public class

RequestedCertificate

extends ASN1Encodable
implements ASN1Choice
java.lang.Object
   ↳ org.bouncycastle.asn1.ASN1Encodable
     ↳ org.bouncycastle.asn1.isismtt.ocsp.RequestedCertificate

Class Overview

ISIS-MTT-Optional: The certificate requested by the client by inserting the RetrieveIfAllowed extension in the request, will be returned in this extension.

ISIS-MTT-SigG: The signature act allows publishing certificates only then, when the certificate owner gives his explicit permission. Accordingly, there may be ´┐Żnondownloadable´┐Ż certificates, about which the responder must provide status information, but MUST NOT include them in the response. Clients may get therefore the following three kind of answers on a single request including the RetrieveIfAllowed extension:

  • a) the responder supports the extension and is allowed to publish the certificate: RequestedCertificate returned including the requested certificate
  • b) the responder supports the extension but is NOT allowed to publish the certificate: RequestedCertificate returned including an empty OCTET STRING
  • c) the responder does not support the extension: RequestedCertificate is not included in the response
Clients requesting RetrieveIfAllowed MUST be able to handle these cases. If any of the OCTET STRING options is used, it MUST contain the DER encoding of the requested certificate.

            RequestedCertificate ::= CHOICE {
              Certificate Certificate,
              publicKeyCertificate [0] EXPLICIT OCTET STRING,
              attributeCertificate [1] EXPLICIT OCTET STRING
            }
 

Summary

Constants
int attributeCertificate
int certificate
int publicKeyCertificate
[Expand]
Inherited Constants
From class org.bouncycastle.asn1.ASN1Encodable
Public Constructors
RequestedCertificate(X509CertificateStructure certificate)
Constructor from a given details.
RequestedCertificate(int type, byte[] certificateOctets)
Public Methods
byte[] getCertificateBytes()
static RequestedCertificate getInstance(ASN1TaggedObject obj, boolean explicit)
static RequestedCertificate getInstance(Object obj)
int getType()
DERObject toASN1Object()
Produce an object suitable for an ASN1OutputStream.
[Expand]
Inherited Methods
From class org.bouncycastle.asn1.ASN1Encodable
From class java.lang.Object
From interface org.bouncycastle.asn1.DEREncodable

Constants

public static final int attributeCertificate

Constant Value: 1 (0x00000001)

public static final int certificate

Constant Value: -1 (0xffffffff)

public static final int publicKeyCertificate

Constant Value: 0 (0x00000000)

Public Constructors

public RequestedCertificate (X509CertificateStructure certificate)

Constructor from a given details.

Only one parameter can be given. All other must be null.

Parameters
certificate Given as Certificate

public RequestedCertificate (int type, byte[] certificateOctets)

Public Methods

public byte[] getCertificateBytes ()

public static RequestedCertificate getInstance (ASN1TaggedObject obj, boolean explicit)

public static RequestedCertificate getInstance (Object obj)

public int getType ()

public DERObject toASN1Object ()

Produce an object suitable for an ASN1OutputStream.

Returns:

            RequestedCertificate ::= CHOICE {
              Certificate Certificate,
              publicKeyCertificate [0] EXPLICIT OCTET STRING,
              attributeCertificate [1] EXPLICIT OCTET STRING
            }
 

Returns
  • a DERObject