|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectjava.security.cert.CRL
java.security.cert.X509CRL
public abstract class X509CRL
The X509CRL class is the abstract class used to manage X.509 Certificate Revocation Lists. The CRL is a list of time stamped entries which indicate which lists have been revoked. The list is signed by a Certificate Authority (CA) and made publically available in a repository. Each revoked certificate in the CRL is identified by its certificate serial number. When a piece of code uses a certificate, the certificates validity is checked by validating its signature and determing that it is not only a recently acquired CRL. The recently aquired CRL is depends on the local policy in affect. The CA issues a new CRL periodically and entries are removed as the certificate expiration date is reached A description of the X.509 v2 CRL follows below from rfc2459. "The X.509 v2 CRL syntax is as follows. For signature calculation, the data that is to be signed is ASN.1 DER encoded. ASN.1 DER encoding is a tag, length, value encoding system for each element. CertificateList ::= SEQUENCE { tbsCertList TBSCertList, signatureAlgorithm AlgorithmIdentifier, signatureValue BIT STRING } TBSCertList ::= SEQUENCE { version Version OPTIONAL, -- if present, shall be v2 signature AlgorithmIdentifier, issuer Name, thisUpdate Time, nextUpdate Time OPTIONAL, revokedCertificates SEQUENCE OF SEQUENCE { userCertificate CertificateSerialNumber, revocationDate Time, crlEntryExtensions Extensions OPTIONAL -- if present, shall be v2 } OPTIONAL, crlExtensions [0] EXPLICIT Extensions OPTIONAL -- if present, shall be v2 }"
Constructor Summary | |
---|---|
protected |
X509CRL()
Constructs a new X509CRL. |
Method Summary | |
---|---|
boolean |
equals(Object other)
Compares this X509CRL to other. |
abstract byte[] |
getEncoded()
Gets the DER ASN.1 encoded format for this X.509 CRL. |
abstract Principal |
getIssuerDN()
Returns the issuer (issuer distinguished name) of the CRL. |
X500Principal |
getIssuerX500Principal()
Returns the X.500 distinguished name of this CRL's issuer. |
abstract Date |
getNextUpdate()
|
abstract X509CRLEntry |
getRevokedCertificate(BigInteger serialNumber)
Gets the requeste dX509Entry for the specified certificate serial number. |
abstract Set<? extends X509CRLEntry> |
getRevokedCertificates()
Returns a Set of revoked certificates. |
abstract String |
getSigAlgName()
Returns the signature algorithm used to sign the CRL. |
abstract String |
getSigAlgOID()
Returns the OID for the signature algorithm used. |
abstract byte[] |
getSigAlgParams()
Returns the AlgorithmParameters in the encoded form for the signature algorithm used. |
abstract byte[] |
getSignature()
Returns the signature for the CRL. |
abstract byte[] |
getTBSCertList()
Returns the DER ASN.1 encoded tbsCertList which is the basic information of the list and associated certificates in the encoded state. |
abstract Date |
getThisUpdate()
Returns the thisUpdate date of the CRL. |
abstract int |
getVersion()
Gets the version of this CRL. |
int |
hashCode()
Returns a hash code for this X509CRL in its encoded form. |
abstract void |
verify(PublicKey key)
Verifies that this CRL was properly signed with the PublicKey that corresponds to its private key. |
abstract void |
verify(PublicKey key,
String sigProvider)
Verifies that this CRL was properly signed with the PublicKey that corresponds to its private key and uses the signature engine provided by the provider. |
Methods inherited from class java.security.cert.CRL |
---|
getType, isRevoked, toString |
Methods inherited from class java.lang.Object |
---|
clone, finalize, getClass, notify, notifyAll, wait, wait, wait |
Methods inherited from interface java.security.cert.X509Extension |
---|
getCriticalExtensionOIDs, getExtensionValue, getNonCriticalExtensionOIDs, hasUnsupportedCriticalExtension |
Constructor Detail |
---|
protected X509CRL()
Method Detail |
---|
public boolean equals(Object other)
equals
in class Object
other
- An Object to test for equality
Object.hashCode()
public int hashCode()
hashCode
in class Object
Object.equals(Object)
,
System.identityHashCode(Object)
public abstract byte[] getEncoded() throws CRLException
CRLException
- if an error occurspublic abstract void verify(PublicKey key) throws CRLException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException
key
- PublicKey to verify with
CRLException
- encoding error
NoSuchAlgorithmException
- unsupported algorithm
InvalidKeyException
- incorrect key
NoSuchProviderException
- no provider
SignatureException
- signature errorpublic abstract void verify(PublicKey key, String sigProvider) throws CRLException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException
key
- PublicKey to verify withsigProvider
- Provider to use for signature algorithm
CRLException
- encoding error
NoSuchAlgorithmException
- unsupported algorithm
InvalidKeyException
- incorrect key
NoSuchProviderException
- incorrect provider
SignatureException
- signature errorpublic abstract int getVersion()
public abstract Principal getIssuerDN()
public abstract Date getThisUpdate()
public abstract Date getNextUpdate()
public abstract X509CRLEntry getRevokedCertificate(BigInteger serialNumber)
public abstract Set<? extends X509CRLEntry> getRevokedCertificates()
public abstract byte[] getTBSCertList() throws CRLException
CRLException
public abstract byte[] getSignature()
public abstract String getSigAlgName()
public abstract String getSigAlgOID()
public abstract byte[] getSigAlgParams()
public X500Principal getIssuerX500Principal()
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |