RequestedCertificate

Class Overview

ISIS-MTT-Optional: The certificate requested by the client by inserting the RetrieveIfAllowed extension in the request, will be returned in this extension.

ISIS-MTT-SigG: The signature act allows publishing certificates only then, when the certificate owner gives his explicit permission. Accordingly, there may be �nondownloadable� certificates, about which the responder must provide status information, but MUST NOT include them in the response. Clients may get therefore the following three kind of answers on a single request including the RetrieveIfAllowed extension:

• a) the responder supports the extension and is allowed to publish the certificate: RequestedCertificate returned including the requested certificate
• b) the responder supports the extension but is NOT allowed to publish the certificate: RequestedCertificate returned including an empty OCTET STRING
• c) the responder does not support the extension: RequestedCertificate is not included in the response

Clients requesting RetrieveIfAllowed MUST be able to handle these cases. If any of the OCTET STRING options is used, it MUST contain the DER encoding of the requested certificate.

            RequestedCertificate ::= CHOICE {
              Certificate Certificate,
              publicKeyCertificate [0] EXPLICIT OCTET STRING,
              attributeCertificate [1] EXPLICIT OCTET STRING
            }
 

Summary

Constants
int	attributeCertificate
int	certificate
int	publicKeyCertificate

[Expand] Inherited Constants
From class org.bouncycastle.asn1.ASN1Encodable String BER String DER

Public Constructors
	RequestedCertificate(X509CertificateStructure certificate) Constructor from a given details.
	RequestedCertificate(int type, byte[] certificateOctets)

Public Methods
byte[]	getCertificateBytes()
static RequestedCertificate	getInstance(ASN1TaggedObject obj, boolean explicit)
static RequestedCertificate	getInstance(Object obj)
int	getType()
DERObject	toASN1Object() Produce an object suitable for an ASN1OutputStream.

[Expand] Inherited Methods
From class org.bouncycastle.asn1.ASN1Encodable boolean equals(Object o) byte[] getDEREncoded() Return the DER encoding of the object, null if the DER encoding can not be made. DERObject getDERObject() byte[] getEncoded(String encoding) Return either the default for "BER" or a DER encoding if "DER" is specified. byte[] getEncoded() Return the default BER or DER encoding for this object. int hashCode() abstract DERObject toASN1Object()
From class java.lang.Object Object clone() boolean equals(Object arg0) void finalize() final Class<?> getClass() int hashCode() final void notify() final void notifyAll() String toString() final void wait() final void wait(long arg0, int arg1) final void wait(long arg0)
From interface org.bouncycastle.asn1.DEREncodable abstract DERObject getDERObject()

            RequestedCertificate ::= CHOICE {
              Certificate Certificate,
              publicKeyCertificate [0] EXPLICIT OCTET STRING,
              attributeCertificate [1] EXPLICIT OCTET STRING
            }