Certificate Chain or Paths

Question

I want to validate a certificate chain. I decided to use CertPathValidator, the problem is that, I have root or trusted certificates in a collection as follows
          Collection CACert = cf.generateCertificates(is);
Now the PKIXParameters constructor takes these certificates as Set of TrustAnchors.
          PKIXParameters params = new PKIXParameters(set of TrucAnchors);
I don�t know how to convert the collection of certificates to a Set fo TrustAnchors. I can not used the other constructor of PKIXParameters, which takes the KeySotre cause I have all Root Certificates stored in a different format in my MHP application.
Can any one help me out�.

Answer 1

Hummm let me make sure I understand what your saying. It sounds as if you want
to find a portable way of using this particular class. A way that will work
regardless of what JCE provider is installed on the machine running your code?
If that is correct then unfortunately your SOL. The problem is that there is no
public code (interfaces or other) which are defined in the standard Java API
to define this type of class. As a result no matter what you try and do you are
going to have to hard code some class like the boucycastle class.
My recommendation to you would be to include the bouncycastle ASN package with
your code. They do not have to use the BouncyCastle JCE provider but the bouncy
castle code must be in their class path...
Of course you could write your own ASN/DER package and include that instead but
you'll probably find it easier to just include the BC code base in your
distribution. If that distribution is webstart or applet then maybe you trim it
down in size by just including the ASN package and classes that are required by it.