Top Description Interfaces Classes
[default module]

Package org.bouncycastle.asn1.cmp

Support classes useful for encoding and supporting PKIX-CMP as described RFC 2510.

Interface Summary

Modifier and TypeInterface and Description
public interface
CMPObjectIdentifiers

Class Summary

Modifier and TypeClass and Description
public class
CAKeyUpdAnnContent

public class
CertConfirmContent

public class
CertifiedKeyPair

CertifiedKeyPair ::= SEQUENCE {
                                 certOrEncCert       CertOrEncCert,
                                 privateKey      [0] EncryptedValue      OPTIONAL,
                                 -- see [CRMF] for comment on encoding
                                 publicationInfo [1] PKIPublicationInfo  OPTIONAL
      }
public class
CertOrEncCert

public class
CertRepMessage

public class
CertResponse

public class
CertStatus

public class
Challenge

public class
CMPCertificate

public class
CRLAnnContent

public class
ErrorMsgContent

public class
GenMsgContent

public class
GenRepContent

public class
InfoTypeAndValue

Example InfoTypeAndValue contents include, but are not limited to, the following (un-comment in this ASN.1 module and use as appropriate for a given environment): 

  id-it-caProtEncCert    OBJECT IDENTIFIER ::= {id-it 1}
     CAProtEncCertValue      ::= CMPCertificate
  id-it-signKeyPairTypes OBJECT IDENTIFIER ::= {id-it 2}
    SignKeyPairTypesValue   ::= SEQUENCE OF AlgorithmIdentifier
  id-it-encKeyPairTypes  OBJECT IDENTIFIER ::= {id-it 3}
    EncKeyPairTypesValue    ::= SEQUENCE OF AlgorithmIdentifier
  id-it-preferredSymmAlg OBJECT IDENTIFIER ::= {id-it 4}
     PreferredSymmAlgValue   ::= AlgorithmIdentifier
  id-it-caKeyUpdateInfo  OBJECT IDENTIFIER ::= {id-it 5}
     CAKeyUpdateInfoValue    ::= CAKeyUpdAnnContent
  id-it-currentCRL       OBJECT IDENTIFIER ::= {id-it 6}
     CurrentCRLValue         ::= CertificateList
  id-it-unsupportedOIDs  OBJECT IDENTIFIER ::= {id-it 7}
     UnsupportedOIDsValue    ::= SEQUENCE OF OBJECT IDENTIFIER
  id-it-keyPairParamReq  OBJECT IDENTIFIER ::= {id-it 10}
     KeyPairParamReqValue    ::= OBJECT IDENTIFIER
  id-it-keyPairParamRep  OBJECT IDENTIFIER ::= {id-it 11}
     KeyPairParamRepValue    ::= AlgorithmIdentifer
  id-it-revPassphrase    OBJECT IDENTIFIER ::= {id-it 12}
     RevPassphraseValue      ::= EncryptedValue
  id-it-implicitConfirm  OBJECT IDENTIFIER ::= {id-it 13}
     ImplicitConfirmValue    ::= NULL
  id-it-confirmWaitTime  OBJECT IDENTIFIER ::= {id-it 14}
     ConfirmWaitTimeValue    ::= GeneralizedTime
  id-it-origPKIMessage   OBJECT IDENTIFIER ::= {id-it 15}
     OrigPKIMessageValue     ::= PKIMessages
  id-it-suppLangTags     OBJECT IDENTIFIER ::= {id-it 16}
     SuppLangTagsValue       ::= SEQUENCE OF UTF8String

where

  id-pkix OBJECT IDENTIFIER ::= {
     iso(1) identified-organization(3)
     dod(6) internet(1) security(5) mechanisms(5) pkix(7)}
and
     id-it   OBJECT IDENTIFIER ::= {id-pkix 4}
public class
KeyRecRepContent

public class
OOBCertHash

public class
PBMParameter

public class
PKIBody

public class
PKIConfirmContent

public class
PKIFailureInfo

PKIFailureInfo ::= BIT STRING {
badAlg               (0),
  -- unrecognized or unsupported Algorithm Identifier
badMessageCheck      (1), -- integrity check failed (e.g., signature did not verify)
badRequest           (2),
  -- transaction not permitted or supported
badTime              (3), -- messageTime was not sufficiently close to the system time, as defined by local policy
badCertId            (4), -- no certificate could be found matching the provided criteria
badDataFormat        (5),
  -- the data submitted has the wrong format
wrongAuthority       (6), -- the authority indicated in the request is different from the one creating the response token
incorrectData        (7), -- the requester's data is incorrect (for notary services)
missingTimeStamp     (8), -- when the timestamp is missing but should be there (by policy)
badPOP               (9)  -- the proof-of-possession failed
certRevoked         (10),
certConfirmed       (11),
wrongIntegrity      (12),
badRecipientNonce   (13), 
timeNotAvailable    (14),
  -- the TSA's time source is not available
unacceptedPolicy    (15),
  -- the requested TSA policy is not supported by the TSA
unacceptedExtension (16),
  -- the requested extension is not supported by the TSA
addInfoNotAvailable (17)
  -- the additional information requested could not be understood
  -- or is not available
badSenderNonce      (18),
badCertTemplate     (19),
signerNotTrusted    (20),
transactionIdInUse  (21),
unsupportedVersion  (22),
notAuthorized       (23),
systemUnavail       (24),    
systemFailure       (25),
  -- the request cannot be handled due to system failure
duplicateCertReq    (26)
public class
PKIFreeText

public class
PKIHeader

public class
PKIHeaderBuilder

public class
PKIMessage

public class
PKIMessages

public class
PKIStatus

public class
PKIStatusInfo

public class
PollRepContent

public class
PollReqContent

public class
POPODecKeyChallContent

public class
POPODecKeyRespContent

public class
ProtectedPart

public class
RevAnnContent

public class
RevDetails

public class
RevRepContent

public class
RevRepContentBuilder

public class
RevReqContent