Returns an instance of this from a X509CRLSelector.
Parameters: selector - A X509CRLSelector instance. An instance of an X509CRLStoreSelector. exception: IllegalArgumentException - if selector is null or creationfails.
Returns if this selector must match CRLs with the delta CRL indicator
extension set. Defaults to false.
Returns true if only CRLs with the delta CRLindicator extension are selected.
isIssuingDistributionPointEnabled
public boolean isIssuingDistributionPointEnabled()(Code)
Returns if the issuing distribution point criteria should be applied.
Defaults to false.
You may also set the issuing distribution point criteria if not a missing
issuing distribution point should be assumed.
Returns if the issuing distribution point check is enabled.
Sets the attribute certificate being checked. This is not a criterion.
Rather, it is optional information that may help a
X509Store find
CRLs that would be relevant when checking revocation for the specified
attribute certificate. If null is specified, then no such
optional information is provided.
Parameters: attrCert - the X509AttributeCertificate being checked (ornull) See Also:X509CRLStoreSelector.getAttrCertificateChecking()
setCompleteCRLEnabled
public void setCompleteCRLEnabled(boolean completeCRLEnabled)(Code)
public void setIssuingDistributionPoint(byte[] issuingDistributionPoint)(Code)
Sets the issuing distribution point.
The issuing distribution point extension is a CRL extension which
identifies the scope and the distribution point of a CRL. The scope
contains among others information about revocation reasons contained in
the CRL. Delta CRLs and complete CRLs must have matching issuing
distribution points.
The byte array is cloned to protect against subsequent modifications.
public void setIssuingDistributionPointEnabled(boolean issuingDistributionPointEnabled)(Code)
Enables or disables the issuing distribution point check.
Parameters: issuingDistributionPointEnabled - true to enable theissuing distribution point check.
setMaxBaseCRLNumber
public void setMaxBaseCRLNumber(BigInteger maxBaseCRLNumber)(Code)
Sets the maximum base CRL number. Setting to null disables
this cheack.
This is only meaningful for delta CRLs. Complete CRLs must have a CRL
number which is greater or equal than the base number of the
corresponding CRL.
Parameters: maxBaseCRLNumber - The maximum base CRL number to set.
Methods inherited from java.security.cert.X509CRLSelector