src/share/classes/sun/security/provider/certpath/PKIX.java

*** 1,7 ****
  /*
!  * Copyright (c) 2012, 2015, Oracle and/or its affiliates. All rights reserved.
   * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   *
   * This code is free software; you can redistribute it and/or modify it
   * under the terms of the GNU General Public License version 2 only, as
   * published by the Free Software Foundation.  Oracle designates this
--- 1,7 ----
  /*
!  * Copyright (c) 2012, 2017, Oracle and/or its affiliates. All rights reserved.
   * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   *
   * This code is free software; you can redistribute it and/or modify it
   * under the terms of the GNU General Public License version 2 only, as
   * published by the Free Software Foundation.  Oracle designates this
*** 24,33 ****
--- 24,34 ----
   */
  package sun.security.provider.certpath;
  
  import java.security.InvalidAlgorithmParameterException;
  import java.security.PublicKey;
+ import java.security.Timestamp;
  import java.security.cert.*;
  import java.security.interfaces.DSAPublicKey;
  import java.util.*;
  import javax.security.auth.x500.X500Principal;
  
*** 83,92 ****
--- 84,95 ----
          private Set<String> policies;
          private boolean gotConstraints;
          private CertSelector constraints;
          private Set<TrustAnchor> anchors;
          private List<X509Certificate> certs;
+         private Timestamp timestamp;
+         private String variant;
  
          ValidatorParams(CertPath cp, PKIXParameters params)
              throws InvalidAlgorithmParameterException
          {
              this(params);
*** 98,107 ****
--- 101,115 ----
          }
  
          ValidatorParams(PKIXParameters params)
              throws InvalidAlgorithmParameterException
          {
+             if (params instanceof PKIXExtendedParameters) {
+                 timestamp = ((PKIXExtendedParameters) params).getTimestamp();
+                 variant = ((PKIXExtendedParameters) params).getVariant();
+             }
+ 
              this.anchors = params.getTrustAnchors();
              // Make sure that none of the trust anchors include name constraints
              // (not supported).
              for (TrustAnchor anchor : this.anchors) {
                  if (anchor.getNameConstraints() != null) {
*** 187,196 ****
--- 195,212 ----
          // in rare cases we need access to the original params, for example
          // in order to clone CertPathCheckers before building a new chain
          PKIXParameters getPKIXParameters() {
              return params;
          }
+ 
+         Timestamp timestamp() {
+             return timestamp;
+         }
+ 
+         String variant() {
+             return variant;
+         }
      }
  
      static class BuilderParams extends ValidatorParams {
          private PKIXBuilderParameters params;
          private List<CertStore> stores;