com.entrust.toolkit.x509.extensions

Class OldIssuingDistributionPoint

java.lang.Object

iaik.x509.V3Extension

com.entrust.toolkit.x509.extensions.OldIssuingDistributionPoint

public class OldIssuingDistributionPoint
extends V3Extension

This class implements the OldIssuingDistributionPoint Extension.

The OldIssuingDistributionPoint extension is obsolete, and has been replaced by the IssuingDistributionPoint extension. It is provided here for backward compatibility with older certificates only.

The OldIssuingDistributionPoint OID is "2.5.29.26".

The ASN.1 definition of the OldIssuingDistributionPoint extension is specified as follows:

 OldIssuingDistributionPoint ::= SEQUENCE {
     distributionPoint       [0] OldDistributionPointName OPTIONAL,
     onlyContainsUserCerts   [1] BOOLEAN DEFAULT FALSE,
     onlyContainsCACerts     [2] BOOLEAN DEFAULT FALSE,
     onlySomeReasons         [3] ReasonFlags OPTIONAL }
 

If the distributionPoint field is absent the CRL must contain all revocations issued by the CA (subject to the other constraints). Please refer to the OldDistributionPointName description for structure details

If the onlySomeReasons field is absent the CRL must contain all revocations regardless of reason. The reason codes are defined as follows:

 ReasonFlags ::= BIT STRING {
     unused (0),
     keyCompromise (1),
     caCompromise (2),
     affiliationChanged (3),
     superseded (4),
     cessationOfOperation (5),
     certificateHold (6) }
 

This class provides several methods for getting (but not setting) the component values of an OldIssuingDistributionPoint extension object.

See Also:

V3Extension, X509Certificate, IssuingDistributionPoint, OldDistributionPointName

Field Summary

Fields

Modifier and Type	Field and Description
static ObjectID	oid

Fields inherited from class iaik.x509.V3Extension

critical

Constructor Summary

Constructors

Constructor and Description
OldIssuingDistributionPoint() Default constructor.

Method Summary

Modifier and Type	Method and Description
OldDistributionPointName	getDistributionPoint() Returns the distributionPoint value of this OldIssuingDistributionPoint extension specifying the location where this CRL is expected to be found.
ObjectID	getObjectID() Returns the object ID of this OldIssuingDistributionPoint extension
boolean	getOnlyContainsCACerts() Returns true if the CRL holding this OldIssuingDistributionPoint extension contains only CA certificates.
boolean	getOnlyContainsUserCerts() Returns true if the CRL holding this OldIssuingDistributionPoint extension contains only end-entity certificates.
int	getReasons() Returns the onlySomeReasons value of this OldIssuingDistributionPoint extension specifying the revocation reasons supported by this CRL.
int	hashCode() Returns a hashcode for this identity.
void	init(ASN1Object point) Inits this OldIssuingDistributionPoint implementation with an ASN1Object representing the value of this extension.
ASN1Object	toASN1Object() Stub function to meet V3Extension criteria.
java.lang.String	toString() Returns a string that represents the contents of this OldIssuingDistributionPoint extension.

Methods inherited from class iaik.x509.V3Extension

getName, isCritical, setCritical

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

oid

public static final ObjectID oid

Constructor Detail

OldIssuingDistributionPoint

public OldIssuingDistributionPoint()

Default constructor.

The OldIssuingDistributionPoint extension is obsolete and has been replaced by the IssuingDistributionPoint extension in the current X.509 specification.

Generating a new OldIssuingDistributionPoint extension is not supported. This class is provided for backward compatibility with existing CRLs only.

Method Detail

getObjectID

public ObjectID getObjectID()

Returns the object ID of this OldIssuingDistributionPoint extension

Specified by:

getObjectID in class V3Extension

Returns:

the object ID

init

public void init(ASN1Object point)
          throws X509ExtensionException

Inits this OldIssuingDistributionPoint implementation with an ASN1Object representing the value of this extension.

The ASN1Object is the extensionValue from ASN.1 type "Extension" representing the (optional) distributionPoint, onlyContainsUserCerts, onlyContainsUserCerts, and the (optional) onlySomeReasons values of this extension.

Specified by:

init in class V3Extension

Parameters:

point - the extensionValue as an ASN1Object

Throws:

X509ExtensionException - if the extension could not be parsed

toASN1Object

public ASN1Object toASN1Object()

Stub function to meet V3Extension criteria. Returns null.

Specified by:

toASN1Object in class V3Extension

Returns:

the value of the extension as ASN1Object

getDistributionPoint

public OldDistributionPointName getDistributionPoint()

Returns the distributionPoint value of this OldIssuingDistributionPoint extension specifying the location where this CRL is expected to be found. If this field is not present in the extension then the CRL must contain all revocations issued by the CA, regardless of location.

The distributionPoint is returned as an OldDistributionPointName object. Please refer to the OldDistributionPointName description for structure details.

Returns:

the distributionPoint value.

getOnlyContainsUserCerts

public boolean getOnlyContainsUserCerts()

Returns true if the CRL holding this OldIssuingDistributionPoint extension contains only end-entity certificates.

Returns:

true if only end-entity certificates, false otherwise.

getOnlyContainsCACerts

public boolean getOnlyContainsCACerts()

Returns true if the CRL holding this OldIssuingDistributionPoint extension contains only CA certificates.

Returns:

true if only CA certificates, false otherwise.

getReasons

public int getReasons()

Returns the onlySomeReasons value of this OldIssuingDistributionPoint extension specifying the revocation reasons supported by this CRL. If this field is not present in the extension then the CRL must contain all revocations issued by the CA, regardless of reason.

The onlySomeReasons is returned as an int. Individual bits must be tested to determine which reasons are supported. A default value of -1 indicates that all reasons are supported.

Returns:

the onlySomeReasons value.

hashCode

public int hashCode()

Returns a hashcode for this identity.

Specified by:

hashCode in class V3Extension

Returns:

a hash code for this identity

toString

public java.lang.String toString()

Returns a string that represents the contents of this OldIssuingDistributionPoint extension.

Overrides:

toString in class java.lang.Object

Returns:

the string representation