public class PolicyConstraintsExtension extends Extension
The policy constraints extension can be used in certificates issued to CAs. The policy constraints extension constrains path validation in two ways. It can be used to prohibit policy mapping or require that each certificate in a path contain an acceptable policy identifier.
The ASN.1 syntax for this is (IMPLICIT tagging is defined in the module definition):
PolicyConstraints ::= SEQUENCE {
requireExplicitPolicy [0] SkipCerts OPTIONAL,
inhibitPolicyMapping [1] SkipCerts OPTIONAL
}
SkipCerts ::= INTEGER (0..MAX)
Extension| Modifier and Type | Field and Description |
|---|---|
static java.lang.String |
NAME |
critical, extensionId, extensionValue| Constructor and Description |
|---|
PolicyConstraintsExtension(java.lang.Boolean critical,
int require,
int inhibit)
Create a PolicyConstraintsExtension object with specified
criticality and both require explicit policy and inhibit
policy mapping.
|
PolicyConstraintsExtension(java.lang.Boolean critical,
java.lang.Object value)
Create the extension from its DER encoded value and criticality.
|
PolicyConstraintsExtension(int require,
int inhibit)
Create a PolicyConstraintsExtension object with both
require explicit policy and inhibit policy mapping.
|
| Modifier and Type | Method and Description |
|---|---|
void |
encode(com.tencent.kona.sun.security.util.DerOutputStream out)
Write the extension to the DerOutputStream.
|
int |
getInhibit() |
java.lang.String |
getName()
Return the name of this extension.
|
int |
getRequire() |
java.lang.String |
toString()
Return the extension as user readable string.
|
encode, equals, getExtensionId, getExtensionValue, getId, getValue, hashCode, isCritical, newExtensionpublic static final java.lang.String NAME
public PolicyConstraintsExtension(int require,
int inhibit)
require - require explicit policy (-1 for optional).inhibit - inhibit policy mapping (-1 for optional).public PolicyConstraintsExtension(java.lang.Boolean critical,
int require,
int inhibit)
critical - true if the extension is to be treated as critical.require - require explicit policy (-1 for optional).inhibit - inhibit policy mapping (-1 for optional).public PolicyConstraintsExtension(java.lang.Boolean critical,
java.lang.Object value)
throws java.io.IOException
critical - true if the extension is to be treated as critical.value - an array of DER encoded bytes of the actual value.java.lang.ClassCastException - if value is not an array of bytesjava.io.IOException - on error.