com.entrust.toolkit.x509.policies

Class EntrustPolicyCertificate

java.lang.Object

com.entrust.toolkit.x509.policies.PolicyCertificate

com.entrust.toolkit.x509.policies.EntrustPolicyCertificate

All Implemented Interfaces:

ASN1Type

public final class EntrustPolicyCertificate
extends PolicyCertificate

This class represents a policy certificate, specified by the following: -- AttributeCertificate ::= SIGNED {AttributeCertificateInfo} AttributeCertificate ::= SEQUENCE { unsignedAttributeCertificate AttributeCertificateInfo, algorithm AlgorithmIdentifier, signature BIT STRING } AttributeCertificateInfo ::= SEQUENCE { version AttCertVersion DEFAULT v1, owner Owner, issuer AttCertIssuer, signature AlgorithmIdentifier, serialNumber CertificateSerialNumber, attrCertValidityPeriod AttCertValidityPeriod, attributes SEQUENCE OF Attribute, issuerUniqueID UniqueIdentifier OPTIONAL, extensions Extensions OPTIONAL } AttCertVersion ::= INTEGER {v1(0), v2(1)} Owner ::= SEQUENCE { baseCertificateID [0] IssuerSerial OPTIONAL, -- the issuer and serial number of the owner's Public Key Certificate entityName [1] GeneralNames OPTIONAL, -- the name of the claimant or role objectDigestInfo [2] ObjectDigestInfo OPTIONAL -- if present, version must by v2 } ObjectDigestInfo ::= SEQUENCE { digestAlgorithm AlgorithmIdentifier, objectDigest OCTET STRING } AttCertIssuer ::= SEQUENCE { issuerName GeneralNames OPTIONAL, baseCertificateId [0] IssuerSerial OPTIONAL } IssuerSerial ::= SEQUENCE { issuer GeneralNames, serial CertificateSerialNumber, issuerUID UniqueIdentifier OPTIONAL } AttCertValidityPeriod ::= SEQUENCE { notBeforeTime GeneralizedTime, notAfterTime GeneralizedTime }

See Also:

AttributeCertificate, PolicyCertificate, ClientSettings

Constructor Summary

Constructors

Constructor and Description
EntrustPolicyCertificate(ASN1Object obj) Creates a EntrustPolicyCertificate from an ASN1 structure.
EntrustPolicyCertificate(byte[] array) Creates a EntrustPolicyCertificate from a DER byte array.

Method Summary

Modifier and Type	Method and Description
void	decode(ASN1Object asn) Decode an EntrustPolicyCertificate from an ASN1Object.
byte[]	getEncoded() Returns this certificate as as a DER encoded byte array.
X509Extensions	getExtensions() Returns the certificate extensions, if any
Name	getIssuerDN() Returns the issuer DN.
java.util.Date	getNotAfter() Returns the notAfter date of this certificate.
java.util.Date	getNotBefore() Returns the notBefore date of this certificate.
Name	getOwnerDN() Returns the owner DN.
byte[]	getSignature() Returns the signature on this policy certificate.
AlgorithmID	getSignatureAlgorithm() Returns the signature algorithm of this certificate.
byte[]	getSigned() Return the part of the policy certificate over which the the signature is applied.
ASN1Object	toASN1Object() Returns the certificate as an ASN1Object.
java.lang.String	toString() Returns the certificate as an String.

Methods inherited from class com.entrust.toolkit.x509.policies.PolicyCertificate

getAttribute

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

EntrustPolicyCertificate

public EntrustPolicyCertificate(byte[] array)
                         throws java.security.cert.CertificateException

Creates a EntrustPolicyCertificate from a DER byte array.

Parameters:

array - the byte array containing the DER encoded EntrustPolicyCertificate

Throws:

java.security.cert.CertificateException - if the format of the cert is wrong

EntrustPolicyCertificate

public EntrustPolicyCertificate(ASN1Object obj)
                         throws CodingException

Creates a EntrustPolicyCertificate from an ASN1 structure.

Parameters:

obj - the ASN1 structure that represents the certificate

Throws:

CodingException - thrown if the ANS1 structrue is incorrect

Method Detail

getEncoded

public byte[] getEncoded()

Returns this certificate as as a DER encoded byte array.

Returns:

a byte array holding the DER encoded policy certificate

decode

public void decode(ASN1Object asn)
            throws CodingException

Decode an EntrustPolicyCertificate from an ASN1Object.

Parameters:

asn - the ASN.1 type as ASN1Object

Throws:

CodingException - if there is an error parsing the EntrustPolicyCertificate

getIssuerDN

public Name getIssuerDN()

Returns the issuer DN.

Returns:

the issuer name as a Name

getOwnerDN

public Name getOwnerDN()

Returns the owner DN.

Returns:

the owner name as a Name

getNotBefore

public java.util.Date getNotBefore()

Returns the notBefore date of this certificate.

Returns:

the date on which this certificate becomes valid.

getNotAfter

public java.util.Date getNotAfter()

Returns the notAfter date of this certificate. The notAfter value denotes the date on which the certificate ceases to be valid.

Returns:

the date on which the certificate expires.

getExtensions

public X509Extensions getExtensions()

Returns the certificate extensions, if any

toASN1Object

public ASN1Object toASN1Object()

Returns the certificate as an ASN1Object.

Returns:

the certificate as ASN1Object

toString

public java.lang.String toString()

Returns the certificate as an String.

Overrides:

toString in class java.lang.Object

Returns:

the certificate as ASN1Object

getSigned

public byte[] getSigned()

Return the part of the policy certificate over which the the signature is applied. For an EntrustPolicyCertificate, this is the attributeCertificateInfo component.

getSignatureAlgorithm

public AlgorithmID getSignatureAlgorithm()

Returns the signature algorithm of this certificate.

Returns:

the AlgorithmID of the signature algorithm used for signing this certificate

See Also:

AlgorithmID

getSignature

public byte[] getSignature()

Returns the signature on this policy certificate.

Returns:

the signature on this policy certificate