com.tencent.kona.sun.security.x509

Class PolicyConstraintsExtension

java.lang.Object

com.tencent.kona.sun.security.x509.Extension

com.tencent.kona.sun.security.x509.PolicyConstraintsExtension

All Implemented Interfaces:

com.tencent.kona.sun.security.util.DerEncoder, java.security.cert.Extension

public class PolicyConstraintsExtension
extends Extension

This class defines the certificate extension which specifies the Policy constraints.

The policy constraints extension can be used in certificates issued to CAs. The policy constraints extension constrains path validation in two ways. It can be used to prohibit policy mapping or require that each certificate in a path contain an acceptable policy identifier.

The ASN.1 syntax for this is (IMPLICIT tagging is defined in the module definition):

 PolicyConstraints ::= SEQUENCE {
     requireExplicitPolicy [0] SkipCerts OPTIONAL,
     inhibitPolicyMapping  [1] SkipCerts OPTIONAL
 }
 SkipCerts ::= INTEGER (0..MAX)
 

See Also:

Extension

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	NAME

Fields inherited from class com.tencent.kona.sun.security.x509.Extension

critical, extensionId, extensionValue

Constructor Summary

Constructors

Constructor and Description
PolicyConstraintsExtension(java.lang.Boolean critical, int require, int inhibit) Create a PolicyConstraintsExtension object with specified criticality and both require explicit policy and inhibit policy mapping.
PolicyConstraintsExtension(java.lang.Boolean critical, java.lang.Object value) Create the extension from its DER encoded value and criticality.
PolicyConstraintsExtension(int require, int inhibit) Create a PolicyConstraintsExtension object with both require explicit policy and inhibit policy mapping.

Method Summary

Modifier and Type	Method and Description
void	encode(com.tencent.kona.sun.security.util.DerOutputStream out) Write the extension to the DerOutputStream.
int	getInhibit()
java.lang.String	getName() Return the name of this extension.
int	getRequire()
java.lang.String	toString() Return the extension as user readable string.

Methods inherited from class com.tencent.kona.sun.security.x509.Extension

encode, equals, getExtensionId, getExtensionValue, getId, getValue, hashCode, isCritical, newExtension

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

NAME

public static final java.lang.String NAME

See Also:

Constant Field Values

Constructor Detail

PolicyConstraintsExtension

public PolicyConstraintsExtension(int require,
                                  int inhibit)

Create a PolicyConstraintsExtension object with both require explicit policy and inhibit policy mapping. The extension is marked non-critical.

Parameters:

require - require explicit policy (-1 for optional).

inhibit - inhibit policy mapping (-1 for optional).

PolicyConstraintsExtension

public PolicyConstraintsExtension(java.lang.Boolean critical,
                                  int require,
                                  int inhibit)

Create a PolicyConstraintsExtension object with specified criticality and both require explicit policy and inhibit policy mapping. At least one should be provided (not -1).

Parameters:

critical - true if the extension is to be treated as critical.

require - require explicit policy (-1 for optional).

inhibit - inhibit policy mapping (-1 for optional).

PolicyConstraintsExtension

public PolicyConstraintsExtension(java.lang.Boolean critical,
                                  java.lang.Object value)
                           throws java.io.IOException

Create the extension from its DER encoded value and criticality.

Parameters:

critical - true if the extension is to be treated as critical.

value - an array of DER encoded bytes of the actual value.

Throws:

java.lang.ClassCastException - if value is not an array of bytes

java.io.IOException - on error.

Method Detail

toString

public java.lang.String toString()

Return the extension as user readable string.

Overrides:

toString in class Extension

encode

public void encode(com.tencent.kona.sun.security.util.DerOutputStream out)

Write the extension to the DerOutputStream.

Specified by:

encode in interface com.tencent.kona.sun.security.util.DerEncoder

Overrides:

encode in class Extension

Parameters:

out - the DerOutputStream to write the extension to.

getRequire

public int getRequire()

getInhibit

public int getInhibit()

getName

public java.lang.String getName()

Return the name of this extension.

Overrides:

getName in class Extension