sun.security.x509

Class InhibitAnyPolicyExtension

java.lang.Object

sun.security.x509.Extension

sun.security.x509.InhibitAnyPolicyExtension

All Implemented Interfaces:

CertAttrSet<java.lang.String>

public class InhibitAnyPolicyExtension
extends Extension
implements CertAttrSet<java.lang.String>

This class represents the Inhibit Any-Policy Extension.

The inhibit any-policy extension can be used in certificates issued to CAs. The inhibit any-policy indicates that the special any-policy OID, with the value {2 5 29 32 0}, is not considered an explicit match for other certificate policies. The value indicates the number of additional certificates that may appear in the path before any- policy is no longer permitted. For example, a value of one indicates that any-policy may be processed in certificates issued by the sub- ject of this certificate, but not in additional certificates in the path.

This extension MUST be critical.

The ASN.1 syntax for this extension is:

 id-ce-inhibitAnyPolicy OBJECT IDENTIFIER ::=  { id-ce 54 }

 InhibitAnyPolicy ::= SkipCerts

 SkipCerts ::= INTEGER (0..MAX)
 

Author:

Anne Anderson

See Also:

CertAttrSet, Extension

Field Summary

Fields

Modifier and Type	Field and Description
static ObjectIdentifier	AnyPolicy_Id Object identifier for "any-policy"
static java.lang.String	IDENT Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.
static java.lang.String	NAME Attribute names.
static java.lang.String	SKIP_CERTS

Fields inherited from class sun.security.x509.Extension

critical, extensionId, extensionValue

Constructor Summary

Constructors

Constructor and Description
InhibitAnyPolicyExtension(java.lang.Boolean critical, java.lang.Object value) Create the extension from the passed DER encoded value of the same.
InhibitAnyPolicyExtension(int skipCerts) Default constructor for this object.

Method Summary

Methods

Modifier and Type	Method and Description
void	delete(java.lang.String name) Delete the attribute value.
void	encode(java.io.OutputStream out) Encode this extension value to the output stream.
java.lang.Object	get(java.lang.String name) Get the attribute value.
java.util.Enumeration<java.lang.String>	getElements() Return an enumeration of names of attributes existing within this attribute.
java.lang.String	getName() Return the name of this attribute.
void	set(java.lang.String name, java.lang.Object obj) Set the attribute value.
java.lang.String	toString() Return user readable form of extension.

Methods inherited from class sun.security.x509.Extension

encode, equals, getExtensionId, getExtensionValue, hashCode, isCritical

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

IDENT

public static final java.lang.String IDENT

Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.

See Also:

Constant Field Values

AnyPolicy_Id

public static ObjectIdentifier AnyPolicy_Id

Object identifier for "any-policy"

NAME

public static final java.lang.String NAME

Attribute names.

See Also:

Constant Field Values

SKIP_CERTS

public static final java.lang.String SKIP_CERTS

See Also:

Constant Field Values

Constructor Detail

InhibitAnyPolicyExtension

public InhibitAnyPolicyExtension(int skipCerts)
                          throws java.io.IOException

Default constructor for this object.

Parameters:

skipCerts - specifies the depth of the certification path. Use value of -1 to request unlimited depth.

Throws:

java.io.IOException

InhibitAnyPolicyExtension

public InhibitAnyPolicyExtension(java.lang.Boolean critical,
                         java.lang.Object value)
                          throws java.io.IOException

Create the extension from the passed DER encoded value of the same.

Parameters:

critical - criticality flag to use. Must be true for this extension.

value - a byte array holding the DER-encoded extension value.

Throws:

java.lang.ClassCastException - if value is not an array of bytes

java.io.IOException - on error.

Method Detail

toString

public java.lang.String toString()

Return user readable form of extension.

Specified by:

toString in interface CertAttrSet<java.lang.String>

Overrides:

toString in class Extension

Returns:

value of this certificate attribute in printable form.

encode

public void encode(java.io.OutputStream out)
            throws java.io.IOException

Encode this extension value to the output stream.

Specified by:

encode in interface CertAttrSet<java.lang.String>

Parameters:

out - the DerOutputStream to encode the extension to.

Throws:

java.io.IOException - on other errors.

set

public void set(java.lang.String name,
       java.lang.Object obj)
         throws java.io.IOException

Set the attribute value.

Specified by:

set in interface CertAttrSet<java.lang.String>

Parameters:

name - name of attribute to set. Must be SKIP_CERTS.

obj - value to which attribute is to be set. Must be Integer type.

Throws:

java.io.IOException - on error

get

public java.lang.Object get(java.lang.String name)
                     throws java.io.IOException

Get the attribute value.

Specified by:

get in interface CertAttrSet<java.lang.String>

Parameters:

name - name of attribute to get. Must be SKIP_CERTS.

Throws:

java.io.IOException - on error

delete

public void delete(java.lang.String name)
            throws java.io.IOException

Delete the attribute value.

Specified by:

delete in interface CertAttrSet<java.lang.String>

Parameters:

name - name of attribute to delete. Must be SKIP_CERTS.

Throws:

java.io.IOException - on error. In this case, IOException will always be thrown, because the only attribute, SKIP_CERTS, is required.

getElements

public java.util.Enumeration<java.lang.String> getElements()

Return an enumeration of names of attributes existing within this attribute.

Specified by:

getElements in interface CertAttrSet<java.lang.String>

Returns:

an enumeration of the attribute names.

getName

public java.lang.String getName()

Return the name of this attribute.

Specified by:

getName in interface CertAttrSet<java.lang.String>

Returns:

the name of this CertAttrSet.