Top Description Fields Constructors Methods
org.bouncycastle.pkix.jcajce

pack-priv Class X509CRLStoreSelector

extends X509CRLSelector
implements Selector
Class Inheritance
All Implemented Interfaces
org.bouncycastle.util.Selector, java.lang.Cloneable
Imports
java.io.IOException, java.math.BigInteger, java.security.cert.CRL, .X509CRL, .X509CRLSelector, org.bouncycastle.asn1.ASN1Integer, org.bouncycastle.asn1.x509.Extension, org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils, org.bouncycastle.util.Arrays, .Selector
This class is a Selector implementation for X.509 certificate revocation lists.
See Also
org.bouncycastle.util.Selector

Field Summary

Modifier and TypeField and Description
private boolean
completeCRLEnabled

private boolean
deltaCRLIndicator

private byte[]
issuingDistributionPoint

private boolean
issuingDistributionPointEnabled

private BigInteger
maxBaseCRLNumber

Constructor Summary

AccessConstructor and Description
pack-priv
X509CRLStoreSelector()

Method Summary

Modifier and TypeMethod and Description
public Object
clone()

Overrides java.security.cert.X509CRLSelector.clone.

Implements org.bouncycastle.util.Selector.clone, java.security.cert.CRLSelector.clone.

Returns a copy of this object.
public static X509CRLStoreSelector

Returns:

An instance of an X509CRLStoreSelector.
getInstance(X509CRLSelector
A X509CRLSelector instance.
selector)

Returns an instance of this from a X509CRLSelector.

public byte[]

Returns:

Returns the issuing distribution point.
getIssuingDistributionPoint()

Returns the issuing distribution point.

public BigInteger

Returns:

Returns the maximum base CRL number.
getMaxBaseCRLNumber()

Get the maximum base CRL number.

public boolean

Returns:

true if only complete CRLs are returned.
isCompleteCRLEnabled()

If true only complete CRLs are returned.

public boolean

Returns:

Returns true if only CRLs with the delta CRL indicator extension are selected.
isDeltaCRLIndicatorEnabled()

Returns if this selector must match CRLs with the delta CRL indicator extension set.

public boolean

Returns:

Returns if the issuing distribution point check is enabled.
isIssuingDistributionPointEnabled()

Returns if the issuing distribution point criteria should be applied.

public boolean
match(Object
the object to be matched.
obj)

Implements org.bouncycastle.util.Selector.match.

Match the passed in object, returning true if it would be selected by this selector, false otherwise.
public boolean
match(CRL
the object to be matched.
crl)

Overrides java.security.cert.X509CRLSelector.match.

Implements org.bouncycastle.util.Selector.match, java.security.cert.CRLSelector.match.

Match the passed in object, returning true if it would be selected by this selector, false otherwise.
public void
setCompleteCRLEnabled(boolean
true if only complete CRLs should be returned.
completeCRLEnabled)

If set to true only complete CRLs are returned.

public void
setDeltaCRLIndicatorEnabled(boolean
true if the delta CRL indicator extension must be in the CRL.
deltaCRLIndicator)

If this is set to true the CRL reported contains the delta CRL indicator CRL extension.

public void
setIssuingDistributionPoint(byte[]
The issuing distribution point to set. This is the DER encoded OCTET STRING extension value.
issuingDistributionPoint)

Sets the issuing distribution point.

public void
setIssuingDistributionPointEnabled(boolean
true to enable the issuing distribution point check.
issuingDistributionPointEnabled)

Enables or disables the issuing distribution point check.

public void
setMaxBaseCRLNumber(BigInteger
The maximum base CRL number to set.
maxBaseCRLNumber)

Sets the maximum base CRL number.

Inherited from java.security.cert.X509CRLSelector:
addIssueraddIssuerNameaddIssuerNamegetCertificateCheckinggetDateAndTimegetIssuerNamesgetIssuersgetMaxCRLgetMinCRLsetCertificateCheckingsetDateAndTimesetIssuerNamessetIssuerssetMaxCRLNumbersetMinCRLNumbertoString

Field Detail

completeCRLEnabledback to summary
private boolean completeCRLEnabled
deltaCRLIndicatorback to summary
private boolean deltaCRLIndicator
issuingDistributionPointback to summary
private byte[] issuingDistributionPoint
issuingDistributionPointEnabledback to summary
private boolean issuingDistributionPointEnabled
maxBaseCRLNumberback to summary
private BigInteger maxBaseCRLNumber

Constructor Detail

X509CRLStoreSelectorback to summary
pack-priv X509CRLStoreSelector()

Method Detail

cloneback to summary
public Object clone()

Overrides java.security.cert.X509CRLSelector.clone.

Implements org.bouncycastle.util.Selector.clone, java.security.cert.CRLSelector.clone.

Doc from java.security.cert.X509CRLSelector.clone.

Returns a copy of this object.

Returns:Object

the copy

getInstanceback to summary
public static X509CRLStoreSelector getInstance(X509CRLSelector selector)

Returns an instance of this from a X509CRLSelector.

Parameters
selector:X509CRLSelector

A X509CRLSelector instance.

Returns:X509CRLStoreSelector

An instance of an X509CRLStoreSelector.

Exceptions
IllegalArgumentException:
if selector is null or creation fails.
getIssuingDistributionPointback to summary
public byte[] getIssuingDistributionPoint()

Returns the issuing distribution point. Defaults to null, which is a missing issuing distribution point extension.

The internal byte array is cloned before it is returned.

The criteria must be enable with setIssuingDistributionPointEnabled(boolean).

Returns:byte[]

Returns the issuing distribution point.

See Also
setIssuingDistributionPoint(byte[])
getMaxBaseCRLNumberback to summary
public BigInteger getMaxBaseCRLNumber()

Get the maximum base CRL number. Defaults to null.

Returns:BigInteger

Returns the maximum base CRL number.

See Also
setMaxBaseCRLNumber(BigInteger)
isCompleteCRLEnabledback to summary
public boolean isCompleteCRLEnabled()

If true only complete CRLs are returned. Defaults to false.

Returns:boolean

true if only complete CRLs are returned.

isDeltaCRLIndicatorEnabledback to summary
public boolean isDeltaCRLIndicatorEnabled()

Returns if this selector must match CRLs with the delta CRL indicator extension set. Defaults to false.

Returns:boolean

Returns true if only CRLs with the delta CRL indicator extension are selected.

isIssuingDistributionPointEnabledback to summary
public boolean isIssuingDistributionPointEnabled()

Returns if the issuing distribution point criteria should be applied. Defaults to false.

You may also set the issuing distribution point criteria if not a missing issuing distribution point should be assumed.

Returns:boolean

Returns if the issuing distribution point check is enabled.

matchback to summary
public boolean match(Object obj)

Implements org.bouncycastle.util.Selector.match.

Doc from org.bouncycastle.util.Selector.match.

Match the passed in object, returning true if it would be selected by this selector, false otherwise.

Parameters
obj:Object

the object to be matched.

Returns:boolean

true if the object is a match for this selector, false otherwise.

matchback to summary
public boolean match(CRL crl)

Overrides java.security.cert.X509CRLSelector.match.

Implements org.bouncycastle.util.Selector.match, java.security.cert.CRLSelector.match.

Doc from org.bouncycastle.util.Selector.match.

Match the passed in object, returning true if it would be selected by this selector, false otherwise.

Parameters
crl:CRL

the object to be matched.

Returns:boolean

true if the object is a match for this selector, false otherwise.

setCompleteCRLEnabledback to summary
public void setCompleteCRLEnabled(boolean completeCRLEnabled)

If set to true only complete CRLs are returned.

setCompleteCRLEnabled(boolean) and setDeltaCRLIndicatorEnabled(boolean) excluded each other.

Parameters
completeCRLEnabled:boolean

true if only complete CRLs should be returned.

setDeltaCRLIndicatorEnabledback to summary
public void setDeltaCRLIndicatorEnabled(boolean deltaCRLIndicator)

If this is set to true the CRL reported contains the delta CRL indicator CRL extension.

setCompleteCRLEnabled(boolean) and setDeltaCRLIndicatorEnabled(boolean) excluded each other.

Parameters
deltaCRLIndicator:boolean

true if the delta CRL indicator extension must be in the CRL.

setIssuingDistributionPointback to summary
public void setIssuingDistributionPoint(byte[] issuingDistributionPoint)

Sets the issuing distribution point.

The issuing distribution point extension is a CRL extension which identifies the scope and the distribution point of a CRL. The scope contains among others information about revocation reasons contained in the CRL. Delta CRLs and complete CRLs must have matching issuing distribution points.

The byte array is cloned to protect against subsequent modifications.

You must also enable or disable this criteria with setIssuingDistributionPointEnabled(boolean).

Parameters
issuingDistributionPoint:byte[]

The issuing distribution point to set. This is the DER encoded OCTET STRING extension value.

See Also
getIssuingDistributionPoint()
setIssuingDistributionPointEnabledback to summary
public void setIssuingDistributionPointEnabled(boolean issuingDistributionPointEnabled)

Enables or disables the issuing distribution point check.

Parameters
issuingDistributionPointEnabled:boolean

true to enable the issuing distribution point check.

setMaxBaseCRLNumberback to summary
public void setMaxBaseCRLNumber(BigInteger maxBaseCRLNumber)

Sets the maximum base CRL number. Setting to null disables this cheack.

This is only meaningful for delta CRLs. Complete CRLs must have a CRL number which is greater or equal than the base number of the corresponding CRL.

Parameters
maxBaseCRLNumber:BigInteger

The maximum base CRL number to set.