indirectissuer.java

一个完整的XACML工程,学习XACML技术的好例子!

/*
* Copyright (c) 2006, University of Kent
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without 
* modification, are permitted provided that the following conditions are met:
*
* Redistributions of source code must retain the above copyright notice, this 
* list of conditions and the following disclaimer.
* 
* Redistributions in binary form must reproduce the above copyright notice, 
* this list of conditions and the following disclaimer in the documentation 
* and/or other materials provided with the distribution. 
*
* 1. Neither the name of the University of Kent nor the names of its 
* contributors may be used to endorse or promote products derived from this 
* software without specific prior written permission. 
*
* 2. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS  
* IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
* PURPOSE ARE DISCLAIMED. 
*
* 3. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*
* 4. YOU AGREE THAT THE EXCLUSIONS IN PARAGRAPHS 2 AND 3 ABOVE ARE REASONABLE
* IN THE CIRCUMSTANCES.  IN PARTICULAR, YOU ACKNOWLEDGE (1) THAT THIS
* SOFTWARE HAS BEEN MADE AVAILABLE TO YOU FREE OF CHARGE, (2) THAT THIS
* SOFTWARE IS NOT "PRODUCT" QUALITY, BUT HAS BEEN PRODUCED BY A RESEARCH
* GROUP WHO DESIRE TO MAKE THIS SOFTWARE FREELY AVAILABLE TO PEOPLE WHO WISH
* TO USE IT, AND (3) THAT BECAUSE THIS SOFTWARE IS NOT OF "PRODUCT" QUALITY
* IT IS INEVITABLE THAT THERE WILL BE BUGS AND ERRORS, AND POSSIBLY MORE
* SERIOUS FAULTS, IN THIS SOFTWARE.
*
* 5. This license is governed, except to the extent that local laws
* necessarily apply, by the laws of England and Wales.
*/

/*indirectIssuer EXTENSION ::=
	{
	SYNTAX		NULL
	IDENTIFIED BY 	id-ce-indirectIssuer
	}

The indirect issuer extension is used in either an attribute certificate or a 
public-key certificate containing the subjectDirectoryAttributes extension 
issued to a DIS by an SoA. The presence of this extension means that the subject AA 
(the DIS) is authorized by the SoA to act as a proxy and issue ACs that delegate privileges, 
on behalf of other delegators. This extension is always non-critical, 
since it does not matter to a relying party if it understands this extension 
or not, when the DIS asserts the privileges contained in this certificate by presenting 
this certificate to the RP */


package issrg.ac.attributes;
import issrg.ac.Extension;
import iaik.asn1.*;
import iaik.asn1.structures.*;

/**
 *
 * @author  anhnt
 */
public class IndirectIssuer extends issrg.ac.Extension {
    
    /**
     *The string stores the standard OID for the Indirect_Issuer extension 2.5.29.61
     */

    public static final String INDIRECT_ISSUER_OID = "2.5.29.61";
    
    /**
   * This method registers this extension as an extension with a specific
   * OID. After it has been registered, Extensions can recognise 
   * the extension with this OID.
   */
    
    public static void registerMe() {
        issrg.ac.Extensions.registerExtension(INDIRECT_ISSUER_OID, IndirectIssuer.class);
    }
    
      
    /** Creates a new instance of IndirectIssuer based on an 
     *existing IndirectIssuer extension
     *
     *@param e is an IndirectIssuer extension
     */
    
    public IndirectIssuer(IndirectIssuer e){
      this();
    }
    
    /** 
     * This method creates a default instance of IndirectIssuer extension
     *     
     */
    
    public IndirectIssuer () {
      super(INDIRECT_ISSUER_OID, false);
    }    
    
    public Object clone(){
      return new IndirectIssuer(this);
    }
    
    /**
     * This method constructs the extension based on an ASN1Object object
     *@param ao is the ASN1Object object that is used to construct the IndirectIssuer object.
     */
    
  public IndirectIssuer(ASN1Object ao) throws CodingException{
    super(ao);
  }

  /**
   * This method decodes a given ASN1Object and upon successful decoding sets
   * the IndirectIssuer extension for the AC.
   *
   * @param ao - ASN1Object to decode
   */
  
  public void decode(ASN1Object ao) throws CodingException {
    super.decode(ao);
    if (isCritical()) throw new CodingException("IndirectIssuer extension MUST be non-critical");
  }

  /**
   * This method decodes a given ASN1Object and upon successful decoding sets
   * the extension value for the current IndirectIssuer object.
   *
   * @param ao - ASN1Object to decode
   */
  
  public void decodeValue(ASN1Object ao) throws CodingException{
    super.decodeValue(ao);
    if (!(ao instanceof NULL)){
      throw new CodingException("NULL was expected as the extension value");
    }
  }
  
  /**
   * This method encodes the IndirectIssuer object to an ASN1Object.
   *
   * @return an ASN1Object object.
   */

  public ASN1Object encodeValue() throws CodingException{
    return Null;
  }
}