public class IssuingDistributionPoint extends V3Extension
IssuingDistributionPoint Extension.
This CRL extension field identifies the CRL distribution point for this particular CRL, and indicates if the CRL is limited to revocations for end-entity certificates only, for CA-certificates only, or for a limited set of reasons only.
The IssuingDistributionPoint OID is "2.5.29.28".
The ASN.1 definition of the IssuingDistributionPoint extension is specified
as follows:
IssuingDistPointSyntax ::= SEQUENCE {
distributionPoint [0] DistributionPointName OPTIONAL,
onlyContainsUserCerts [1] BOOLEAN DEFAULT FALSE,
onlyContainsCACerts [2] BOOLEAN DEFAULT FALSE,
onlySomeReasons [3] ReasonFlags OPTIONAL,
indirectCRL [4] BOOLEAN DEFAULT FALSE }
The distributionPoint component contains the name of the distribution point in one or
more name forms. If this field is absent, the CRL shall contain entries for all revoked unexpired
certificates issued by the CRL issuer.
If onlyContainsUserCerts is true, the CRL only contains revocations for end-entity
certificates. If onlyContainsCACerts is true, the CRL only contains revocations for
CA-certificates.
If onlySomeReasons is present, the CRL only contains revocations for the identified
reason or reasons, otherwise the CRL contains revocations for all reasons.
If indirectCRL is true, then the CRL may contain revocation notifications from CAs
other than the issuer of the CRL.
This class provides several methods for setting and getting the component values of a
IssuingDistributionPoint extension object.
Copyright 1998 Entrust Technologies Limited.
V3Extension,
X509Certificate,
DistributionPointName| Modifier and Type | Field and Description |
|---|---|
static ObjectID |
oid
Deprecated.
|
critical| Constructor and Description |
|---|
IssuingDistributionPoint()
Deprecated.
Default constructor.
|
| Modifier and Type | Method and Description |
|---|---|
DistributionPointName |
getDistributionPoint()
Deprecated.
Returns the
distributionPoint value of this IssuingDistributionPoint
extension specifying the name of the distribution point in one or more name forms. |
boolean |
getIndirectCRL()
Deprecated.
Returns
true if this is an indirect CRL, false otherwise. |
ObjectID |
getObjectID()
Deprecated.
Returns the object ID of this
IssuingDistributionPoint extension |
boolean |
getOnlyContainsCACerts()
Deprecated.
Returns
true if the CRL contains only CA certificates, false
otherwise. |
boolean |
getOnlyContainsUserCerts()
Deprecated.
Returns
true if the CRL contains only end-entity certificates, false
otherwise. |
int |
getReasons()
Deprecated.
Returns the
onlySomeReasons value of this IssuingDistributionPoint
extension specifying the revocation reasons supported by this CRL. |
int |
hashCode()
Deprecated.
Returns a hashcode for this identity.
|
void |
init(ASN1Object point)
Deprecated.
Inits this
IssuingDistributionPoint implementation with an ASN1Object
representing the value of this extension. |
void |
setDistributionPoint(DistributionPointName dpn)
Deprecated.
Stores the
distributionPoint value in this IssuingDistributionPoint
extension. |
void |
setOnlyContainsCACerts(boolean onlyContainsCACerts)
Deprecated.
Sets the flag indicating that this CRL contains only CA certificates.
|
void |
setOnlyContainsUserCerts(boolean onlyContainsUserCerts)
Deprecated.
Sets the flag indicating that this CRL contains only end-entity certificates.
|
void |
setReasons(int onlySomeReasons)
Deprecated.
Sets the
onlySomeReasons value of this IssuingDistributionPoint
extension specifying the revocation reasons supported by this CRL. |
ASN1Object |
toASN1Object()
Deprecated.
Returns the value of this
IssuingDistributionPoint extension as an ASN1Object. |
java.lang.String |
toString()
Deprecated.
Returns a string that represents the contents of this
IssuingDistributionPoint extension. |
getName, isCritical, setCriticalpublic static final ObjectID oid
public IssuingDistributionPoint()
Generating a new IssuingDistributionPoint extension is not supported.
This class is provided for compatibility with existing CRLs only.
public ObjectID getObjectID()
IssuingDistributionPoint extensiongetObjectID in class V3Extensionpublic void init(ASN1Object point) throws X509ExtensionException
IssuingDistributionPoint implementation with an ASN1Object
representing the value of this extension.
The ASN1Object is the extensionValue from ASN.1 type "Extension" representing
the (optional) distributionPoint, onlyContainsUserCerts,
onlyContainsCACerts, (optional) onlySomeReasons, and
indirectCRL values of this extension.
init in class V3Extensionpoint - the extensionValue as an ASN1ObjectX509ExtensionException - if the extension could not be parsedpublic ASN1Object toASN1Object() throws X509ExtensionException
IssuingDistributionPoint extension as an ASN1Object.toASN1Object in class V3ExtensionX509ExtensionException - if there was an error while creating the ASN1Objectinit(iaik.asn1.ASN1Object)public void setDistributionPoint(DistributionPointName dpn)
distributionPoint value in this IssuingDistributionPoint
extension.dpn - the distributionPoint.public DistributionPointName getDistributionPoint()
distributionPoint value of this IssuingDistributionPoint
extension specifying the name of the distribution point in one or more name forms. If this
field is absent, the CRL shall contain entries for all revoked unexpired certificates issued
by the CRL issuer. In this case the method returns null.
The value of the distributionPoint is returned as a DistributionPointName
object. Please refer to the DistributionPointName documentation for structure details.distributionPoint value.public void setOnlyContainsUserCerts(boolean onlyContainsUserCerts)
onlyContainsUserCerts - true if the CRL contains only end-entity certificates, false otherwise.public boolean getOnlyContainsUserCerts()
true if the CRL contains only end-entity certificates, false
otherwise.true if the CRL contains only end-entity certificates, false otherwise.public void setOnlyContainsCACerts(boolean onlyContainsCACerts)
onlyContainsCACerts - true if the CRL contains only CA certificates, false otherwise.public boolean getOnlyContainsCACerts()
true if the CRL contains only CA certificates, false
otherwise.true if the CRL contains only CA certificates, false otherwise.public void setReasons(int onlySomeReasons)
onlySomeReasons value of this IssuingDistributionPoint
extension specifying the revocation reasons supported by this CRL. If this field is not
present in the extension then the CRL must contain all revocations issued by the CA, regardless
of reason.onlySomeReasons - the reasons bitmask encoded as an intpublic int getReasons()
onlySomeReasons value of this IssuingDistributionPoint
extension specifying the revocation reasons supported by this CRL. If this field is not
present in the extension then the CRL must contain all revocations issued by the CA, regardless
of reason.
The onlySomeReasons is returned as an int. Individual bits must be
tested to determine which reasons are supported. A default value of -1 indicates
that all reasons are supported.
onlySomeReasons value.public boolean getIndirectCRL()
true if this is an indirect CRL, false otherwise.true if this is an indirect CRL, false otherwise.public int hashCode()
hashCode in class V3Extensionpublic java.lang.String toString()
IssuingDistributionPoint extension.toString in class java.lang.Object