public class IssuingDistributionPointExtension extends Extension implements CertAttrSet<java.lang.String>
The issuing distribution point is a critical CRL extension that identifies the CRL distribution point and scope for a particular CRL, and it indicates whether the CRL covers revocation for end entity certificates only, CA certificates only, attribute certificates only, or a limited set of reason codes.
The extension is defined in Section 5.2.5 of Internet X.509 PKI Certific ate and Certificate Revocation List (CRL) Profile.
Its ASN.1 definition is as follows:
id-ce-issuingDistributionPoint OBJECT IDENTIFIER ::= { id-ce 28 }
issuingDistributionPoint ::= SEQUENCE {
distributionPoint [0] DistributionPointName OPTIONAL,
onlyContainsUserCerts [1] BOOLEAN DEFAULT FALSE,
onlyContainsCACerts [2] BOOLEAN DEFAULT FALSE,
onlySomeReasons [3] ReasonFlags OPTIONAL,
indirectCRL [4] BOOLEAN DEFAULT FALSE,
onlyContainsAttributeCerts [5] BOOLEAN DEFAULT FALSE }
DistributionPoint| Modifier and Type | Field and Description |
|---|---|
static java.lang.String |
IDENT
Identifier for this attribute, to be used with the
get, set, delete methods of Certificate, x509 type.
|
static java.lang.String |
INDIRECT_CRL |
static java.lang.String |
NAME
Attribute names.
|
static java.lang.String |
ONLY_ATTRIBUTE_CERTS |
static java.lang.String |
ONLY_CA_CERTS |
static java.lang.String |
ONLY_USER_CERTS |
static java.lang.String |
POINT |
static java.lang.String |
REASONS |
critical, extensionId, extensionValue| Constructor and Description |
|---|
IssuingDistributionPointExtension(java.lang.Boolean critical,
java.lang.Object value)
Creates a critical IssuingDistributionPointExtension from its
DER-encoding.
|
IssuingDistributionPointExtension(DistributionPointName distributionPoint,
ReasonFlags revocationReasons,
boolean hasOnlyUserCerts,
boolean hasOnlyCACerts,
boolean hasOnlyAttributeCerts,
boolean isIndirectCRL)
Creates a critical IssuingDistributionPointExtension.
|
| Modifier and Type | Method and Description |
|---|---|
void |
delete(java.lang.String name)
Deletes the attribute value.
|
void |
encode(java.io.OutputStream out)
Encodes the issuing distribution point extension and writes it to the
DerOutputStream.
|
java.lang.Object |
get(java.lang.String name)
Gets the attribute value.
|
java.util.Enumeration<java.lang.String> |
getElements()
Returns an enumeration of names of attributes existing within this
attribute.
|
java.lang.String |
getName()
Returns the name of this attribute.
|
void |
set(java.lang.String name,
java.lang.Object obj)
Sets the attribute value.
|
java.lang.String |
toString()
Returns the extension as user readable string.
|
encode, equals, getExtensionId, getExtensionValue, hashCode, isCriticalpublic static final java.lang.String IDENT
public static final java.lang.String NAME
public static final java.lang.String POINT
public static final java.lang.String REASONS
public static final java.lang.String ONLY_USER_CERTS
public static final java.lang.String ONLY_CA_CERTS
public static final java.lang.String ONLY_ATTRIBUTE_CERTS
public static final java.lang.String INDIRECT_CRL
public IssuingDistributionPointExtension(DistributionPointName distributionPoint, ReasonFlags revocationReasons, boolean hasOnlyUserCerts, boolean hasOnlyCACerts, boolean hasOnlyAttributeCerts, boolean isIndirectCRL) throws java.io.IOException
distributionPoint - the name of the distribution point, or null for
none.revocationReasons - the revocation reasons associated with the
distribution point, or null for none.hasOnlyUserCerts - if true then scope of the CRL
includes only user certificates.hasOnlyCACerts - if true then scope of the CRL
includes only CA certificates.hasOnlyAttributeCerts - if true then scope of the CRL
includes only attribute certificates.isIndirectCRL - if true then the scope of the CRL
includes certificates issued by authorities other than the CRL
issuer. The responsible authority is indicated by a certificate
issuer CRL entry extension.java.lang.IllegalArgumentException - if more than one of
hasOnlyUserCerts, hasOnlyCACerts,
hasOnlyAttributeCerts is set to true.java.io.IOException - on encoding error.public IssuingDistributionPointExtension(java.lang.Boolean critical,
java.lang.Object value)
throws java.io.IOException
critical - true if the extension is to be treated as critical.value - the DER-encoded value. It must be a byte[].java.io.IOException - on decoding error.public java.lang.String getName()
getName in interface CertAttrSet<java.lang.String>public void encode(java.io.OutputStream out)
throws java.io.IOException
encode in interface CertAttrSet<java.lang.String>out - the output stream.java.io.IOException - on encoding error.public void set(java.lang.String name,
java.lang.Object obj)
throws java.io.IOException
set in interface CertAttrSet<java.lang.String>name - the name of the attribute (e.g. "x509.info.key")obj - the attribute object.java.io.IOException - on other errors.public java.lang.Object get(java.lang.String name)
throws java.io.IOException
get in interface CertAttrSet<java.lang.String>name - the name of the attribute to return.java.io.IOException - on other errors.public void delete(java.lang.String name)
throws java.io.IOException
delete in interface CertAttrSet<java.lang.String>name - the name of the attribute to delete.java.io.IOException - on other errors.public java.util.Enumeration<java.lang.String> getElements()
getElements in interface CertAttrSet<java.lang.String>public java.lang.String toString()
toString in interface CertAttrSet<java.lang.String>toString in class ExtensionCopyright © 2020. All Rights Reserved.