Bouncy Castle Cryptography Library 1.80 · org.bouncycastle.x509.util.LDAPStoreHelper

Modifier and Type	Field and Description
private Map<K, V>	cacheMap
private static int	cacheSize
private static String	LDAP_PROVIDER Initial Context Factory.
private static long	lifeTime
private X509LDAPCertStoreParameters	params
private static String	REFERRALS_IGNORE Processing referrals..
private static final String	SEARCH_SECURITY_LEVEL Security level to be used for LDAP connections.
private static final String	URL_CONTEXT_PREFIX Package Prefix for loading URL context factories.

Access	Constructor and Description
public	LDAPStoreHelper(X509LDAPCertStoreParameters params)

Method Summary

Modifier and Type	Method and Description
private synchronized void	addToCache(String searchCriteria, List<E> list)
private List<E>	Returns: A list of found DER encoded attribute certificates. attrCertSubjectSerialSearch(X509AttributeCertStoreSelector The selector with the search criteria. xselector, String[] Attributes which contain the attribute certificates in the LDAP directory. attrs, String[] Attribute names in the LDAP directory which correspond to the subjectAttributeNames. attrNames, String[] Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory subjectAttributeNames) References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. Can use the entityName of the holder of the attribute certificate, the serialNumber of attribute certificate and the serialNumber of the associated certificate of the given of the X509AttributeCertSelector.
private List<E>	Returns: A list of found DER encoded certificates. certSubjectSerialSearch(X509CertStoreSelector The selector with the search criteria. xselector, String[] Attributes which contain the certificates in the LDAP directory. attrs, String[] Attribute names in teh LDAP directory which correspond to the subjectAttributeNames. attrNames, String[] Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory subjectAttributeNames) References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. Can use the subject and serial and the subject and serialNumber of the certificate of the given of the X509CertStoreSelector.
private DirContext	connectLDAP()
private Set<E>	createAttributeCertificates(List<E> list, X509AttributeCertStoreSelector xselector) References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element.
private Set<E>	createCerts(List<E> list, X509CertStoreSelector xselector) References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element.
private Set<E>	createCRLs(List<E> list, X509CRLStoreSelector xselector)
private Set<E>	createCrossCertificatePairs(List<E> list, X509CertPairStoreSelector xselector)
private List<E>	Returns: A list of found DER encoded CRLs. cRLIssuerSearch(X509CRLStoreSelector The selector with the search criteria. xselector, String[] Attributes which contain the attribute certificates in the LDAP directory. attrs, String[] Attribute names in the LDAP directory which correspond to the subjectAttributeNames. attrNames, String[] Issuer attribute names (like "CN", "O", "OU") to use to search in the LDAP directory issuerAttributeNames) Can use the issuer of the given of the X509CRLStoreSelector.
private List<E>	Returns: A list of found DER encoded certificate pairs. crossCertificatePairSubjectSearch(X509CertPairStoreSelector The selector with the search criteria. xselector, String[] Attributes which contain the attribute certificates in the LDAP directory. attrs, String[] Attribute names in the LDAP directory which correspond to the subjectAttributeNames. attrNames, String[] Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory subjectAttributeNames) Can use the subject of the forward certificate of the set certificate pair or the subject of the forward `org.bouncycastle.x509.X509CertStoreSelector` of the given selector.
public Collection<E>	Returns: A possible empty collection with attribute certificates. getAACertificates(X509AttributeCertStoreSelector The selector to find the attribute certificates. selector) References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. Returns attribute certificates for an attribute authority The aAcertificate holds the privileges of an attribute authority.
public Collection<E>	Returns: A possible empty collection with CRLs getAttributeAuthorityRevocationLists(X509CRLStoreSelector The CRL selector to use to find the CRLs. selector) Returns the revocation list for revoked attribute certificates for an attribute authority The attributeAuthorityList holds a list of AA certificates that have been revoked.
public Collection<E>	Returns: A possible empty collection with attribute certificates. getAttributeCertificateAttributes(X509AttributeCertStoreSelector The selector to find the attribute certificates. selector) References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. Returns an attribute certificate for an user.
public Collection<E>	Returns: A possible empty collection with CRLs. getAttributeCertificateRevocationLists(X509CRLStoreSelector The CRL selector to use to find the CRLs. selector) Returns the revocation list for revoked attribute certificates.
public Collection<E>	Returns: A possible empty collection with attribute certificates. getAttributeDescriptorCertificates(X509AttributeCertStoreSelector The selector to find the attribute certificates. selector) References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. Returns an attribute certificate for an authority The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules.
public Collection<E>	Returns: A possible empty collection with CRLs getAuthorityRevocationLists(X509CRLStoreSelector The CRL selector to use to find the CRLs. selector) Returns the CRLs for issued certificates for other CAs matching the given selector.
public Collection<E>	Returns: A possible empty collection with certificates. getCACertificates(X509CertStoreSelector The selector to find the certificates. selector) References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. Returns CA certificates.
private X500Principal	getCertificateIssuer(X509Certificate cert)
public Collection<E>	Returns: A possible empty collection with CRLs. getCertificateRevocationLists(X509CRLStoreSelector The CRL selector to use to find the CRLs. selector) Returns the certificate revocation lists for revoked certificates.
public Collection<E>	Returns: A possible empty collection with `X509CertificatePair`s getCrossCertificatePairs(X509CertPairStoreSelector The selector to use to find the cross certificates. selector) Returns cross certificate pairs.
public Collection<E>	Returns: A possible empty collection with CRLs. getDeltaCertificateRevocationLists(X509CRLStoreSelector The CRL selector to use to find the CRLs. selector) Returns the delta revocation list for revoked certificates.
private List<E>	getFromCache(String searchCriteria)
private String	getSubjectAsString(X509CertStoreSelector xselector) References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element.
public Collection<E>	Returns: A possible empty collection with certificates. getUserCertificates(X509CertStoreSelector The selector to find the certificates. selector) References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. Returns end certificates.
private String	parseDN(String subject, String dNAttributeName)
private List<E>	Returns: A `List` of byte arrays with the encodings. search(String[] The attribute names to look for in the LDAP. attributeNames, String The value the attribute name must have. attributeValue, String[] The attributes in the LDAP which hold the certificate, attribute certificate, certificate pair or CRL in a found entry. attrs) Returns a `List` of encodings of the certificates, attribute certificates, CRL or certificate pairs.
private String[]	splitString(String str)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

cacheMap	back to summary
private Map<K, V> cacheMap

cacheSize	back to summary
private static int cacheSize

LDAP_PROVIDER	back to summary
private static String LDAP_PROVIDER Initial Context Factory.

lifeTime	back to summary
private static long lifeTime

params	back to summary
private X509LDAPCertStoreParameters params

REFERRALS_IGNORE	back to summary
private static String REFERRALS_IGNORE Processing referrals..

SEARCH_SECURITY_LEVEL	back to summary
private static final String SEARCH_SECURITY_LEVEL Security level to be used for LDAP connections.

URL_CONTEXT_PREFIX	back to summary
private static final String URL_CONTEXT_PREFIX Package Prefix for loading URL context factories.

LDAPStoreHelper	back to summary
public LDAPStoreHelper(X509LDAPCertStoreParameters params)

Method Detail

addToCache	back to summary
private synchronized void addToCache(String searchCriteria, List<E> list)

attrCertSubjectSerialSearch back to summary

attrCertSubjectSerialSearch	back to summary
private List<E> attrCertSubjectSerialSearch(X509AttributeCertStoreSelector xselector, String[] attrs, String[] attrNames, String[] subjectAttributeNames) throws StoreException References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information. Can use the entityName of the holder of the attribute certificate, the serialNumber of attribute certificate and the serialNumber of the associated certificate of the given of the X509AttributeCertSelector. Parameters xselector:X509AttributeCertStoreSelector The selector with the search criteria. attrs:String[] Attributes which contain the attribute certificates in the LDAP directory. attrNames:String[] Attribute names in the LDAP directory which correspond to the subjectAttributeNames. subjectAttributeNames:String[] Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory Returns:List<E> A list of found DER encoded attribute certificates. Exceptions StoreException: if an error occurs while searching.

private List<E> attrCertSubjectSerialSearch(X509AttributeCertStoreSelector xselector, String[] attrs, String[] attrNames, String[] subjectAttributeNames) throws StoreException

References Deprecated

X509AttributeCertStoreSelector is deprecated or references (maybe indirectly) at least one deprecated element.

See corresponding docs for further information.

Can use the entityName of the holder of the attribute certificate, the serialNumber of attribute certificate and the serialNumber of the associated certificate of the given of the X509AttributeCertSelector.

Parameters

xselector:X509AttributeCertStoreSelector: The selector with the search criteria.
attrs:String[]: Attributes which contain the attribute certificates in the LDAP directory.
attrNames:String[]: Attribute names in the LDAP directory which correspond to the subjectAttributeNames.
subjectAttributeNames:String[]: Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory

Returns:List<E>

A list of found DER encoded attribute certificates.

Exceptions

StoreException:: if an error occurs while searching.

certSubjectSerialSearch back to summary

certSubjectSerialSearch	back to summary
private List<E> certSubjectSerialSearch(X509CertStoreSelector xselector, String[] attrs, String[] attrNames, String[] subjectAttributeNames) throws StoreException References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information. Can use the subject and serial and the subject and serialNumber of the certificate of the given of the X509CertStoreSelector. If a certificate for checking is given this has higher precedence. Parameters xselector:X509CertStoreSelector The selector with the search criteria. attrs:String[] Attributes which contain the certificates in the LDAP directory. attrNames:String[] Attribute names in teh LDAP directory which correspond to the subjectAttributeNames. subjectAttributeNames:String[] Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory Returns:List<E> A list of found DER encoded certificates. Exceptions StoreException: if an error occurs while searching.

private List<E> certSubjectSerialSearch(X509CertStoreSelector xselector, String[] attrs, String[] attrNames, String[] subjectAttributeNames) throws StoreException

References Deprecated

X509CertStoreSelector is deprecated or references (maybe indirectly) at least one deprecated element.

See corresponding docs for further information.

Can use the subject and serial and the subject and serialNumber of the certificate of the given of the X509CertStoreSelector. If a certificate for checking is given this has higher precedence.

Parameters

xselector:X509CertStoreSelector: The selector with the search criteria.
attrs:String[]: Attributes which contain the certificates in the LDAP directory.
attrNames:String[]: Attribute names in teh LDAP directory which correspond to the subjectAttributeNames.
subjectAttributeNames:String[]: Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory

Returns:List<E>

A list of found DER encoded certificates.

Exceptions

StoreException:: if an error occurs while searching.

connectLDAP	back to summary
private DirContext connectLDAP() throws NamingException

createAttributeCertificates	back to summary
private Set<E> createAttributeCertificates(List<E> list, X509AttributeCertStoreSelector xselector) throws StoreException References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information.

createCerts	back to summary
private Set<E> createCerts(List<E> list, X509CertStoreSelector xselector) throws StoreException References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information.

createCRLs	back to summary
private Set<E> createCRLs(List<E> list, X509CRLStoreSelector xselector) throws StoreException

createCrossCertificatePairs	back to summary
private Set<E> createCrossCertificatePairs(List<E> list, X509CertPairStoreSelector xselector) throws StoreException

cRLIssuerSearch	back to summary
private List<E> cRLIssuerSearch(X509CRLStoreSelector xselector, String[] attrs, String[] attrNames, String[] issuerAttributeNames) throws StoreException Can use the issuer of the given of the X509CRLStoreSelector. Parameters xselector:X509CRLStoreSelector The selector with the search criteria. attrs:String[] Attributes which contain the attribute certificates in the LDAP directory. attrNames:String[] Attribute names in the LDAP directory which correspond to the subjectAttributeNames. issuerAttributeNames:String[] Issuer attribute names (like "CN", "O", "OU") to use to search in the LDAP directory Returns:List<E> A list of found DER encoded CRLs. Exceptions StoreException: if an error occurs while searching.

cRLIssuerSearch

back to summary

private List<E> cRLIssuerSearch(X509CRLStoreSelector xselector, String[] attrs, String[] attrNames, String[] issuerAttributeNames) throws StoreException

Can use the issuer of the given of the X509CRLStoreSelector.

Parameters

xselector:X509CRLStoreSelector: The selector with the search criteria.
attrs:String[]: Attributes which contain the attribute certificates in the LDAP directory.
attrNames:String[]: Attribute names in the LDAP directory which correspond to the subjectAttributeNames.
issuerAttributeNames:String[]: Issuer attribute names (like "CN", "O", "OU") to use to search in the LDAP directory

Returns:List<E>

A list of found DER encoded CRLs.

Exceptions

StoreException:: if an error occurs while searching.

crossCertificatePairSubjectSearch back to summary

crossCertificatePairSubjectSearch	back to summary
private List<E> crossCertificatePairSubjectSearch(X509CertPairStoreSelector xselector, String[] attrs, String[] attrNames, String[] subjectAttributeNames) throws StoreException Can use the subject of the forward certificate of the set certificate pair or the subject of the forward `org.bouncycastle.x509.X509CertStoreSelector` of the given selector. Parameters xselector:X509CertPairStoreSelector The selector with the search criteria. attrs:String[] Attributes which contain the attribute certificates in the LDAP directory. attrNames:String[] Attribute names in the LDAP directory which correspond to the subjectAttributeNames. subjectAttributeNames:String[] Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory Returns:List<E> A list of found DER encoded certificate pairs. Exceptions StoreException: if an error occurs while searching.

private List<E> crossCertificatePairSubjectSearch(X509CertPairStoreSelector xselector, String[] attrs, String[] attrNames, String[] subjectAttributeNames) throws StoreException

Can use the subject of the forward certificate of the set certificate pair or the subject of the forward org.bouncycastle.x509.X509CertStoreSelector of the given selector.

Parameters

xselector:X509CertPairStoreSelector: The selector with the search criteria.
attrs:String[]: Attributes which contain the attribute certificates in the LDAP directory.
attrNames:String[]: Attribute names in the LDAP directory which correspond to the subjectAttributeNames.
subjectAttributeNames:String[]: Subject attribute names (like "CN", "O", "OU") to use to search in the LDAP directory

Returns:List<E>

A list of found DER encoded certificate pairs.

Exceptions

StoreException:: if an error occurs while searching.

getAACertificates back to summary

getAACertificates	back to summary
public Collection<E> getAACertificates(X509AttributeCertStoreSelector selector) throws StoreException References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information. Returns attribute certificates for an attribute authority The aAcertificate holds the privileges of an attribute authority. Parameters selector:X509AttributeCertStoreSelector The selector to find the attribute certificates. Returns:Collection<E> A possible empty collection with attribute certificates.

public Collection<E> getAACertificates(X509AttributeCertStoreSelector selector) throws StoreException

References Deprecated

X509AttributeCertStoreSelector is deprecated or references (maybe indirectly) at least one deprecated element.

See corresponding docs for further information.

Returns attribute certificates for an attribute authority

The aAcertificate holds the privileges of an attribute authority.

Parameters

selector:X509AttributeCertStoreSelector: The selector to find the attribute certificates.

Returns:Collection<E>

A possible empty collection with attribute certificates.

getAttributeAuthorityRevocationLists	back to summary
public Collection<E> getAttributeAuthorityRevocationLists(X509CRLStoreSelector selector) throws StoreException Returns the revocation list for revoked attribute certificates for an attribute authority The attributeAuthorityList holds a list of AA certificates that have been revoked. Parameters selector:X509CRLStoreSelector The CRL selector to use to find the CRLs. Returns:Collection<E> A possible empty collection with CRLs

getAttributeAuthorityRevocationLists

back to summary

public Collection<E> getAttributeAuthorityRevocationLists(X509CRLStoreSelector selector) throws StoreException

Returns the revocation list for revoked attribute certificates for an attribute authority

The attributeAuthorityList holds a list of AA certificates that have been revoked.

Parameters

selector:X509CRLStoreSelector: The CRL selector to use to find the CRLs.

Returns:Collection<E>

A possible empty collection with CRLs

getAttributeCertificateAttributes back to summary

getAttributeCertificateAttributes	back to summary
public Collection<E> getAttributeCertificateAttributes(X509AttributeCertStoreSelector selector) throws StoreException References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information. Returns an attribute certificate for an user. The attributeCertificateAttribute holds the privileges of a user Parameters selector:X509AttributeCertStoreSelector The selector to find the attribute certificates. Returns:Collection<E> A possible empty collection with attribute certificates.

public Collection<E> getAttributeCertificateAttributes(X509AttributeCertStoreSelector selector) throws StoreException

References Deprecated

X509AttributeCertStoreSelector is deprecated or references (maybe indirectly) at least one deprecated element.

See corresponding docs for further information.

Returns an attribute certificate for an user.

The attributeCertificateAttribute holds the privileges of a user

Parameters

selector:X509AttributeCertStoreSelector: The selector to find the attribute certificates.

Returns:Collection<E>

A possible empty collection with attribute certificates.

getAttributeCertificateRevocationLists	back to summary
public Collection<E> getAttributeCertificateRevocationLists(X509CRLStoreSelector selector) throws StoreException Returns the revocation list for revoked attribute certificates. The attributeCertificateRevocationList holds a list of attribute certificates that have been revoked. Parameters selector:X509CRLStoreSelector The CRL selector to use to find the CRLs. Returns:Collection<E> A possible empty collection with CRLs.

getAttributeCertificateRevocationLists

back to summary

public Collection<E> getAttributeCertificateRevocationLists(X509CRLStoreSelector selector) throws StoreException

Returns the revocation list for revoked attribute certificates.

The attributeCertificateRevocationList holds a list of attribute certificates that have been revoked.

Parameters

selector:X509CRLStoreSelector: The CRL selector to use to find the CRLs.

Returns:Collection<E>

A possible empty collection with CRLs.

getAttributeDescriptorCertificates back to summary

getAttributeDescriptorCertificates	back to summary
public Collection<E> getAttributeDescriptorCertificates(X509AttributeCertStoreSelector selector) throws StoreException References Deprecated `X509AttributeCertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information. Returns an attribute certificate for an authority The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules. Parameters selector:X509AttributeCertStoreSelector The selector to find the attribute certificates. Returns:Collection<E> A possible empty collection with attribute certificates.

public Collection<E> getAttributeDescriptorCertificates(X509AttributeCertStoreSelector selector) throws StoreException

References Deprecated

X509AttributeCertStoreSelector is deprecated or references (maybe indirectly) at least one deprecated element.

See corresponding docs for further information.

Returns an attribute certificate for an authority

The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules.

Parameters

selector:X509AttributeCertStoreSelector: The selector to find the attribute certificates.

Returns:Collection<E>

A possible empty collection with attribute certificates.

getAuthorityRevocationLists	back to summary
public Collection<E> getAuthorityRevocationLists(X509CRLStoreSelector selector) throws StoreException Returns the CRLs for issued certificates for other CAs matching the given selector. The authorityRevocationList attribute includes revocation information regarding certificates issued to other CAs. Parameters selector:X509CRLStoreSelector The CRL selector to use to find the CRLs. Returns:Collection<E> A possible empty collection with CRLs

getAuthorityRevocationLists

back to summary

public Collection<E> getAuthorityRevocationLists(X509CRLStoreSelector selector) throws StoreException

Returns the CRLs for issued certificates for other CAs matching the given selector.
The authorityRevocationList attribute includes revocation information regarding certificates issued to other CAs.

Parameters

selector:X509CRLStoreSelector: The CRL selector to use to find the CRLs.

Returns:Collection<E>

A possible empty collection with CRLs

getCACertificates back to summary

getCACertificates	back to summary
public Collection<E> getCACertificates(X509CertStoreSelector selector) throws StoreException References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information. Returns CA certificates. The cACertificate attribute of a CA's directory entry shall be used to store self-issued certificates (if any) and certificates issued to this CA by CAs in the same realm as this CA. Parameters selector:X509CertStoreSelector The selector to find the certificates. Returns:Collection<E> A possible empty collection with certificates.

public Collection<E> getCACertificates(X509CertStoreSelector selector) throws StoreException

References Deprecated

X509CertStoreSelector is deprecated or references (maybe indirectly) at least one deprecated element.

See corresponding docs for further information.

Returns CA certificates.

The cACertificate attribute of a CA's directory entry shall be used to store self-issued certificates (if any) and certificates issued to this CA by CAs in the same realm as this CA.

Parameters

selector:X509CertStoreSelector: The selector to find the certificates.

Returns:Collection<E>

A possible empty collection with certificates.

getCertificateIssuer	back to summary
private X500Principal getCertificateIssuer(X509Certificate cert)

getCertificateRevocationLists	back to summary
public Collection<E> getCertificateRevocationLists(X509CRLStoreSelector selector) throws StoreException Returns the certificate revocation lists for revoked certificates. Parameters selector:X509CRLStoreSelector The CRL selector to use to find the CRLs. Returns:Collection<E> A possible empty collection with CRLs.

getCertificateRevocationLists

back to summary

public Collection<E> getCertificateRevocationLists(X509CRLStoreSelector selector) throws StoreException

Returns the certificate revocation lists for revoked certificates.

Parameters

selector:X509CRLStoreSelector: The CRL selector to use to find the CRLs.

Returns:Collection<E>

A possible empty collection with CRLs.

getCrossCertificatePairs back to summary

getCrossCertificatePairs	back to summary
public Collection<E> getCrossCertificatePairs(X509CertPairStoreSelector selector) throws StoreException Returns cross certificate pairs. Parameters selector:X509CertPairStoreSelector The selector to use to find the cross certificates. Returns:Collection<E> A possible empty collection with `X509CertificatePair`s

public Collection<E> getCrossCertificatePairs(X509CertPairStoreSelector selector) throws StoreException

Returns cross certificate pairs.

Parameters

selector:X509CertPairStoreSelector: The selector to use to find the cross certificates.

Returns:Collection<E>

A possible empty collection with X509CertificatePairs

getDeltaCertificateRevocationLists	back to summary
public Collection<E> getDeltaCertificateRevocationLists(X509CRLStoreSelector selector) throws StoreException Returns the delta revocation list for revoked certificates. Parameters selector:X509CRLStoreSelector The CRL selector to use to find the CRLs. Returns:Collection<E> A possible empty collection with CRLs.

getDeltaCertificateRevocationLists

back to summary

public Collection<E> getDeltaCertificateRevocationLists(X509CRLStoreSelector selector) throws StoreException

Returns the delta revocation list for revoked certificates.

Parameters

selector:X509CRLStoreSelector: The CRL selector to use to find the CRLs.

Returns:Collection<E>

A possible empty collection with CRLs.

getFromCache	back to summary
private List<E> getFromCache(String searchCriteria)

getSubjectAsString	back to summary
private String getSubjectAsString(X509CertStoreSelector xselector) References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information.

getUserCertificates back to summary

getUserCertificates	back to summary
public Collection<E> getUserCertificates(X509CertStoreSelector selector) throws StoreException References Deprecated `X509CertStoreSelector` is deprecated or references (maybe indirectly) at least one deprecated element. See corresponding docs for further information. Returns end certificates. The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules. Parameters selector:X509CertStoreSelector The selector to find the certificates. Returns:Collection<E> A possible empty collection with certificates.

public Collection<E> getUserCertificates(X509CertStoreSelector selector) throws StoreException

References Deprecated

X509CertStoreSelector is deprecated or references (maybe indirectly) at least one deprecated element.

See corresponding docs for further information.

Returns end certificates.

The attributeDescriptorCertificate is self signed by a source of authority and holds a description of the privilege and its delegation rules.

Parameters

selector:X509CertStoreSelector: The selector to find the certificates.

Returns:Collection<E>

A possible empty collection with certificates.

parseDN	back to summary
private String parseDN(String subject, String dNAttributeName)

search back to summary

search	back to summary
private List<E> search(String[] attributeNames, String attributeValue, String[] attrs) throws StoreException Returns a `List` of encodings of the certificates, attribute certificates, CRL or certificate pairs. Parameters attributeNames:String[] The attribute names to look for in the LDAP. attributeValue:String The value the attribute name must have. attrs:String[] The attributes in the LDAP which hold the certificate, attribute certificate, certificate pair or CRL in a found entry. Returns:List<E> A `List` of byte arrays with the encodings. Exceptions StoreException: if an error occurs getting the results from the LDAP directory.

private List<E> search(String[] attributeNames, String attributeValue, String[] attrs) throws StoreException

Returns a List of encodings of the certificates, attribute certificates, CRL or certificate pairs.

Parameters

attributeNames:String[]: The attribute names to look for in the LDAP.
attributeValue:String: The value the attribute name must have.
attrs:String[]: The attributes in the LDAP which hold the certificate, attribute certificate, certificate pair or CRL in a found entry.

Returns:List<E>

A List of byte arrays with the encodings.

Exceptions

StoreException:: if an error occurs getting the results from the LDAP directory.

splitString	back to summary
private String[] splitString(String str)

public Class LDAPStoreHelper

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail