com.tencent.kona.sun.security.provider.certpath

Class OCSPNonceExtension

java.lang.Object

com.tencent.kona.sun.security.x509.Extension

com.tencent.kona.sun.security.provider.certpath.OCSPNonceExtension

All Implemented Interfaces:

com.tencent.kona.sun.security.util.DerEncoder, java.security.cert.Extension

public final class OCSPNonceExtension
extends Extension

Represent the OCSP Nonce Extension. This extension, if present, provides a nonce value in OCSP requests and responses. This will cryptographically bind requests and responses and help to prevent replay attacks (see RFC 6960, section 4.4.1).

See Also:

Extension

Field Summary

Fields inherited from class com.tencent.kona.sun.security.x509.Extension

critical, extensionId, extensionValue

Constructor Summary

Constructors

Constructor and Description
OCSPNonceExtension(boolean isCritical, byte[] incomingNonce) Create an OCSPNonceExtension by providing a nonce value and criticality setting.
OCSPNonceExtension(boolean isCritical, int length) Create an OCSPNonceExtension by providing the nonce length and criticality setting.
OCSPNonceExtension(byte[] incomingNonce) Create an OCSPNonceExtension by providing a nonce value.
OCSPNonceExtension(int length) Create an OCSPNonceExtension by providing the nonce length.

Method Summary

Modifier and Type	Method and Description
java.lang.String	getName() Return the name of the extension as a String
byte[]	getNonceValue() Return the nonce bytes themselves, without any DER encoding.
java.lang.String	toString() Returns a printable representation of the OCSPNonceExtension.

Methods inherited from class com.tencent.kona.sun.security.x509.Extension

encode, encode, equals, getExtensionId, getExtensionValue, getId, getValue, hashCode, isCritical, newExtension

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

OCSPNonceExtension

public OCSPNonceExtension(int length)
                   throws java.io.IOException

Create an OCSPNonceExtension by providing the nonce length. The criticality is set to false, and the OID for the extension will be the value defined by "id-pkix-ocsp-nonce" from RFC 6960.

Parameters:

length - the number of random bytes composing the nonce

Throws:

java.io.IOException - if any errors happen during encoding of the extension.

java.lang.IllegalArgumentException - if length is not a positive integer.

OCSPNonceExtension

public OCSPNonceExtension(boolean isCritical,
                          int length)
                   throws java.io.IOException

Create an OCSPNonceExtension by providing the nonce length and criticality setting. The OID for the extension will be the value defined by "id-pkix-ocsp-nonce" from RFC 6960.

Parameters:

isCritical - a boolean flag indicating whether the criticality bit is set for this extension

length - the number of random bytes composing the nonce

Throws:

java.io.IOException - if any errors happen during encoding of the extension.

java.lang.IllegalArgumentException - if length is not in the range of 1 to 32.

OCSPNonceExtension

public OCSPNonceExtension(byte[] incomingNonce)
                   throws java.io.IOException

Create an OCSPNonceExtension by providing a nonce value. The criticality is set to false, and the OID for the extension will be the value defined by "id-pkix-ocsp-nonce" from RFC 6960.

Parameters:

incomingNonce - The nonce data to be set for the extension. This must be a non-null array of at least one byte long.

Throws:

java.io.IOException - if any errors happen during encoding of the extension.

java.lang.IllegalArgumentException - if the incomingNonce length is not a positive integer.

java.lang.NullPointerException - if the incomingNonce is null.

OCSPNonceExtension

public OCSPNonceExtension(boolean isCritical,
                          byte[] incomingNonce)
                   throws java.io.IOException

Create an OCSPNonceExtension by providing a nonce value and criticality setting. The OID for the extension will be the value defined by "id-pkix-ocsp-nonce" from RFC 6960.

Parameters:

isCritical - a boolean flag indicating whether the criticality bit is set for this extension

incomingNonce - The nonce data to be set for the extension. This must be a non-null array of at least one byte long and can be up to 32 bytes.

Throws:

java.io.IOException - if any errors happen during encoding of the extension.

java.lang.IllegalArgumentException - if the incomingNonce length is not in the range of 1 to 32.

java.lang.NullPointerException - if the incomingNonce is null.

Method Detail

getNonceValue

public byte[] getNonceValue()

Return the nonce bytes themselves, without any DER encoding.

Returns:

A copy of the underlying nonce bytes

toString

public java.lang.String toString()

Returns a printable representation of the OCSPNonceExtension.

Overrides:

toString in class Extension

Returns:

a string representation of the extension.

getName

public java.lang.String getName()

Return the name of the extension as a String

Overrides:

getName in class Extension

Returns:

the name of the extension