gnu.java.security.x509

Class X509CRL

Implemented Interfaces:
GnuPKIExtension, X509Extension

public class X509CRL
extends X509CRL
implements GnuPKIExtension

X.509 certificate revocation lists.

Constructor Summary

X509CRL(InputStream encoded)
Create a new X.509 CRL.

Method Summary

boolean
equals(Object o)
Compares this X509CRL to other.
Set<E>
getCriticalExtensionOIDs()
byte[]
getEncoded()
Gets the DER ASN.1 encoded format for this X.509 CRL.
Extension
getExtension(OID oid)
byte[]
getExtensionValue(String oid)
Collection<E>
getExtensions()
Principal
getIssuerDN()
Returns the issuer (issuer distinguished name) of the CRL.
X500Principal
getIssuerX500Principal()
Returns the X.500 distinguished name of this CRL's issuer.
Date
getNextUpdate()
Set<E>
getNonCriticalExtensionOIDs()
X509CRLEntry
getRevokedCertificate(BigInteger serialNo)
Gets the requeste dX509Entry for the specified certificate serial number.
Set<E>
getRevokedCertificates()
String
getSigAlgName()
Returns the signature algorithm used to sign the CRL.
String
getSigAlgOID()
Returns the OID for the signature algorithm used.
byte[]
getSigAlgParams()
Returns the AlgorithmParameters in the encoded form for the signature algorithm used.
byte[]
getSignature()
Returns the signature for the CRL.
byte[]
getTBSCertList()
Returns the DER ASN.1 encoded tbsCertList which is the basic information of the list and associated certificates in the encoded state.
Date
getThisUpdate()
Returns the thisUpdate date of the CRL.
int
getVersion()
Gets the version of this CRL.
boolean
hasUnsupportedCriticalExtension()
int
hashCode()
Returns a hash code for this X509CRL in its encoded form.
boolean
isRevoked(Certificate cert)
Determines whether or not the specified Certificate is revoked.
String
toString()
Returns a string representing the CRL.
void
verify(PublicKey key)
Verifies that this CRL was properly signed with the PublicKey that corresponds to its private key.
void
verify(PublicKey key, String provider)
Verifies that this CRL was properly signed with the PublicKey that corresponds to its private key and uses the signature engine provided by the provider.

Methods inherited from class java.security.cert.X509CRL

equals, extends X509CRLEntry> getRevokedCertificates, getEncoded, getIssuerDN, getIssuerX500Principal, getNextUpdate, getRevokedCertificate, getSigAlgName, getSigAlgOID, getSigAlgParams, getSignature, getTBSCertList, getThisUpdate, getVersion, hashCode, verify, verify

Methods inherited from class java.security.cert.CRL

getType, isRevoked, toString

Methods inherited from class java.lang.Object

clone, equals, extends Object> getClass, finalize, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

X509CRL

public X509CRL(InputStream encoded)
            throws CRLException,
                   IOException
Create a new X.509 CRL.
Parameters:
encoded - The DER encoded CRL.
Throws:
CRLException - If the input bytes are incorrect.
IOException - If the input bytes cannot be read.

Method Details

equals

public boolean equals(Object o)
Compares this X509CRL to other. It checks if the object if instanceOf X509CRL and then checks if the encoded form matches.
Overrides:
equals in interface X509CRL
Parameters:
Returns:
true if equal, false otherwise

getCriticalExtensionOIDs

public Set<E> getCriticalExtensionOIDs()
Specified by:
getCriticalExtensionOIDs in interface X509Extension

getEncoded

public byte[] getEncoded()
            throws CRLException
Gets the DER ASN.1 encoded format for this X.509 CRL.
Overrides:
getEncoded in interface X509CRL
Returns:
byte array containg encoded form
Throws:
CRLException - if an error occurs

getExtension

public Extension getExtension(OID oid)
Specified by:
getExtension in interface GnuPKIExtension

getExtensionValue

public byte[] getExtensionValue(String oid)
Specified by:
getExtensionValue in interface X509Extension

getExtensions

public Collection<E> getExtensions()
Specified by:
getExtensions in interface GnuPKIExtension

getIssuerDN

public Principal getIssuerDN()
Returns the issuer (issuer distinguished name) of the CRL. The issuer is the entity who signed and issued the Certificate Revocation List. The ASN.1 DER encoding is: issuer Name, Name ::= CHOICE { RDNSequence } RDNSequence ::= SEQUENCE OF RelativeDistinguishedName RelativeDistinguishedName ::= SET OF AttributeTypeAndValue AttributeTypeAndValue ::= SEQUENCE { type AttributeType, value AttributeValue } AttributeType ::= OBJECT IDENTIFIER AttributeValue ::= ANY DEFINED BY AttributeType DirectoryString ::= CHOICE { teletexString TeletexString (SIZE (1..MAX)), printableString PrintableString (SIZE (1..MAX)), universalString UniversalString (SIZE (1..MAX)), utf8String UTF8String (SIZE (1.. MAX)), bmpString BMPString (SIZE (1..MAX)) } Consult rfc2459 for more information.
Overrides:
getIssuerDN in interface X509CRL
Returns:
the issuer in the Principal class

getIssuerX500Principal

public X500Principal getIssuerX500Principal()
Returns the X.500 distinguished name of this CRL's issuer.
Overrides:
getIssuerX500Principal in interface X509CRL
Returns:
The issuer's X.500 distinguished name.
Since:
JDK 1.4

getNextUpdate

public Date getNextUpdate()
Overrides:
getNextUpdate in interface X509CRL

getNonCriticalExtensionOIDs

public Set<E> getNonCriticalExtensionOIDs()
Specified by:
getNonCriticalExtensionOIDs in interface X509Extension

getRevokedCertificate

public X509CRLEntry getRevokedCertificate(BigInteger serialNo)
Gets the requeste dX509Entry for the specified certificate serial number.
Overrides:
getRevokedCertificate in interface X509CRL
Returns:
a X509CRLEntry representing the X.509 CRL entry

getRevokedCertificates

public Set<E> getRevokedCertificates()

getSigAlgName

public String getSigAlgName()
Returns the signature algorithm used to sign the CRL. An examples is "SHA-1/DSA". The ASN.1 DER encoding is: signatureAlgorithm AlgorithmIdentifier, AlgorithmIdentifier ::= SEQUENCE { algorithm OBJECT IDENTIFIER, parameters ANY DEFINED BY algorithm OPTIONAL } Consult rfc2459 for more information. The algorithm name is determined from the OID.
Overrides:
getSigAlgName in interface X509CRL
Returns:
a string with the signature algorithm name

getSigAlgOID

public String getSigAlgOID()
Returns the OID for the signature algorithm used. Example "1.2.840.10040.4.3" is return for SHA-1 with DSA.\ The ASN.1 DER encoding for the example is: id-dsa-with-sha1 ID ::= { iso(1) member-body(2) us(840) x9-57 (10040) x9cm(4) 3 } Consult rfc2459 for more information.
Overrides:
getSigAlgOID in interface X509CRL
Returns:
a string containing the OID.

getSigAlgParams

public byte[] getSigAlgParams()
Returns the AlgorithmParameters in the encoded form for the signature algorithm used. If access to the parameters is need, create an instance of AlgorithmParameters.
Overrides:
getSigAlgParams in interface X509CRL
Returns:
byte array containing algorithm parameters, null if no parameters are present in CRL

getSignature

public byte[] getSignature()
Returns the signature for the CRL. The ASN.1 DER encoding is: signatureValue BIT STRING Consult rfc2459 for more information.
Overrides:
getSignature in interface X509CRL

getTBSCertList

public byte[] getTBSCertList()
            throws CRLException
Returns the DER ASN.1 encoded tbsCertList which is the basic information of the list and associated certificates in the encoded state. See top for more information. The ASN.1 DER encoding is: tbsCertList TBSCertList, Consult rfc2459 for more information.
Overrides:
getTBSCertList in interface X509CRL
Returns:
byte array representing tbsCertList

getThisUpdate

public Date getThisUpdate()
Returns the thisUpdate date of the CRL. The ASN.1 DER encoding is: thisUpdate Time, Time ::= CHOICE { utcTime UTCTime, generalTime GeneralizedTime } Consult rfc2459 for more information.
Overrides:
getThisUpdate in interface X509CRL
Returns:
the thisUpdate date

getVersion

public int getVersion()
Gets the version of this CRL. The ASN.1 encoding is: version Version OPTIONAL, -- if present, shall be v2 Version ::= INTEGER { v1(0), v2(1), v3(2) } Consult rfc2459 for more information.
Overrides:
getVersion in interface X509CRL
Returns:
the version number, Ex: 1 or 2

hasUnsupportedCriticalExtension

public boolean hasUnsupportedCriticalExtension()
Specified by:
hasUnsupportedCriticalExtension in interface X509Extension

hashCode

public int hashCode()
Returns a hash code for this X509CRL in its encoded form.
Overrides:
hashCode in interface X509CRL
Returns:
A hash code of this class

isRevoked

public boolean isRevoked(Certificate cert)
Determines whether or not the specified Certificate is revoked.
Overrides:
isRevoked in interface CRL
Parameters:
cert - A certificate to check if it is revoked
Returns:
true if the certificate is revoked, false otherwise.

toString

public String toString()
Returns a string representing the CRL.
Overrides:
toString in interface CRL
Returns:
a string representing the CRL.

verify

public void verify(PublicKey key)
            throws CRLException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException
Verifies that this CRL was properly signed with the PublicKey that corresponds to its private key.
Overrides:
verify in interface X509CRL
Parameters:
key - PublicKey to verify with
Throws:
CRLException - encoding error
NoSuchAlgorithmException - unsupported algorithm
InvalidKeyException - incorrect key
NoSuchProviderException - no provider
SignatureException - signature error

verify

public void verify(PublicKey key,
                   String provider)
            throws CRLException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException
Verifies that this CRL was properly signed with the PublicKey that corresponds to its private key and uses the signature engine provided by the provider.
Overrides:
verify in interface X509CRL
Parameters:
key - PublicKey to verify with
Throws:
CRLException - encoding error
NoSuchAlgorithmException - unsupported algorithm
InvalidKeyException - incorrect key
NoSuchProviderException - incorrect provider
SignatureException - signature error

X509CRL.java -- X.509 certificate revocation list. Copyright (C) 2003, 2004 Free Software Foundation, Inc. This file is part of GNU Classpath. GNU Classpath is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version. GNU Classpath is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with GNU Classpath; see the file COPYING. If not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. Linking this library statically or dynamically with other modules is making a combined work based on this library. Thus, the terms and conditions of the GNU General Public License cover the whole combination. As a special exception, the copyright holders of this library give you permission to link this library with independent modules to produce an executable, regardless of the license terms of these independent modules, and to copy and distribute the resulting executable under terms of your choice, provided that you also meet, for each linked independent module, the terms and conditions of the license of that module. An independent module is a module which is not derived from or based on this library. If you modify this library, you may extend this exception to your version of the library, but you are not obligated to do so. If you do not wish to do so, delete this exception statement from your version.