org.bouncycastle.x509
public class X509CRLStoreSelector extends X509CRLSelector implements Selector
See Also: Selector X509Store X509StoreCRLCollection
Method Summary | |
---|---|
Object | clone() |
X509AttributeCertificate | getAttrCertificateChecking()
Returns the attribute certificate being checked.
|
static X509CRLStoreSelector | getInstance(X509CRLSelector selector)
Returns an instance of this from a X509CRLSelector .
|
Collection | getIssuers() |
byte[] | getIssuingDistributionPoint()
Returns the issuing distribution point. |
BigInteger | getMaxBaseCRLNumber()
Get the maximum base CRL number. |
boolean | isCompleteCRLEnabled()
If true only complete CRLs are returned. |
boolean | isDeltaCRLIndicatorEnabled()
Returns if this selector must match CRLs with the delta CRL indicator
extension set. |
boolean | isIssuingDistributionPointEnabled()
Returns if the issuing distribution point criteria should be applied.
|
boolean | match(Object obj) |
void | setAttrCertificateChecking(X509AttributeCertificate attrCert)
Sets the attribute certificate being checked. |
void | setCompleteCRLEnabled(boolean completeCRLEnabled)
If set to true only complete CRLs are returned.
|
void | setDeltaCRLIndicatorEnabled(boolean deltaCRLIndicator)
If this is set to true the CRL reported contains the delta
CRL indicator CRL extension.
|
void | setIssuers(Collection issuers) |
void | setIssuingDistributionPoint(byte[] issuingDistributionPoint)
Sets the issuing distribution point.
|
void | setIssuingDistributionPointEnabled(boolean issuingDistributionPointEnabled)
Enables or disables the issuing distribution point check.
|
void | setMaxBaseCRLNumber(BigInteger maxBaseCRLNumber)
Sets the maximum base CRL number. |
Returns: Returns the attribute certificate being checked.
See Also: setAttrCertificateChecking
X509CRLSelector
.
Parameters: selector A X509CRLSelector
instance.
Returns: An instance of an X509CRLStoreSelector
.
Throws: IllegalArgumentException if selector is null or creation fails.
null
,
which is a missing issuing distribution point extension.
The internal byte array is cloned before it is returned.
The criteria must be enable with X509CRLStoreSelector.
Returns: Returns the issuing distribution point.
See Also: (byte[])
null
.
Returns: Returns the maximum base CRL number.
See Also: setMaxBaseCRLNumber
true
only complete CRLs are returned. Defaults to
false
.
Returns: true
if only complete CRLs are returned.
false
.
Returns: Returns true
if only CRLs with the delta CRL
indicator extension are selected.
false
.
You may also set the issuing distribution point criteria if not a missing issuing distribution point should be assumed.
Returns: Returns if the issuing distribution point check is enabled.
null
is specified, then no such
optional information is provided.
Parameters: attrCert the X509AttributeCertificate
being checked (or
null
)
See Also: getAttrCertificateChecking
true
only complete CRLs are returned.
X509CRLStoreSelector and X509CRLStoreSelector excluded each other.
Parameters: completeCRLEnabled true
if only complete CRLs
should be returned.
true
the CRL reported contains the delta
CRL indicator CRL extension.
X509CRLStoreSelector and X509CRLStoreSelector excluded each other.
Parameters: deltaCRLIndicator true
if the delta CRL indicator
extension must be in the CRL.
The issuing distribution point extension is a CRL extension which identifies the scope and the distribution point of a CRL. The scope contains among others information about revocation reasons contained in the CRL. Delta CRLs and complete CRLs must have matching issuing distribution points.
The byte array is cloned to protect against subsequent modifications.
You must also enable or disable this criteria with X509CRLStoreSelector.
Parameters: issuingDistributionPoint The issuing distribution point to set. This is the DER encoded OCTET STRING extension value.
See Also: getIssuingDistributionPoint
Parameters: issuingDistributionPointEnabled true
to enable the
issuing distribution point check.
null
disables
this cheack.
This is only meaningful for delta CRLs. Complete CRLs must have a CRL number which is greater or equal than the base number of the corresponding CRL.
Parameters: maxBaseCRLNumber The maximum base CRL number to set.