|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Object | +--iaik.x509.attr.V2Form
This class implements the AC type V2Form
.
The
Internet Attribute Certificate Profile for Authorization
(RFC 3281) specifies the V2Form
type as a TO BE USED option for
identifying the issuer
of
an attribute certificate (entity who signs the attribute certificate):
AttCertIssuer ::= CHOICE { v1Form GeneralNames, -- MUST NOT be used in this -- profile v2Form [0] V2Form -- v2 only } V2Form ::= SEQUENCE { issuerName GeneralNames OPTIONAL, baseCertificateID [0] IssuerSerial OPTIONAL, objectDigestInfo [1] ObjectDigestInfo OPTIONAL -- issuerName MUST be present in this profile -- baseCertificateID and objectDigestInfo MUST NOT -- be present in this profile } ACs conforming to this profile MUST use the v2Form choice, which MUST contain one and only one GeneralName in the issuerName, which MUST contain a non-empty distinguished name in the directoryName field. This means that all AC issuers MUST have non-empty distinguished names. ACs conforming to this profile MUST omit the baseCertificateID and objectDigestInfo fields. Part of the reason for the use of the v2Form containing only an issuerName is that it means that the AC issuer does not have to know which PKC the AC verifier will use for it (the AC issuer). Using the baseCertificateID field to reference the AC issuer would mean that the AC verifier would have to trust the PKC that the AC issuer chose (for itself) at AC creation time.When creating a V2Form an application may {@ink #V2Form(GeneralNames) supply} the required GeneralNames structure or {@link #V2Form(Name) specify} the distingished name of the issuer, e.g.:
Name issuer = ...; V2Form v2Form = new V2Form(issuer);
AttributeCertificate
,
IssuerSerial
,
ObjectDigestInfo
,
GeneralNames
,
V1Form
Fields inherited from interface iaik.x509.attr.AttCertIssuer |
V1_FORM, V2_FORM |
Constructor Summary | |
V2Form(ASN1Object obj)
Creates a V2Form from its ASN.1 representation. |
|
V2Form(GeneralNames issuerName)
Creates a V2Form from the given GeneralNames. |
|
V2Form(GeneralNames issuerName,
IssuerSerial baseCertificateID,
ObjectDigestInfo objectDigestInfo)
Creates a V2Form object from given
issuerName, baseCertificateID and ObjectDigestInfo. |
|
V2Form(Name issuerName)
Creates a V2Form for the given issuer name. |
Method Summary | |
void |
decode(ASN1Object obj)
Decodes a V2Form from its ASN.1 representation. |
boolean |
equals(Object obj)
Compares this V2Form to the specified object. |
IssuerSerial |
getBaseCertificateID()
Gets the baseCertificateID of this V2Form, if set. |
GeneralNames |
getIssuerName()
Gets the IssuerName of this V2Form, if set. |
ObjectDigestInfo |
getObjectDigestInfo()
Gets the objectDigestInfo of this V2Form, if set. |
int |
getVForm()
Returns 2 (v2Form -- the version this AttcertIssuer represents). |
int |
hashCode()
Returns a hashcode for this V2Form. |
ASN1Object |
toASN1Object()
Returns this V2Form as ASN1Object. |
String |
toString()
Returns a string giving some information about this V2Form object. |
Methods inherited from class java.lang.Object |
clone, finalize, getClass, notify, notifyAll, wait, wait, wait |
Constructor Detail |
public V2Form(GeneralNames issuerName)
issuerName
- the GeneralNames identifying the AC issuerpublic V2Form(Name issuerName)
A GeneralName for the given directoryName is internally created, according to the requirements of RFC 3281:
ACs conforming to this profile MUST use the v2Form choice, which MUST contain one and only one GeneralName in the issuerName, which MUST contain a non-empty distinguished name in the directoryName field. This means that all AC issuers MUST have non-empty distinguished names.
issuerName
- the name of the AC issuerpublic V2Form(GeneralNames issuerName, IssuerSerial baseCertificateID, ObjectDigestInfo objectDigestInfo)
V2Form
object from given
issuerName, baseCertificateID and ObjectDigestInfo.issuerName
- the issuer namebaseCertificateID
- the baseCertificateIDobjectDigestInfo
- the ObjectDigestInfopublic V2Form(ASN1Object obj) throws CodingException
obj
- the V2Form as ASN1ObjectCodingException
- if an decoding/parsing error occurs or the
the information contained is not appropriate
for a V2FormMethod Detail |
public GeneralNames getIssuerName()
public IssuerSerial getBaseCertificateID()
public ObjectDigestInfo getObjectDigestInfo()
public ASN1Object toASN1Object()
toASN1Object
in interface AttCertIssuer
public void decode(ASN1Object obj) throws CodingException
decode
in interface AttCertIssuer
obj
- the V2Form as ASN1ObjectCodingException
- if an decoding/parsing error occurs or the
the information contained is not appropriate
for a V2Formpublic boolean equals(Object obj)
V2Form
to the specified object.equals
in interface AttCertIssuer
equals
in class Object
obj
- the object to compare this V2Form
against.true
, if the given object is equal to this
V2Form
,
false
otherwisepublic int hashCode()
hashCode
in interface AttCertIssuer
hashCode
in class Object
public int getVForm()
getVForm
in interface AttCertIssuer
public String toString()
V2Form
object.toString
in interface AttCertIssuer
toString
in class Object
|
This Javadoc may contain text parts from Internet Standard specifications (RFC 2459, 3280, 3039, 2560, 1521, 821, 822, 2253, 1319, 1321, ,2630, 2631, 2268, 3058, 2984, 2104, 2144, 2040, 2311, 2279, see copyright note) and RSA Data Security Public-Key Cryptography Standards (PKCS#1,3,5,7,8,9,10,12, see copyright note). | ||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |