pack-priv Class X509CRLEntryObject

Overrides java.security.cert.X509CRLEntry.equals.

Doc from java.security.cert.X509CRLEntry.equals.

Compares this CRL entry for equality with the given object. If the other object is an instanceof X509CRLEntry, then its encoded form (the inner SEQUENCE) is retrieved and compared with the encoded form of this CRL entry.

Parameters

o:Object

the object to test for equality with this CRL entry.

Returns:boolean

true iff the encoded forms of the two CRL entries match, false otherwise.

Overrides java.security.cert.X509CRLEntry.getCertificateIssuer.

Doc from java.security.cert.X509CRLEntry.getCertificateIssuer.

Get the issuer of the X509Certificate described by this entry. If the certificate issuer is also the CRL issuer, this method returns null.

This method is used with indirect CRLs. The default implementation always returns null. Subclasses that wish to support indirect CRLs should override it.

Returns:X500Principal

the issuer of the X509Certificate described by this entry or null if it is issued by the CRL issuer.

Implements java.security.cert.X509Extension.getCriticalExtensionOIDs.

Doc from java.security.cert.X509Extension.getCriticalExtensionOIDs.

Gets a Set of the OID strings for the extension(s) marked CRITICAL in the certificate/CRL managed by the object implementing this interface. Here is sample code to get a Set of critical extensions from an X509Certificate and print the OIDs:

X509Certificate cert = null;
try (InputStream inStrm = new FileInputStream("DER-encoded-Cert")) {
    CertificateFactory cf = CertificateFactory.getInstance("X.509");
    cert = (X509Certificate)cf.generateCertificate(inStrm);
}

Set<String> critSet = cert.getCriticalExtensionOIDs();
if (critSet != null && !critSet.isEmpty()) {
    System.out.println("Set of critical extensions:");
    for (String oid : critSet) {
        System.out.println(oid);
    }
}

Returns:Set<E>

a Set (or an empty Set if none are marked critical) of the extension OID strings for extensions that are marked critical. If there are no extensions present at all, then this method returns null.

Implements abstract java.security.cert.X509CRLEntry.getEncoded.

Doc from java.security.cert.X509CRLEntry.getEncoded.

Returns the ASN.1 DER-encoded form of this CRL Entry, that is the inner SEQUENCE.

Returns:byte[]

the encoded form of this certificate

Exceptions

CRLException:

if an encoding error occurs.

Implements java.security.cert.X509Extension.getExtensionValue.

Doc from java.security.cert.X509Extension.getExtensionValue.

Gets the DER-encoded OCTET string for the extension value (extnValue) identified by the passed-in oid String. The oid string is represented by a set of nonnegative whole numbers separated by periods.

For example:

Parameters

oid:String

the Object Identifier value for the extension.

Returns:byte[]

the DER-encoded octet string of the extension value or null if it is not present.

Implements java.security.cert.X509Extension.getNonCriticalExtensionOIDs.

Doc from java.security.cert.X509Extension.getNonCriticalExtensionOIDs.

Gets a Set of the OID strings for the extension(s) marked NON-CRITICAL in the certificate/CRL managed by the object implementing this interface. Here is sample code to get a Set of non-critical extensions from an X509CRL revoked certificate entry and print the OIDs:

CertificateFactory cf = null;
X509CRL crl = null;
try (InputStream inStrm = new FileInputStream("DER-encoded-CRL")) {
    cf = CertificateFactory.getInstance("X.509");
    crl = (X509CRL)cf.generateCRL(inStrm);
}

byte[] certData = <DER-encoded certificate data>
ByteArrayInputStream bais = new ByteArrayInputStream(certData);
X509Certificate cert = (X509Certificate)cf.generateCertificate(bais);
X509CRLEntry badCert =
             crl.getRevokedCertificate(cert.getSerialNumber());

if (badCert != null) {
    Set<String> nonCritSet = badCert.getNonCriticalExtensionOIDs();
    if (nonCritSet != null)
        for (String oid : nonCritSet) {
            System.out.println(oid);
        }
}

Returns:Set<E>

a Set (or an empty Set if none are marked non-critical) of the extension OID strings for extensions that are marked non-critical. If there are no extensions present at all, then this method returns null.

Implements abstract java.security.cert.X509CRLEntry.getRevocationDate.

Doc from java.security.cert.X509CRLEntry.getRevocationDate.

Gets the revocation date from this X509CRLEntry, the revocationDate.

Returns:Date

the revocation date.

Implements abstract java.security.cert.X509CRLEntry.getSerialNumber.

Doc from java.security.cert.X509CRLEntry.getSerialNumber.

Gets the serial number from this X509CRLEntry, the userCertificate.

Returns:BigInteger

the serial number.

Implements abstract java.security.cert.X509CRLEntry.hasExtensions.

Doc from java.security.cert.X509CRLEntry.hasExtensions.

Returns true if this CRL entry has extensions.

Returns:boolean

true if this entry has extensions, false otherwise.

Overrides java.security.cert.X509CRLEntry.hashCode.

Cache the hashCode value - calculating it with the standard method.

Returns:int

calculated hashCode.

Implements java.security.cert.X509Extension.hasUnsupportedCriticalExtension.

Will return true if any extensions are present and marked as critical as we currently don't handle any extensions!

Returns:boolean

Doc from java.security.cert.X509Extension.hasUnsupportedCriticalExtension.

true if a critical extension is found that is not supported, otherwise false.

Implements abstract java.security.cert.X509CRLEntry.toString.

Doc from java.security.cert.X509CRLEntry.toString.

Returns a string representation of this CRL entry.

Returns:String

a string representation of this CRL entry.