rfc3280certpathutilities.html

kjlj oipipi poipoipo ipo [pipoi

</DL>
</DL>
<HR>

<A NAME="NAME_CONSTRAINTS"><!-- --></A><H3>
NAME_CONSTRAINTS</H3>
<PRE>
protected static final java.lang.String <B>NAME_CONSTRAINTS</B></PRE>
<DL>
<DL>
</DL>
</DL>
<HR>

<A NAME="AUTHORITY_KEY_IDENTIFIER"><!-- --></A><H3>
AUTHORITY_KEY_IDENTIFIER</H3>
<PRE>
protected static final java.lang.String <B>AUTHORITY_KEY_IDENTIFIER</B></PRE>
<DL>
<DL>
</DL>
</DL>
<HR>

<A NAME="KEY_USAGE"><!-- --></A><H3>
KEY_USAGE</H3>
<PRE>
protected static final java.lang.String <B>KEY_USAGE</B></PRE>
<DL>
<DL>
</DL>
</DL>
<HR>

<A NAME="CRL_NUMBER"><!-- --></A><H3>
CRL_NUMBER</H3>
<PRE>
protected static final java.lang.String <B>CRL_NUMBER</B></PRE>
<DL>
<DL>
</DL>
</DL>
<HR>

<A NAME="ANY_POLICY"><!-- --></A><H3>
ANY_POLICY</H3>
<PRE>
protected static final java.lang.String <B>ANY_POLICY</B></PRE>
<DL>
<DL>
<DT><B>See Also:</B><DD><A HREF="../../../../constant-values.html#org.bouncycastle.jce.provider.RFC3280CertPathUtilities.ANY_POLICY">Constant Field Values</A></DL>
</DL>
<HR>

<A NAME="KEY_CERT_SIGN"><!-- --></A><H3>
KEY_CERT_SIGN</H3>
<PRE>
protected static final int <B>KEY_CERT_SIGN</B></PRE>
<DL>
<DL>
<DT><B>See Also:</B><DD><A HREF="../../../../constant-values.html#org.bouncycastle.jce.provider.RFC3280CertPathUtilities.KEY_CERT_SIGN">Constant Field Values</A></DL>
</DL>
<HR>

<A NAME="CRL_SIGN"><!-- --></A><H3>
CRL_SIGN</H3>
<PRE>
protected static final int <B>CRL_SIGN</B></PRE>
<DL>
<DL>
<DT><B>See Also:</B><DD><A HREF="../../../../constant-values.html#org.bouncycastle.jce.provider.RFC3280CertPathUtilities.CRL_SIGN">Constant Field Values</A></DL>
</DL>
<HR>

<A NAME="crlReasons"><!-- --></A><H3>
crlReasons</H3>
<PRE>
protected static final java.lang.String[] <B>crlReasons</B></PRE>
<DL>
<DL>
</DL>
</DL>

<!-- ========= CONSTRUCTOR DETAIL ======== -->

<A NAME="constructor_detail"><!-- --></A>
<TABLE BORDER="1" WIDTH="100%" CELLPADDING="3" CELLSPACING="0" SUMMARY="">
<TR BGCOLOR="#CCCCFF" CLASS="TableHeadingColor">
<TH ALIGN="left" COLSPAN="1"><FONT SIZE="+2">
<B>Constructor Detail</B></FONT></TH>
</TR>
</TABLE>

<A NAME="RFC3280CertPathUtilities()"><!-- --></A><H3>
RFC3280CertPathUtilities</H3>
<PRE>
public <B>RFC3280CertPathUtilities</B>()</PRE>
<DL>
</DL>

<!-- ============ METHOD DETAIL ========== -->

<A NAME="method_detail"><!-- --></A>
<TABLE BORDER="1" WIDTH="100%" CELLPADDING="3" CELLSPACING="0" SUMMARY="">
<TR BGCOLOR="#CCCCFF" CLASS="TableHeadingColor">
<TH ALIGN="left" COLSPAN="1"><FONT SIZE="+2">
<B>Method Detail</B></FONT></TH>
</TR>
</TABLE>

<A NAME="processCRLB2(org.bouncycastle.asn1.x509.DistributionPoint, java.lang.Object, java.security.cert.X509CRL)"><!-- --></A><H3>
processCRLB2</H3>
<PRE>
protected static void <B>processCRLB2</B>(<A HREF="../../../../org/bouncycastle/asn1/x509/DistributionPoint.html" title="class in org.bouncycastle.asn1.x509">DistributionPoint</A>&nbsp;dp,
                                   java.lang.Object&nbsp;cert,
                                   java.security.cert.X509CRL&nbsp;crl)
                            throws <A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></PRE>
<DL>
<DD>If the complete CRL includes an issuing distribution point (IDP) CRL
 extension check the following:
 <p/>
 (i) If the distribution point name is present in the IDP CRL extension
 and the distribution field is present in the DP, then verify that one of
 the names in the IDP matches one of the names in the DP. If the
 distribution point name is present in the IDP CRL extension and the
 distribution field is omitted from the DP, then verify that one of the
 names in the IDP matches one of the names in the cRLIssuer field of the
 DP.
 </p>
 <p/>
 (ii) If the onlyContainsUserCerts boolean is asserted in the IDP CRL
 extension, verify that the certificate does not include the basic
 constraints extension with the cA boolean asserted.
 </p>
 <p/>
 (iii) If the onlyContainsCACerts boolean is asserted in the IDP CRL
 extension, verify that the certificate includes the basic constraints
 extension with the cA boolean asserted.
 </p>
 <p/>
 (iv) Verify that the onlyContainsAttributeCerts boolean is not asserted.
 </p>
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>dp</CODE> - The distribution point.<DD><CODE>cert</CODE> - The certificate.<DD><CODE>crl</CODE> - The CRL.
<DT><B>Throws:</B>
<DD><CODE><A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></CODE> - if one of the conditions is not met or an error occurs.</DL>
</DD>
</DL>
<HR>

<A NAME="processCRLB1(org.bouncycastle.asn1.x509.DistributionPoint, java.lang.Object, java.security.cert.X509CRL)"><!-- --></A><H3>
processCRLB1</H3>
<PRE>
protected static void <B>processCRLB1</B>(<A HREF="../../../../org/bouncycastle/asn1/x509/DistributionPoint.html" title="class in org.bouncycastle.asn1.x509">DistributionPoint</A>&nbsp;dp,
                                   java.lang.Object&nbsp;cert,
                                   java.security.cert.X509CRL&nbsp;crl)
                            throws <A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></PRE>
<DL>
<DD>If the DP includes cRLIssuer, then verify that the issuer field in the
 complete CRL matches cRLIssuer in the DP and that the complete CRL
 contains an issuing distribution point extension with the indirectCRL
 boolean asserted. Otherwise, verify that the CRL issuer matches the
 certificate issuer.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>dp</CODE> - The distribution point.<DD><CODE>cert</CODE> - The certificate ot attribute certificate.<DD><CODE>crl</CODE> - The CRL for <code>cert</code>.
<DT><B>Throws:</B>
<DD><CODE><A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></CODE> - if one of the above conditions does not apply or an error
                            occurs.</DL>
</DD>
</DL>
<HR>

<A NAME="processCRLD(java.security.cert.X509CRL, org.bouncycastle.asn1.x509.DistributionPoint)"><!-- --></A><H3>
processCRLD</H3>
<PRE>
protected static org.bouncycastle.jce.provider.ReasonsMask <B>processCRLD</B>(java.security.cert.X509CRL&nbsp;crl,
                                                                       <A HREF="../../../../org/bouncycastle/asn1/x509/DistributionPoint.html" title="class in org.bouncycastle.asn1.x509">DistributionPoint</A>&nbsp;dp)
                                                                throws <A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></PRE>
<DL>
<DD><DL>

<DT><B>Throws:</B>
<DD><CODE><A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></CODE></DL>
</DD>
</DL>
<HR>

<A NAME="processCRLF(java.security.cert.X509CRL, java.lang.Object, java.security.cert.X509Certificate, java.security.PublicKey, org.bouncycastle.x509.ExtendedPKIXParameters, java.util.List)"><!-- --></A><H3>
processCRLF</H3>
<PRE>
protected static java.util.Set <B>processCRLF</B>(java.security.cert.X509CRL&nbsp;crl,
                                           java.lang.Object&nbsp;cert,
                                           java.security.cert.X509Certificate&nbsp;defaultCRLSignCert,
                                           java.security.PublicKey&nbsp;defaultCRLSignKey,
                                           <A HREF="../../../../org/bouncycastle/x509/ExtendedPKIXParameters.html" title="class in org.bouncycastle.x509">ExtendedPKIXParameters</A>&nbsp;paramsPKIX,
                                           java.util.List&nbsp;certPathCerts)
                                    throws <A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></PRE>
<DL>
<DD>Obtain and validate the certification path for the complete CRL issuer.
 If a key usage extension is present in the CRL issuer's certificate,
 verify that the cRLSign bit is set.
<P>
<DD><DL>
<DT><B>Parameters:</B><DD><CODE>crl</CODE> - CRL which contains revocation information for the certificate
                           <code>cert</code>.<DD><CODE>cert</CODE> - The attribute certificate or certificate to check if it is
                           revoked.<DD><CODE>defaultCRLSignCert</CODE> - The issuer certificate of the certificate <code>cert</code>.<DD><CODE>defaultCRLSignKey</CODE> - The public key of the issuer certificate
                           <code>defaultCRLSignCert</code>.<DD><CODE>paramsPKIX</CODE> - paramsPKIX PKIX parameters.<DD><CODE>certPathCerts</CODE> - The certificates on the certification path.
<DT><B>Returns:</B><DD>A <code>Set</code> with all keys of possible CRL issuer
         certificates.
<DT><B>Throws:</B>
<DD><CODE><A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></CODE> - if the CRL is not valid or the status cannot be checked or
                            some error occurs.</DL>
</DD>
</DL>
<HR>

<A NAME="processCRLG(java.security.cert.X509CRL, java.util.Set)"><!-- --></A><H3>
processCRLG</H3>
<PRE>
protected static java.security.PublicKey <B>processCRLG</B>(java.security.cert.X509CRL&nbsp;crl,
                                                     java.util.Set&nbsp;keys)
                                              throws <A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></PRE>
<DL>
<DD><DL>

<DT><B>Throws:</B>
<DD><CODE><A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></CODE></DL>
</DD>
</DL>
<HR>

<A NAME="processCRLH(java.util.Set, java.security.PublicKey)"><!-- --></A><H3>
processCRLH</H3>
<PRE>
protected static java.security.cert.X509CRL <B>processCRLH</B>(java.util.Set&nbsp;deltacrls,
                                                        java.security.PublicKey&nbsp;key)
                                                 throws <A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></PRE>
<DL>
<DD><DL>

<DT><B>Throws:</B>
<DD><CODE><A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></CODE></DL>
</DD>
</DL>
<HR>

<A NAME="processCRLA1i(java.util.Date, org.bouncycastle.x509.ExtendedPKIXParameters, java.security.cert.X509Certificate, java.security.cert.X509CRL)"><!-- --></A><H3>
processCRLA1i</H3>
<PRE>
protected static java.util.Set <B>processCRLA1i</B>(java.util.Date&nbsp;currentDate,
                                             <A HREF="../../../../org/bouncycastle/x509/ExtendedPKIXParameters.html" title="class in org.bouncycastle.x509">ExtendedPKIXParameters</A>&nbsp;paramsPKIX,
                                             java.security.cert.X509Certificate&nbsp;cert,
                                             java.security.cert.X509CRL&nbsp;crl)
                                      throws <A HREF="../../../../org/bouncycastle/jce/provider/AnnotatedException.html" title="class in org.bouncycastle.jce.provider">AnnotatedException</A></PRE>
<DL>
<DD><DL>

<DT><B>Throws:</B>