Docjar: A Java Source and Docuemnt Enginecom.*    java.*    javax.*    org.*    all    new    plug-in

Quick Search    Search Deep

java.security.cert
Class X509CRLSelector  view X509CRLSelector download X509CRLSelector.java

java.lang.Object
  extended byjava.security.cert.X509CRLSelector
All Implemented Interfaces:
java.lang.Cloneable, CRLSelector

public class X509CRLSelector
extends java.lang.Object
implements CRLSelector, java.lang.Cloneable

A class for matching X.509 certificate revocation lists by criteria.

Use of this class requires extensive knowledge of the Internet Engineering Task Force's Public Key Infrastructure (X.509). The primary document describing this standard is RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile.

Note that this class is not thread-safe. If multiple threads will use or modify this class then they need to synchronize on the object.


Field Summary
private  X509Certificate cert
           
private static java.lang.String CRL_NUMBER_ID
           
private  java.util.Date date
           
private  java.util.List issuerNames
           
private  java.math.BigInteger maxCrlNumber
           
private  java.math.BigInteger minCrlNumber
           
 
Constructor Summary
X509CRLSelector()
          Creates a new CRL selector with no criteria enabled; i.e., every CRL will be matched.
 
Method Summary
 void addIssuerName(byte[] name)
          Add an issuer name to the set of issuer names criteria, as the DER encoded form.
 void addIssuerName(java.lang.String name)
          Add an issuer name to the set of issuer names criteria, as a String representation.
 java.lang.Object clone()
          Returns a copy of this object.
 X509Certificate getCertificateChecking()
          Returns the certificate being checked, or null if this value is not set.
 java.util.Date getDateAndTime()
          Returns the date when this CRL must be valid; that is, the date must be after the thisUpdate date, but before the nextUpdate date.
 java.util.Collection getIssuerNames()
          Returns the set of issuer names that are matched by this selector, or null if this criteria is not set.
 java.math.BigInteger getMaxCRL()
          Returns the maximum value of the CRLNumber extension present in CRLs matched by this selector, or null if this criteria is not set.
 java.math.BigInteger getMinCRL()
          Returns the minimum value of the CRLNumber extension present in CRLs matched by this selector, or null if this criteria is not set.
 boolean match(CRL _crl)
          Checks a CRL against the criteria of this selector, returning true if the given CRL matches all the criteria.
 void setCertificateChecking(X509Certificate cert)
          Sets the certificate being checked.
 void setDateAndTime(java.util.Date date)
          Sets the date at which this CRL must be valid.
 void setIssuerNames(java.util.Collection names)
          Sets the issuer names criterion.
 void setMaxCRLNumber(java.math.BigInteger maxCrlNumber)
          Sets the maximum value of the CRLNumber extension present in CRLs matched by this selector.
 void setMinCRLNumber(java.math.BigInteger minCrlNumber)
          Sets the minimum value of the CRLNumber extension present in CRLs matched by this selector.
 java.lang.String toString()
          Returns a string representation of this selector.
 
Methods inherited from class java.lang.Object
equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait
 

Field Detail

CRL_NUMBER_ID

private static final java.lang.String CRL_NUMBER_ID
See Also:
Constant Field Values

issuerNames

private java.util.List issuerNames

maxCrlNumber

private java.math.BigInteger maxCrlNumber

minCrlNumber

private java.math.BigInteger minCrlNumber

date

private java.util.Date date

cert

private X509Certificate cert
Constructor Detail

X509CRLSelector

public X509CRLSelector()
Creates a new CRL selector with no criteria enabled; i.e., every CRL will be matched.

Method Detail

addIssuerName

public void addIssuerName(byte[] name)
                   throws java.io.IOException
Add an issuer name to the set of issuer names criteria, as the DER encoded form.


addIssuerName

public void addIssuerName(java.lang.String name)
                   throws java.io.IOException
Add an issuer name to the set of issuer names criteria, as a String representation.


setIssuerNames

public void setIssuerNames(java.util.Collection names)
                    throws java.io.IOException
Sets the issuer names criterion. Pass null to clear this value. CRLs matched by this selector must have an issuer name in this set.


getIssuerNames

public java.util.Collection getIssuerNames()
Returns the set of issuer names that are matched by this selector, or null if this criteria is not set. The returned collection is not modifiable.


getMaxCRL

public java.math.BigInteger getMaxCRL()
Returns the maximum value of the CRLNumber extension present in CRLs matched by this selector, or null if this criteria is not set.


getMinCRL

public java.math.BigInteger getMinCRL()
Returns the minimum value of the CRLNumber extension present in CRLs matched by this selector, or null if this criteria is not set.


setMaxCRLNumber

public void setMaxCRLNumber(java.math.BigInteger maxCrlNumber)
Sets the maximum value of the CRLNumber extension present in CRLs matched by this selector. Specify null to clear this criterion.


setMinCRLNumber

public void setMinCRLNumber(java.math.BigInteger minCrlNumber)
Sets the minimum value of the CRLNumber extension present in CRLs matched by this selector. Specify null to clear this criterion.


getDateAndTime

public java.util.Date getDateAndTime()
Returns the date when this CRL must be valid; that is, the date must be after the thisUpdate date, but before the nextUpdate date. Returns null if this criterion is not set.


setDateAndTime

public void setDateAndTime(java.util.Date date)
Sets the date at which this CRL must be valid. Specify null to clear this criterion.


getCertificateChecking

public X509Certificate getCertificateChecking()
Returns the certificate being checked, or null if this value is not set.


setCertificateChecking

public void setCertificateChecking(X509Certificate cert)
Sets the certificate being checked. This is not a criterion, but info used by certificate store implementations to aid in searching.


toString

public java.lang.String toString()
Returns a string representation of this selector. The string will only describe the enabled criteria, so if none are enabled this will return a string that contains little else besides the class name.


match

public boolean match(CRL _crl)
Checks a CRL against the criteria of this selector, returning true if the given CRL matches all the criteria.

Specified by:
match in interface CRLSelector

clone

public java.lang.Object clone()
Returns a copy of this object.

Specified by:
clone in interface CRLSelector