public class

LDAPStoreHelper

extends Object
java.lang.Object
   ↳ org.bouncycastle.x509.util.LDAPStoreHelper

Class Overview

This is a general purpose implementation to get X.509 certificates, CRLs, attribute certificates and cross certificates from a LDAP location.

At first a search is performed in the ldap*AttributeNames of the X509LDAPCertStoreParameters with the given information of the subject (for all kind of certificates) or issuer (for CRLs), respectively, if a X509CertStoreSelector or X509AttributeCertificate is given with that details.

For the used schemes see:

Summary

Public Constructors
LDAPStoreHelper(X509LDAPCertStoreParameters params)
Public Methods
Collection getAACertificates(X509AttributeCertStoreSelector selector)
Returns attribute certificates for an attribute authority

The aAcertificate holds the privileges of an attribute authority.

Collection getAttributeAuthorityRevocationLists(X509CRLStoreSelector selector)
Returns the revocation list for revoked attribute certificates for an attribute authority

The attributeAuthorityList holds a list of AA certificates that have been revoked.

Collection getAttributeCertificateAttributes(X509AttributeCertStoreSelector selector)
Returns an attribute certificate for an user.
Collection getAttributeCertificateRevocationLists(X509CRLStoreSelector selector)
Returns the revocation list for revoked attribute certificates.
Collection getAttributeDescriptorCertificates(X509AttributeCertStoreSelector selector)
Returns an attribute certificate for an authority

The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules.

Collection getAuthorityRevocationLists(X509CRLStoreSelector selector)
Returns the CRLs for issued certificates for other CAs matching the given selector.
Collection getCACertificates(X509CertStoreSelector selector)
Returns CA certificates.
Collection getCertificateRevocationLists(X509CRLStoreSelector selector)
Returns the certificate revocation lists for revoked certificates.
Collection getCrossCertificatePairs(X509CertPairStoreSelector selector)
Returns cross certificate pairs.
Collection getDeltaCertificateRevocationLists(X509CRLStoreSelector selector)
Returns the delta revocation list for revoked certificates.
Collection getUserCertificates(X509CertStoreSelector selector)
Returns end certificates.
[Expand]
Inherited Methods
From class java.lang.Object

Public Constructors

public LDAPStoreHelper (X509LDAPCertStoreParameters params)

Public Methods

public Collection getAACertificates (X509AttributeCertStoreSelector selector)

Returns attribute certificates for an attribute authority

The aAcertificate holds the privileges of an attribute authority.

Parameters
selector The selector to find the attribute certificates.
Returns
  • A possible empty collection with attribute certificates.
Throws
StoreException

public Collection getAttributeAuthorityRevocationLists (X509CRLStoreSelector selector)

Returns the revocation list for revoked attribute certificates for an attribute authority

The attributeAuthorityList holds a list of AA certificates that have been revoked.

Parameters
selector The CRL selector to use to find the CRLs.
Returns
  • A possible empty collection with CRLs
Throws
StoreException

public Collection getAttributeCertificateAttributes (X509AttributeCertStoreSelector selector)

Returns an attribute certificate for an user.

The attributeCertificateAttribute holds the privileges of a user

Parameters
selector The selector to find the attribute certificates.
Returns
  • A possible empty collection with attribute certificates.
Throws
StoreException

public Collection getAttributeCertificateRevocationLists (X509CRLStoreSelector selector)

Returns the revocation list for revoked attribute certificates.

The attributeCertificateRevocationList holds a list of attribute certificates that have been revoked.

Parameters
selector The CRL selector to use to find the CRLs.
Returns
  • A possible empty collection with CRLs.
Throws
StoreException

public Collection getAttributeDescriptorCertificates (X509AttributeCertStoreSelector selector)

Returns an attribute certificate for an authority

The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules.

Parameters
selector The selector to find the attribute certificates.
Returns
  • A possible empty collection with attribute certificates.
Throws
StoreException

public Collection getAuthorityRevocationLists (X509CRLStoreSelector selector)

Returns the CRLs for issued certificates for other CAs matching the given selector.
The authorityRevocationList attribute includes revocation information regarding certificates issued to other CAs.

Parameters
selector The CRL selector to use to find the CRLs.
Returns
  • A possible empty collection with CRLs
Throws
StoreException

public Collection getCACertificates (X509CertStoreSelector selector)

Returns CA certificates.

The cACertificate attribute of a CA's directory entry shall be used to store self-issued certificates (if any) and certificates issued to this CA by CAs in the same realm as this CA.

Parameters
selector The selector to find the certificates.
Returns
  • A possible empty collection with certificates.
Throws
StoreException

public Collection getCertificateRevocationLists (X509CRLStoreSelector selector)

Returns the certificate revocation lists for revoked certificates.

Parameters
selector The CRL selector to use to find the CRLs.
Returns
  • A possible empty collection with CRLs.
Throws
StoreException

public Collection getCrossCertificatePairs (X509CertPairStoreSelector selector)

Returns cross certificate pairs.

Parameters
selector The selector to use to find the cross certificates.
Returns
Throws
StoreException

public Collection getDeltaCertificateRevocationLists (X509CRLStoreSelector selector)

Returns the delta revocation list for revoked certificates.

Parameters
selector The CRL selector to use to find the CRLs.
Returns
  • A possible empty collection with CRLs.
Throws
StoreException

public Collection getUserCertificates (X509CertStoreSelector selector)

Returns end certificates.

The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules.

Parameters
selector The selector to find the certificates.
Returns
  • A possible empty collection with certificates.
Throws
StoreException