java.lang.Object | ||
↳ | sun.security.x509.Extension | |
↳ | sun.security.x509.IssuingDistributionPointExtension |
Represents the CRL Issuing Distribution Point Extension (OID = 2.5.29.28).
The issuing distribution point is a critical CRL extension that identifies the CRL distribution point and scope for a particular CRL, and it indicates whether the CRL covers revocation for end entity certificates only, CA certificates only, attribute certificates only, or a limited set of reason codes.
The extension is defined in Section 5.2.5 of Internet X.509 PKI Certific ate and Certificate Revocation List (CRL) Profile.
Its ASN.1 definition is as follows:
id-ce-issuingDistributionPoint OBJECT IDENTIFIER ::= { id-ce 28 } issuingDistributionPoint ::= SEQUENCE { distributionPoint [0] DistributionPointName OPTIONAL, onlyContainsUserCerts [1] BOOLEAN DEFAULT FALSE, onlyContainsCACerts [2] BOOLEAN DEFAULT FALSE, onlySomeReasons [3] ReasonFlags OPTIONAL, indirectCRL [4] BOOLEAN DEFAULT FALSE, onlyContainsAttributeCerts [5] BOOLEAN DEFAULT FALSE }
Constants | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
String | IDENT | Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type. | |||||||||
String | INDIRECT_CRL | ||||||||||
String | NAME | Attribute names. | |||||||||
String | ONLY_ATTRIBUTE_CERTS | ||||||||||
String | ONLY_CA_CERTS | ||||||||||
String | ONLY_USER_CERTS | ||||||||||
String | POINT | ||||||||||
String | REASONS |
[Expand]
Inherited Fields | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
![]() |
Public Constructors | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Creates a critical IssuingDistributionPointExtension.
| |||||||||||
Creates a critical IssuingDistributionPointExtension from its
DER-encoding.
|
Public Methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Deletes the attribute value.
| |||||||||||
Encodes the issuing distribution point extension and writes it to the
DerOutputStream.
| |||||||||||
Gets the attribute value.
| |||||||||||
Returns an enumeration of names of attributes existing within this
attribute.
| |||||||||||
Returns the name of this attribute.
| |||||||||||
Sets the attribute value.
| |||||||||||
Returns the extension as user readable string.
|
[Expand]
Inherited Methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
![]() | |||||||||||
![]() | |||||||||||
![]() |
Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.
Creates a critical IssuingDistributionPointExtension.
distributionPoint | the name of the distribution point, or null for none. |
---|---|
revocationReasons | the revocation reasons associated with the distribution point, or null for none. |
hasOnlyUserCerts | if true then scope of the CRL
includes only user certificates. |
hasOnlyCACerts | if true then scope of the CRL
includes only CA certificates. |
hasOnlyAttributeCerts | if true then scope of the CRL
includes only attribute certificates. |
isIndirectCRL | if true then the scope of the CRL
includes certificates issued by authorities other than the CRL
issuer. The responsible authority is indicated by a certificate
issuer CRL entry extension. |
IllegalArgumentException | if more than one of
hasOnlyUserCerts , hasOnlyCACerts ,
hasOnlyAttributeCerts is set to true . |
---|---|
IOException | on encoding error. |
Creates a critical IssuingDistributionPointExtension from its DER-encoding.
critical | true if the extension is to be treated as critical. |
---|---|
value | the DER-encoded value. It must be a byte[] . |
IOException | on decoding error. |
---|
Deletes the attribute value.
name | the name of the attribute to delete. |
---|
IOException |
---|
Encodes the issuing distribution point extension and writes it to the DerOutputStream.
out | the output stream. |
---|
IOException | on encoding error. |
---|
Returns an enumeration of names of attributes existing within this attribute.
Sets the attribute value.
name | the name of the attribute (e.g. "x509.info.key") |
---|---|
obj | the attribute object. |
IOException |
---|
Returns the extension as user readable string.