APIdia Launch Partner
Top Description Fields Constructors Methods
sun.security.x509

public Class IssuingDistributionPointExtension

extends Extension
Class Inheritance
Imports
java.io.IOException, sun.security.util.DerInputStream, .DerOutputStream, .DerValue
Represents the CRL Issuing Distribution Point Extension (OID = 2.5.29.28).

The issuing distribution point is a critical CRL extension that identifies the CRL distribution point and scope for a particular CRL, and it indicates whether the CRL covers revocation for end entity certificates only, CA certificates only, attribute certificates only, or a limited set of reason codes.

The extension is defined in Section 5.2.5 of Internet X.509 PKI Certificate and Certificate Revocation List (CRL) Profile.

Its ASN.1 definition is as follows: 

    id-ce-issuingDistributionPoint OBJECT IDENTIFIER ::= { id-ce 28 }

    issuingDistributionPoint ::= SEQUENCE {
         distributionPoint          [0] DistributionPointName OPTIONAL,
         onlyContainsUserCerts      [1] BOOLEAN DEFAULT FALSE,
         onlyContainsCACerts        [2] BOOLEAN DEFAULT FALSE,
         onlySomeReasons            [3] ReasonFlags OPTIONAL,
         indirectCRL                [4] BOOLEAN DEFAULT FALSE,
         onlyContainsAttributeCerts [5] BOOLEAN DEFAULT FALSE }
Since
1.6
See Also
DistributionPoint

Field Summary

Modifier and TypeField and Description
private DistributionPointName
distributionPoint

private boolean
hasOnlyAttributeCerts

private boolean
hasOnlyCACerts

private boolean
hasOnlyUserCerts

private boolean
isIndirectCRL

public static final String
NAME

private ReasonFlags
revocationReasons

private static final byte
TAG_DISTRIBUTION_POINT

private static final byte
TAG_INDIRECT_CRL

private static final byte
TAG_ONLY_ATTRIBUTE_CERTS

private static final byte
TAG_ONLY_CA_CERTS

private static final byte
TAG_ONLY_SOME_REASONS

private static final byte
TAG_ONLY_USER_CERTS

Inherited from sun.security.x509.Extension:
criticalextensionIdextensionValue

Constructor Summary

AccessConstructor and Description
public
IssuingDistributionPointExtension(DistributionPointName
the name of the distribution point, or null for none.
distributionPoint, ReasonFlags
the revocation reasons associated with the distribution point, or null for none.
revocationReasons, boolean
if true then scope of the CRL includes only user certificates.
hasOnlyUserCerts, boolean
if true then scope of the CRL includes only CA certificates.
hasOnlyCACerts, boolean
if true then scope of the CRL includes only attribute certificates.
hasOnlyAttributeCerts, boolean
if true then the scope of the CRL includes certificates issued by authorities other than the CRL issuer. The responsible authority is indicated by a certificate issuer CRL entry extension.
isIndirectCRL)

Creates a critical IssuingDistributionPointExtension.

public
IssuingDistributionPointExtension(Boolean
true if the extension is to be treated as critical.
critical, Object
the DER-encoded value. It must be a byte[].
value)

Creates a critical IssuingDistributionPointExtension from its DER-encoding.

Method Summary

Modifier and TypeMethod and Description
public void
encode(DerOutputStream
the output stream.
out)

Overrides sun.security.x509.Extension.encode.

Implements sun.security.util.DerEncoder.encode.

Encodes the issuing distribution point extension and writes it to the DerOutputStream.

private void
encodeThis()

public DistributionPointName
getDistributionPoint()

public String
getName()

Overrides sun.security.x509.Extension.getName.

Returns the name of this extension.

public ReasonFlags
getRevocationReasons()

public boolean
hasOnlyAttributeCerts()

public boolean
hasOnlyCACerts()

public boolean
hasOnlyUserCerts()

public boolean
isIndirectCRL()

public void
setRevocationReasons(ReasonFlags val)

public String
toString()

Overrides sun.security.x509.Extension.toString.

Returns the extension as user readable string.

Inherited from sun.security.x509.Extension:
encodeequalsgetExtensionIdgetExtensionValuegetIdgetValuehashCodeisCriticalnewExtension

Field Detail

distributionPointback to summary
private DistributionPointName distributionPoint
hasOnlyAttributeCertsback to summary
private boolean hasOnlyAttributeCerts
hasOnlyCACertsback to summary
private boolean hasOnlyCACerts
hasOnlyUserCertsback to summary
private boolean hasOnlyUserCerts
isIndirectCRLback to summary
private boolean isIndirectCRL
NAMEback to summary
public static final String NAME
revocationReasonsback to summary
private ReasonFlags revocationReasons
TAG_DISTRIBUTION_POINTback to summary
private static final byte TAG_DISTRIBUTION_POINT
TAG_INDIRECT_CRLback to summary
private static final byte TAG_INDIRECT_CRL
TAG_ONLY_ATTRIBUTE_CERTSback to summary
private static final byte TAG_ONLY_ATTRIBUTE_CERTS
TAG_ONLY_CA_CERTSback to summary
private static final byte TAG_ONLY_CA_CERTS
TAG_ONLY_SOME_REASONSback to summary
private static final byte TAG_ONLY_SOME_REASONS
TAG_ONLY_USER_CERTSback to summary
private static final byte TAG_ONLY_USER_CERTS

Constructor Detail

IssuingDistributionPointExtensionback to summary
public IssuingDistributionPointExtension(DistributionPointName distributionPoint, ReasonFlags revocationReasons, boolean hasOnlyUserCerts, boolean hasOnlyCACerts, boolean hasOnlyAttributeCerts, boolean isIndirectCRL)

Creates a critical IssuingDistributionPointExtension.

Parameters
distributionPoint:DistributionPointName

the name of the distribution point, or null for none.

revocationReasons:ReasonFlags

the revocation reasons associated with the distribution point, or null for none.

hasOnlyUserCerts:boolean

if true then scope of the CRL includes only user certificates.

hasOnlyCACerts:boolean

if true then scope of the CRL includes only CA certificates.

hasOnlyAttributeCerts:boolean

if true then scope of the CRL includes only attribute certificates.

isIndirectCRL:boolean

if true then the scope of the CRL includes certificates issued by authorities other than the CRL issuer. The responsible authority is indicated by a certificate issuer CRL entry extension.

Exceptions
IllegalArgumentException:
if more than one of hasOnlyUserCerts, hasOnlyCACerts, hasOnlyAttributeCerts is set to true, or all arguments are either null or false.
IssuingDistributionPointExtensionback to summary
public IssuingDistributionPointExtension(Boolean critical, Object value) throws IOException

Creates a critical IssuingDistributionPointExtension from its DER-encoding.

Parameters
critical:Boolean

true if the extension is to be treated as critical.

value:Object

the DER-encoded value. It must be a byte[].

Exceptions
IOException:
on decoding error.

Method Detail

encodeback to summary
public void encode(DerOutputStream out)

Overrides sun.security.x509.Extension.encode.

Implements sun.security.util.DerEncoder.encode.

Encodes the issuing distribution point extension and writes it to the DerOutputStream.

Parameters
out:DerOutputStream

the output stream.

Annotations
@Override
encodeThisback to summary
private void encodeThis()
getDistributionPointback to summary
public DistributionPointName getDistributionPoint()
getNameback to summary
public String getName()

Overrides sun.security.x509.Extension.getName.

Returns the name of this extension.

Annotations
@Override
getRevocationReasonsback to summary
public ReasonFlags getRevocationReasons()
hasOnlyAttributeCertsback to summary
public boolean hasOnlyAttributeCerts()
hasOnlyCACertsback to summary
public boolean hasOnlyCACerts()
hasOnlyUserCertsback to summary
public boolean hasOnlyUserCerts()
isIndirectCRLback to summary
public boolean isIndirectCRL()
setRevocationReasonsback to summary
public void setRevocationReasons(ReasonFlags val) throws IOException
toStringback to summary
public String toString()

Overrides sun.security.x509.Extension.toString.

Returns the extension as user readable string.