| java.lang.Object org.apache.harmony.security.x509.TBSCertList
TBSCertList | public class TBSCertList (Code) | | The class encapsulates the ASN.1 DER encoding/decoding work
with TBSCertList structure which is the part of X.509 CRL
(as specified in RFC 3280 -
Internet X.509 Public Key Infrastructure.
Certificate and Certificate Revocation List (CRL) Profile.
http://www.ietf.org/rfc/rfc3280.txt):
TBSCertList ::= SEQUENCE {
version Version OPTIONAL,
-- if present, MUST be v2
signature AlgorithmIdentifier,
issuer Name,
thisUpdate Time,
nextUpdate Time OPTIONAL,
revokedCertificates SEQUENCE OF SEQUENCE {
userCertificate CertificateSerialNumber,
revocationDate Time,
crlEntryExtensions Extensions OPTIONAL
-- if present, MUST be v2
} OPTIONAL,
crlExtensions [0] EXPLICIT Extensions OPTIONAL
-- if present, MUST be v2
}
|
Inner Class :public static class RevokedCertificate | |
Field Summary | |
final public static ASN1Sequence | ASN1 X.509 TBSCertList encoder/decoder. |
TBSCertList | public TBSCertList(AlgorithmIdentifier signature, Name issuer, Date thisUpdate)(Code) | | Constructs the instance of TBSCertList without optional fields.
Take a note, that regarding to the rfc 3280 (p. 49):
"When CRLs are issued, the CRLs MUST be version 2 CRLs, include the date
by which the next CRL will be issued in the nextUpdate field (section
5.1.2.5), include the CRL number extension (section 5.2.3), and include
the authority key identifier extension (section 5.2.1). Conforming
applications that support CRLs are REQUIRED to process both version 1 and
version 2 complete CRLs that provide revocation information for all
certificates issued by one CA. Conforming applications are NOT REQUIRED
to support processing of delta CRLs, indirect CRLs, or CRLs with a scope
other than all certificates issued by one CA."
signature: AlgorithmIdentifier issuer: Name thisUpdate: Time |
TBSCertList | public TBSCertList(int version, AlgorithmIdentifier signature, Name issuer, Date thisUpdate, Date nextUpdate, List revokedCertificates, Extensions crlExtensions)(Code) | | Constructs the instance of TBSCertList with all optional fields
version: version of the CRL. Should be 1 or 2. Note that if the version of CRL is 1, then nextUpdate,crlExtensions fields of CRL and crlEntryExtensions fieldof CRL entry must not be presented in CRL.FIXME: do check for it. signature: AlgorithmIdentifier issuer: Name thisUpdate: Time nextUpdate: Time revokedCertificates: List crlExtensions: Extensions |
dumpValue | public void dumpValue(StringBuffer buffer)(Code) | | Places the string representation of extension value
into the StringBuffer object.
|
getCrlExtensions | public Extensions getCrlExtensions()(Code) | | Returns the value of crlExtensions field of the structure.
extensions |
getEncoded | public byte[] getEncoded()(Code) | | Returns ASN.1 encoded form of this X.509 TBSCertList value.
a byte array containing ASN.1 encode form. |
getIssuer | public Name getIssuer()(Code) | | Returns the value of issuer field of the structure.
issuer |
getNextUpdate | public Date getNextUpdate()(Code) | | Returns the value of nextUpdate field of the structure.
nextUpdate |
getRevokedCertificates | public List getRevokedCertificates()(Code) | | Returns the value of revokedCertificates field of the structure.
revokedCertificates |
getThisUpdate | public Date getThisUpdate()(Code) | | Returns the value of thisUpdate field of the structure.
thisUpdate |
getVersion | public int getVersion()(Code) | | Returns the value of version field of the structure.
version |
hashCode | public int hashCode()(Code) | | |
|
|