com.tencent.kona.sun.security.x509

Class OCSPNoCheckExtension

java.lang.Object

com.tencent.kona.sun.security.x509.Extension

com.tencent.kona.sun.security.x509.OCSPNoCheckExtension

All Implemented Interfaces:

com.tencent.kona.sun.security.util.DerEncoder, java.security.cert.Extension

public class OCSPNoCheckExtension
extends Extension

Represent the OCSP NoCheck Extension from RFC2560.

A CA may specify that an OCSP client can trust a responder for the lifetime of the responder's certificate. The CA does so by including the extension id-pkix-ocsp-nocheck. This SHOULD be a non-critical extension. The value of the extension should be NULL. CAs issuing such a certificate should realize that a compromise of the responder's key is as serious as the compromise of a CA key used to sign CRLs, at least for the validity period of this certificate. CA's may choose to issue this type of certificate with a very short lifetime and renew it frequently.

 id-pkix-ocsp-nocheck OBJECT IDENTIFIER ::= { id-pkix-ocsp 5 }
 

See Also:

Extension

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	NAME

Fields inherited from class com.tencent.kona.sun.security.x509.Extension

critical, extensionId, extensionValue

Constructor Summary

Constructors

Constructor and Description
OCSPNoCheckExtension() Create a OCSPNoCheckExtension
OCSPNoCheckExtension(java.lang.Boolean critical, java.lang.Object value) Create the extension from the passed DER encoded value.

Method Summary

Modifier and Type	Method and Description
java.lang.String	getName() Return the name of this extension.

Methods inherited from class com.tencent.kona.sun.security.x509.Extension

encode, encode, equals, getExtensionId, getExtensionValue, getId, getValue, hashCode, isCritical, newExtension, toString

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

NAME

public static final java.lang.String NAME

See Also:

Constant Field Values

Constructor Detail

OCSPNoCheckExtension

public OCSPNoCheckExtension()
                     throws java.io.IOException

Create a OCSPNoCheckExtension

Throws:

java.io.IOException

OCSPNoCheckExtension

public OCSPNoCheckExtension(java.lang.Boolean critical,
                            java.lang.Object value)
                     throws java.io.IOException

Create the extension from the passed DER encoded value.

Parameters:

critical - true if the extension is to be treated as critical.

value - an array of DER encoded bytes of the actual value.

Throws:

java.io.IOException - on error.

Method Detail

getName

public java.lang.String getName()

Return the name of this extension.

Overrides:

getName in class Extension