public class ExpiredCertsOnCRL extends V3Extension
ExpiredCertsOnCRL extension.
The ExpiredCertsOnCRL extension is a non critical
ITU-T X509v2 CRL entry extension.
Each extension is associated with a specific certificateExtension
object identifier, derived from:
certificateExtension OBJECT IDENTIFIER ::=
{joint-iso-ccitt(2) ds(5) 29}
id-ce OBJECT IDENTIFIER ::= certificateExtension
The object identifier for the CRLNumber extension
is defined as:
id-ce-cRLReason OBJECT IDENTIFIER ::= { id-ce 60 }
which corresponds to the OID string "2.5.29.60".
The ExpiredCertsOnCRL CRL extension is not specified
by IETF-PKIX. It is defined by the ITU-T Recommendation X.509 and
indicates that a CRL containing this extension will include revocation
status information for certificates that have been already expired.
When used, the ExpiredCertsOnCRL contains the date on
which the CRL starts to keep revocation status information for expired
certificates (i.e. revocation entries are not removed from the CRL
for any certificates that expire at or after the date contained in
the ExpiredCertsOnCRL extension.
ASN.1 definition:
ExpiredCertsOnCRL ::= GeneralizedTime
For adding an ExpiredCertsOnCRL extension object to a X509v2
certificate revocation list, use the addExtension method of
the iaik.x509.X509CRL class:
Date date = ...; ExpiredCertsOnCRL expiredCertsOnCRL = new ExpiredCertsOnCRL(date); X505CRL crl = new X509CRL(); ... crl.addExtension(expiredCertsOnCRL);
To get an ExpiredCertsOnCRL extension from a X509CRL use its
method:
getExtension
X505CRL crl = ...; ExpiredCertsOnCRL expiredCertsOnCRL = (ExpiredCertsOnCRL)crl.getExtension(ExpiredCertsOnCRL.oid); Date date = expiredCertsOnCRL.getDate();
X509CRL| Modifier and Type | Field and Description |
|---|---|
static ObjectID |
oid
The object identifier of this ExpiredCertsOnCRL extension.
|
critical| Constructor and Description |
|---|
ExpiredCertsOnCRL()
Default constructor.
|
ExpiredCertsOnCRL(java.util.Date date)
Creates a new
ExpiredCertsOnCRL extension for the given date. |
| Modifier and Type | Method and Description |
|---|---|
java.util.Date |
getDate()
Returns the date from which on revocation status information
for expired certificates is included in the CRL.
|
ObjectID |
getObjectID()
Returns the object ID of this
ExpiredCertsOnCRL extension |
int |
hashCode()
Returns a hashcode for this identity.
|
void |
init(ASN1Object obj)
Inits this
ExpiredCertsOnCRL implementation with an ASN1object
representing the value of this extension. |
void |
setDate(java.util.Date date)
Sets the date from which on revocation status information
for expired certificates is included in the CRL.
|
ASN1Object |
toASN1Object()
Returns an ASN1Object representing the value of this
ExpiredCertsOnCRL
extension object. |
java.lang.String |
toString()
Returns a string that represents the contents of the
ExpiredCertsOnCRL
extension. |
getName, isCritical, setCriticalpublic static final ObjectID oid
public ExpiredCertsOnCRL()
Creates an empty ExpiredCertsOnCRL object.
Use setDate for specifying the
date, from which on to include revocation status information
for expired certificates, e.g.:
ExpiredCertsOnCRL expiredCertsOnCRL = new ExpiredCertsOnCRL(); Date date = ...; expiredCertsOnCRL.setDate(date);
public ExpiredCertsOnCRL(java.util.Date date)
ExpiredCertsOnCRL extension for the given date.
For instance:
Date date = ...; ExpiredCertsOnCRL expiredCertsOnCRL = new ExpiredCertsOnCRL(date);
date - the date from which on to include revocation
status information for expired certificatesjava.lang.NullPointerException - if the given date value is nullpublic ObjectID getObjectID()
ExpiredCertsOnCRL extensiongetObjectID in class V3Extensionpublic void init(ASN1Object obj) throws X509ExtensionException
ExpiredCertsOnCRL implementation with an ASN1object
representing the value of this extension.
The given ASN1Object represents a GeneraizedTime giving the date from which on revocation status information for expired certificates is included in the CRL.
This method is used by the X509Extensions class when parsing the ASN.1 representation
of a CRL for properly initializing an included
ExpiredCertsOnCRL extension. This method initializes the
extension only with its value, but not with its critical
specification. For that reason, this method shall not be
explicitly called by an application.
init in class V3Extensionobj - the ExpiredCertsOnCRL as ASN1ObjectX509ExtensionException - an error occurs when parsing the
supplied ASN.1 objectpublic ASN1Object toASN1Object()
ExpiredCertsOnCRL
extension object.
The returned ASN1Object is an ASN.1 GenaralizedTime representing the date from which on revocation status information for expired certificates is included in the CRL:
ExpiredCertsOnCRL ::= GenaralizedTime
toASN1Object in class V3ExtensionExpiredCertsOnCRL as ASN1Objectpublic void setDate(java.util.Date date)
ExpiredCertsOnCRL expiredCertsOnCRL = new ExpiredCertsOnCRL(); Date date = ...; expiredCertsOnCRL.setExpiredCertsOnCRL(date);
date - the date from which on to include revocation
status information for expired certificatesjava.lang.NullPointerException - if the given date value is nullpublic java.util.Date getDate()
public int hashCode()
hashCode in class V3Extensionpublic java.lang.String toString()
ExpiredCertsOnCRL
extension.toString in class java.lang.Object