Java Doc for X500Name.java in  » 6.0-JDK-Modules » j2me » sun » security » x509 » Java Source Code / Java DocumentationJava Source Code and Java Documentation

X.500 names are used to identify entities, such as those which are identified by X.509 certificates. They are world-wide, hierarchical, and descriptive. Entities can be identified by attributes, and in some systems can be searched for according to those attributes.

The ASN.1 for this is:

 GeneralName ::= CHOICE {
 ....
 directoryName                   [4]     Name,
 ....
 Name ::= CHOICE {
 RDNSequence }
 RDNSequence ::= SEQUENCE OF RelativeDistinguishedName
 RelativeDistinguishedName ::=
 SET OF AttributeTypeAndValue
 AttributeTypeAndValue ::= SEQUENCE {
 type     AttributeType,
 value    AttributeValue }
 AttributeType ::= OBJECT IDENTIFIER
 AttributeValue ::= ANY DEFINED BY AttributeType
 ....
 DirectoryString ::= CHOICE {
 teletexString           TeletexString (SIZE (1..MAX)),
 printableString         PrintableString (SIZE (1..MAX)),
 universalString         UniversalString (SIZE (1..MAX)),
 utf8String              UTF8String (SIZE (1.. MAX)),
 bmpString               BMPString (SIZE (1..MAX)) }
 

This specification requires only a subset of the name comparison functionality specified in the X.500 series of specifications. The requirements for conforming implementations are as follows:

1. attribute values encoded in different types (e.g., PrintableString and BMPString) may be assumed to represent different strings;

2. attribute values in types other than PrintableString are case sensitive (this permits matching of attribute values as binary objects);

3. attribute values in PrintableString are not case sensitive (e.g., "Marianne Swanson" is the same as "MARIANNE SWANSON"); and

4. attribute values in PrintableString are compared after removing leading and trailing white space and converting internal substrings of one or more consecutive white space characters to a single space.

These name comparison rules permit a certificate user to validate certificates issued using languages or encodings unfamiliar to the certificate user.

In addition, implementations of this specification MAY use these comparison rules to process unfamiliar attribute types for name chaining. This allows implementations to process certificates with unfamiliar attributes in the issuer name.

Note that the comparison rules defined in the X.500 series of specifications indicate that the character sets used to encode data in distinguished names are irrelevant. The characters themselves are compared without regard to encoding. Implementations of the profile are permitted to use the comparison algorithm defined in the X.500 series. Such an implementation will recognize a superset of name matches recognized by the algorithm specified above.

Note that instances of this class are immutable.
author:
   David Brownell
author:
   Amit Kapoor
author:
   Hemma Prafullchandra
version:
   1.47
See Also:   GeneralName
See Also:   GeneralNames
See Also:   GeneralNameInterface

NOTE: The behaviour when any of these strings contain characters outside the ASCII range is unspecified in currently relevant standards.
Parameters:
  commonName - common name of a person, e.g.

NOTE: The behaviour when any of these strings contain characters outside the ASCII range is unspecified in currently relevant standards.
Parameters:
  commonName - common name of a person, e.g.

• NAME_DIFF_TYPE = -1: input name is different type from this name (i.e.

NOTE: The behaviour when any of these strings contain characters outside the ASCII range is unspecified in currently relevant standards.
Parameters:
  commonName - common name of a person, e.g. "Vivette Davis"
Parameters:
  organizationUnit - small organization name, e.g. "Purchasing"
Parameters:
  organizationName - large organization name, e.g. "Onizuka, Inc."
Parameters:
  country - two letter country code, e.g. "CH"

NOTE: The behaviour when any of these strings contain characters outside the ASCII range is unspecified in currently relevant standards.
Parameters:
  commonName - common name of a person, e.g. "Vivette Davis"
Parameters:
  organizationUnit - small organization name, e.g. "Purchasing"
Parameters:
  organizationName - large organization name, e.g. "Onizuka, Inc."
Parameters:
  localityName - locality (city) name, e.g. "Palo Alto"
Parameters:
  stateName - state name, e.g. "California"
Parameters:
  country - two letter country code, e.g. "CH"

• NAME_DIFF_TYPE = -1: input name is different type from this name (i.e. does not constrain)
• NAME_MATCH = 0: input name matches this name
• NAME_NARROWS = 1: input name narrows this name
• NAME_WIDENS = 2: input name widens this name
• NAME_SAME_TYPE = 3: input name does not match or narrow this name, & but is same type