How to Build Certificate path /chain.....

Question

Hi
Here I am using generateCertPath..... Please advice....
X509Certificate certpath = null;
CertificateFactory cf= CertificateFactory.getInstance("X.509",provBC);
CertPath certPath = cf.generateCertPath( fileinputstream, "PKCS7");
     CertPathValidator cpv = null;
try {
          cpv = CertPathValidator.getInstance("PKIX", "BC");
     } catch (NoSuchAlgorithmException nsae) {
     out.println("NoSuchAlgorithmException"+nsae);
     //TrustAnchor trustAnchors = new TrustAnchor("O=xyz,C=us", pubkey, null);
//     TrustAnchor trustAnchors = new TrustAnchor(x509certificate, null);
     X509CertSelector targetConstraints = new X509CertSelector();
PKIXBuilderParameters params = new PKIXBuilderParameters(trustAnchors, targetConstraints);
// params.setInitialPolicies(policyIds);
//Validate the certificate path using the input parameters set we have created.
try {
CertPathValidatorResult cpvResult = cpv.validate(certPath, params);
} catch (InvalidAlgorithmParameterException iape) {
     out.println("validation failed: " + iape);
} catch (CertPathValidatorException cpve) {
     out.println("validation failed: " + cpve);
     out.println("index of certificate that caused exception:" + cpve.getIndex());
It give me error....
[javac] /var/ian/pdgm/tomcat/work/Standalone/localhost/pdgm/x509mgmt/newWin_jsp.java:159: cannot resolve symbol
[javac] symbol : variable trustAnchors
[javac] location: class org.apache.jsp.newWin_jsp
[javac] PKIXBuilderParameters params = new PKIXBuilderParameters(trustAnchors, targetConstraints);
[javac] ^
[javac] Note: /var/ian/pdgm/tomcat/work/Standalone/localhost/pdgm/x509mgmt/newWin_jsp.java uses or overrides a deprecated API.
[javac] Note: Recompile with -deprecation for details.
[javac] 1 error
Best Regards,
San

Answer 1

Hi ,
Thanks for the reply. Even I remove the 2 comment it does not work and if I remove the 1 comment , it gives me pubkey errors. I try to initialize with PublicKey pubkey but it won't work.
If you can tell me how to initialize TrustAnchors it would be a great help. I am parsing the whole certificate in my JSP file and now I want to build the certificate path. Hope u have seen the code in my previous posting.
The code gives me an exception as TrustAnchors not initialized. Please help..
Warm Regards,.
San
1 .//TrustAnchor trustAnchors = new TrustAnchor("O=xyz,C=us", pubkey, null);
2. // TrustAnchor trustAnchors = new TrustAnchor(x509certificate, null);