| java.lang.Object | ||
| ↳ | sun.security.x509.Extension | |
| ↳ | sun.security.x509.IssuingDistributionPointExtension | |
Represents the CRL Issuing Distribution Point Extension (OID = 2.5.29.28).
The issuing distribution point is a critical CRL extension that identifies the CRL distribution point and scope for a particular CRL, and it indicates whether the CRL covers revocation for end entity certificates only, CA certificates only, attribute certificates only, or a limited set of reason codes.
The extension is defined in Section 5.2.5 of Internet X.509 PKI Certific ate and Certificate Revocation List (CRL) Profile.
Its ASN.1 definition is as follows:
id-ce-issuingDistributionPoint OBJECT IDENTIFIER ::= { id-ce 28 }
issuingDistributionPoint ::= SEQUENCE {
distributionPoint [0] DistributionPointName OPTIONAL,
onlyContainsUserCerts [1] BOOLEAN DEFAULT FALSE,
onlyContainsCACerts [2] BOOLEAN DEFAULT FALSE,
onlySomeReasons [3] ReasonFlags OPTIONAL,
indirectCRL [4] BOOLEAN DEFAULT FALSE,
onlyContainsAttributeCerts [5] BOOLEAN DEFAULT FALSE }
| Constants | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| String | IDENT | Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type. | |||||||||
| String | INDIRECT_CRL | ||||||||||
| String | NAME | Attribute names. | |||||||||
| String | ONLY_ATTRIBUTE_CERTS | ||||||||||
| String | ONLY_CA_CERTS | ||||||||||
| String | ONLY_USER_CERTS | ||||||||||
| String | POINT | ||||||||||
| String | REASONS | ||||||||||
|
[Expand]
Inherited Fields | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
From class
sun.security.x509.Extension
| |||||||||||
| Public Constructors | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
Creates a critical IssuingDistributionPointExtension.
| |||||||||||
Creates a critical IssuingDistributionPointExtension from its
DER-encoding.
| |||||||||||
| Public Methods | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
Deletes the attribute value.
| |||||||||||
Encodes the issuing distribution point extension and writes it to the
DerOutputStream.
| |||||||||||
Gets the attribute value.
| |||||||||||
Returns an enumeration of names of attributes existing within this
attribute.
| |||||||||||
Returns the name of this attribute.
| |||||||||||
Sets the attribute value.
| |||||||||||
Returns the extension as user readable string.
| |||||||||||
|
[Expand]
Inherited Methods | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
From class
sun.security.x509.Extension
| |||||||||||
From class
java.lang.Object
| |||||||||||
From interface
sun.security.x509.CertAttrSet
| |||||||||||
Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.
Creates a critical IssuingDistributionPointExtension.
| distributionPoint | the name of the distribution point, or null for none. |
|---|---|
| revocationReasons | the revocation reasons associated with the distribution point, or null for none. |
| hasOnlyUserCerts | if true then scope of the CRL
includes only user certificates. |
| hasOnlyCACerts | if true then scope of the CRL
includes only CA certificates. |
| hasOnlyAttributeCerts | if true then scope of the CRL
includes only attribute certificates. |
| isIndirectCRL | if true then the scope of the CRL
includes certificates issued by authorities other than the CRL
issuer. The responsible authority is indicated by a certificate
issuer CRL entry extension. |
| IllegalArgumentException | if more than one of
hasOnlyUserCerts, hasOnlyCACerts,
hasOnlyAttributeCerts is set to true. |
|---|---|
| IOException | on encoding error. |
Creates a critical IssuingDistributionPointExtension from its DER-encoding.
| critical | true if the extension is to be treated as critical. |
|---|---|
| value | the DER-encoded value. It must be a byte[]. |
| IOException | on decoding error. |
|---|
Deletes the attribute value.
| name | the name of the attribute to delete. |
|---|
| IOException |
|---|
Encodes the issuing distribution point extension and writes it to the DerOutputStream.
| out | the output stream. |
|---|
| IOException | on encoding error. |
|---|
Returns an enumeration of names of attributes existing within this attribute.
Sets the attribute value.
| name | the name of the attribute (e.g. "x509.info.key") |
|---|---|
| obj | the attribute object. |
| IOException |
|---|
Returns the extension as user readable string.