parameters. | |
| void | X509TrustManager. checkServerTrusted(X509Certificate[] chain,
                  String authType)Given the partial or complete certificate chain provided by the
 peer, build a certificate path to a trusted root and return if
 it can be validated and is trusted for server SSL
 authentication based on the authentication type. | |
| abstract void | X509ExtendedTrustManager. checkServerTrusted(X509Certificate[] chain,
                  String authType,
                  Socket socket)Given the partial or complete certificate chain provided by the
 peer, build and validate the certificate path based on the
 authentication type and ssl parameters. | |
| abstract void | X509ExtendedTrustManager. checkServerTrusted(X509Certificate[] chain,
                  String authType,
                  SSLEngine engine)Given the partial or complete certificate chain provided by the
 peer, build and validate the certificate path based on the
 authentication type and ssl parameters. | 
 Submit a bug or feature 
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
 Copyright © 1993, 2025, Oracle and/or its affiliates.  All rights reserved. Use is subject to license terms. Also see the documentation redistribution policy.