sun.security.x509

Class X509CRLEntryImpl

java.lang.Object

java.security.cert.X509CRLEntry

sun.security.x509.X509CRLEntryImpl

All Implemented Interfaces:

java.security.cert.X509Extension

public class X509CRLEntryImpl
extends java.security.cert.X509CRLEntry

Abstract class for a revoked certificate in a CRL. This class is for each entry in the revokedCertificates, so it deals with the inner SEQUENCE. The ASN.1 definition for this is:

 revokedCertificates    SEQUENCE OF SEQUENCE  {
     userCertificate    CertificateSerialNumber,
     revocationDate     ChoiceOfTime,
     crlEntryExtensions Extensions OPTIONAL
                        -- if present, must be v2
 }  OPTIONAL

 CertificateSerialNumber  ::=  INTEGER

 Extensions  ::=  SEQUENCE SIZE (1..MAX) OF Extension

 Extension  ::=  SEQUENCE  {
     extnId        OBJECT IDENTIFIER,
     critical      BOOLEAN DEFAULT FALSE,
     extnValue     OCTET STRING
                   -- contains a DER encoding of a value
                   -- of the type registered for use with
                   -- the extnId object identifier value
 }
 

Author:

Hemma Prafullchandra

Constructor Summary

Constructors

Constructor and Description
X509CRLEntryImpl(java.math.BigInteger num, java.util.Date date) Constructs a revoked certificate entry using the given serial number and revocation date.
X509CRLEntryImpl(java.math.BigInteger num, java.util.Date date, CRLExtensions crlEntryExts) Constructs a revoked certificate entry using the given serial number, revocation date and the entry extensions.
X509CRLEntryImpl(byte[] revokedCert) Unmarshals a revoked certificate from its encoded form.
X509CRLEntryImpl(DerValue derValue) Unmarshals a revoked certificate from its encoded form.

Method Summary

Methods

Modifier and Type	Method and Description
void	encode(DerOutputStream outStrm) Encodes the revoked certificate to an output stream.
javax.security.auth.x500.X500Principal	getCertificateIssuer()
java.util.Set<java.lang.String>	getCriticalExtensionOIDs() Gets a Set of the extension(s) marked CRITICAL in this X509CRLEntry.
byte[]	getEncoded() Returns the ASN.1 DER-encoded form of this CRL Entry, which corresponds to the inner SEQUENCE.
Extension	getExtension(ObjectIdentifier oid) get an extension
byte[]	getExtensionValue(java.lang.String oid) Gets the DER encoded OCTET string for the extension value (extnValue) identified by the passed in oid String.
java.util.Set<java.lang.String>	getNonCriticalExtensionOIDs() Gets a Set of the extension(s) marked NON-CRITICAL in this X509CRLEntry.
java.lang.Integer	getReasonCode() get Reason Code from CRL entry.
java.util.Date	getRevocationDate() Gets the revocation date from this X509CRLEntry, the revocationDate.
java.math.BigInteger	getSerialNumber() Gets the serial number from this X509CRLEntry, i.e.
boolean	hasExtensions() Returns true if this revoked certificate entry has extensions, otherwise false.
boolean	hasUnsupportedCriticalExtension() Return true if a critical extension is found that is not supported, otherwise return false.
static X509CRLEntryImpl	toImpl(java.security.cert.X509CRLEntry entry) Utility method to convert an arbitrary instance of X509CRLEntry to a X509CRLEntryImpl.
java.lang.String	toString() Returns a printable string of this revoked certificate.

Methods inherited from class java.security.cert.X509CRLEntry

equals, getRevocationReason, hashCode

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

X509CRLEntryImpl

public X509CRLEntryImpl(java.math.BigInteger num,
                java.util.Date date)

Constructs a revoked certificate entry using the given serial number and revocation date.

Parameters:

num - the serial number of the revoked certificate.

date - the Date on which revocation took place.

X509CRLEntryImpl

public X509CRLEntryImpl(java.math.BigInteger num,
                java.util.Date date,
                CRLExtensions crlEntryExts)

Constructs a revoked certificate entry using the given serial number, revocation date and the entry extensions.

Parameters:

num - the serial number of the revoked certificate.

date - the Date on which revocation took place.

crlEntryExts - the extensions for this entry.

X509CRLEntryImpl

public X509CRLEntryImpl(byte[] revokedCert)
                 throws java.security.cert.CRLException

Unmarshals a revoked certificate from its encoded form.

Parameters:

revokedCert - the encoded bytes.

Throws:

java.security.cert.CRLException - on parsing errors.

X509CRLEntryImpl

public X509CRLEntryImpl(DerValue derValue)
                 throws java.security.cert.CRLException

Unmarshals a revoked certificate from its encoded form.

Parameters:

derVal - the DER value containing the revoked certificate.

Throws:

java.security.cert.CRLException - on parsing errors.

Method Detail

hasExtensions

public boolean hasExtensions()

Returns true if this revoked certificate entry has extensions, otherwise false.

Specified by:

hasExtensions in class java.security.cert.X509CRLEntry

Returns:

true if this CRL entry has extensions, otherwise false.

encode

public void encode(DerOutputStream outStrm)
            throws java.security.cert.CRLException

Encodes the revoked certificate to an output stream.

Parameters:

outStrm - an output stream to which the encoded revoked certificate is written.

Throws:

java.security.cert.CRLException - on encoding errors.

getEncoded

public byte[] getEncoded()
                  throws java.security.cert.CRLException

Returns the ASN.1 DER-encoded form of this CRL Entry, which corresponds to the inner SEQUENCE.

Specified by:

getEncoded in class java.security.cert.X509CRLEntry

Throws:

java.security.cert.CRLException - if an encoding error occurs.

getCertificateIssuer

public javax.security.auth.x500.X500Principal getCertificateIssuer()

Overrides:

getCertificateIssuer in class java.security.cert.X509CRLEntry

getSerialNumber

public java.math.BigInteger getSerialNumber()

Gets the serial number from this X509CRLEntry, i.e. the userCertificate.

Specified by:

getSerialNumber in class java.security.cert.X509CRLEntry

Returns:

the serial number.

getRevocationDate

public java.util.Date getRevocationDate()

Gets the revocation date from this X509CRLEntry, the revocationDate.

Specified by:

getRevocationDate in class java.security.cert.X509CRLEntry

Returns:

the revocation date.

getReasonCode

public java.lang.Integer getReasonCode()
                                throws java.io.IOException

get Reason Code from CRL entry.

Throws:

java.io.IOException - on error

toString

public java.lang.String toString()

Returns a printable string of this revoked certificate.

Specified by:

toString in class java.security.cert.X509CRLEntry

Returns:

value of this revoked certificate in a printable form.

hasUnsupportedCriticalExtension

public boolean hasUnsupportedCriticalExtension()

Return true if a critical extension is found that is not supported, otherwise return false.

getCriticalExtensionOIDs

public java.util.Set<java.lang.String> getCriticalExtensionOIDs()

Gets a Set of the extension(s) marked CRITICAL in this X509CRLEntry. In the returned set, each extension is represented by its OID string.

Returns:

a set of the extension oid strings in the Object that are marked critical.

getNonCriticalExtensionOIDs

public java.util.Set<java.lang.String> getNonCriticalExtensionOIDs()

Gets a Set of the extension(s) marked NON-CRITICAL in this X509CRLEntry. In the returned set, each extension is represented by its OID string.

Returns:

a set of the extension oid strings in the Object that are marked critical.

getExtensionValue

public byte[] getExtensionValue(java.lang.String oid)

Gets the DER encoded OCTET string for the extension value (extnValue) identified by the passed in oid String. The oid string is represented by a set of positive whole number separated by ".", that means,
<positive whole number>.<positive whole number>.<positive whole number>.<...>

Parameters:

oid - the Object Identifier value for the extension.

Returns:

the DER encoded octet string of the extension value.

getExtension

public Extension getExtension(ObjectIdentifier oid)

get an extension

Parameters:

oid - ObjectIdentifier of extension desired

toImpl

public static X509CRLEntryImpl toImpl(java.security.cert.X509CRLEntry entry)
                               throws java.security.cert.CRLException

Utility method to convert an arbitrary instance of X509CRLEntry to a X509CRLEntryImpl. Does a cast if possible, otherwise reparses the encoding.

Throws:

java.security.cert.CRLException