iaik.x509.attr

Interface AttCertIssuer

All Known Implementing Classes:

V1Form, V2Form

public interface AttCertIssuer

Represents an attribute certificate issuer.

The Internet Attribute Certificate Profile for Authorization specifies the AttCertIssuer for identifying the issuer of an attribute certificate (entity who signs the attribute certificate):

 AttCertIssuer ::= CHOICE {
    v1Form   GeneralNames,  -- v1 or v2
    v2Form   [0] V2Form     -- v2 only
 }
 

Attribute certifcates conforming to the Internet Attribute Certificate Profile for Authorization presented in draft-ietf-pkix-ac509prof-06.txt are not allowed to use the V2Form choice for representing the issuer:

 V2Form ::= SEQUENCE {
   issuerName            GeneralNames  OPTIONAL,
   baseCertificateID     [0] IssuerSerial  OPTIONAL,
   objectDigestInfo      [1] ObjectDigestInfo  OPTIONAL
           -- at least one of issuerName, baseCertificateID
           -- or objectDigestInfo MUST be present
 }
 

They must use the V1Form choice, which must contain one and only one GeneralName, which must contain a non-empty distinguished name in the directoryName field. This means that all AC issuers must have non-empty distinguished names:
Part of the reason for the use of the v1Form field is that it means that the AC issuer does not have to know which PKC the AC verifier will use for it (the AC issuer). Using the baseCertificateID field to reference the AC issuer would mean that the AC verifier would have to trust the PKC that the AC issuer chose (for itself) at AC creation time.

Use class GeneralNames for creating a V1Form attCertIssuer holding a directoryName to be set as the issuer of an AttributeCertificate:

 Name issuerName = ...;
 V1Form v1Form = new V1Form(issuerName);
 attributeCertificate.setIssuer(v1Form);
 

See Also:

AttributeCertificate, V1Form, V2Form

Field Summary

Fields

Modifier and Type	Field and Description
static int	V1_FORM Attribute certificate issuer representation v1Form (1).
static int	V2_FORM Attribute certificate issuer representation v2Form (2).

Method Summary

Methods

Modifier and Type	Method and Description
void	decode(ASN1Object obj) Decodes an AttCertIssuer from its ASN.1 representasion.
boolean	equals(java.lang.Object obj) Compares this AttCertIssuer to the specified object.
int	getVForm() Returns the version this AttCertIssuer represents -- either v1Form (1) or v2Form (2).
int	hashCode() Returns a hashcode for this AttCertIssuer.
ASN1Object	toASN1Object() Returns this AttCertIssuer as ASN1Object.
java.lang.String	toString() Returns a string giving some information about this AttCertIssuer object.

Field Detail

V1_FORM

static final int V1_FORM

Attribute certificate issuer representation v1Form (1). If this is a v1Form AttCertIssuer, it has to be represented as GeneralNames.

See Also:

Constant Field Values

V2_FORM

static final int V2_FORM

Attribute certificate issuer representation v2Form (2). If this is a v2Form AttCertIssuer, it has to be represented as V2Form. Attribute certificates conforming to the Internet Attribute Certificate Profile for Authorization presented in draft-ietf-pkix-ac509prof-06.txt are not allowed to use the V2Form choice for representing the issuer.

See Also:

Constant Field Values

Method Detail

getVForm

int getVForm()

Returns the version this AttCertIssuer represents -- either v1Form (1) or v2Form (2).

equals

boolean equals(java.lang.Object obj)

Compares this AttCertIssuer to the specified object.

Overrides:

equals in class java.lang.Object

Parameters:

obj - the object to compare this AttCertIssuer against.

Returns:

true, if the given object is equal to this AttCertIssuer, AttCertIssuer otherwise

hashCode

int hashCode()

Returns a hashcode for this AttCertIssuer.

Overrides:

hashCode in class java.lang.Object

Returns:

a hashcode for this AttCertIssuer

decode

void decode(ASN1Object obj)
            throws CodingException

Decodes an AttCertIssuer from its ASN.1 representasion.

Parameters:

obj - the AttCertIssuer as ASN1Object

Throws:

CodingException

toASN1Object

ASN1Object toASN1Object()

Returns this AttCertIssuer as ASN1Object.

Returns:

this AttCertIssuer as ASN1Object

toString

java.lang.String toString()

Returns a string giving some information about this AttCertIssuer object.

Overrides:

toString in class java.lang.Object

Returns:

the string representation