com.tencent.kona.sun.security.x509

Class PrivateKeyUsageExtension

java.lang.Object

com.tencent.kona.sun.security.x509.Extension

com.tencent.kona.sun.security.x509.PrivateKeyUsageExtension

All Implemented Interfaces:

com.tencent.kona.sun.security.util.DerEncoder, java.security.cert.Extension

public class PrivateKeyUsageExtension
extends Extension

This class defines the Private Key Usage Extension.

The Private Key Usage Period extension allows the certificate issuer to specify a different validity period for the private key than the certificate. This extension is intended for use with digital signature keys. This extension consists of two optional components notBefore and notAfter. The private key associated with the certificate should not be used to sign objects before or after the times specified by the two components, respectively.

 PrivateKeyUsagePeriod ::= SEQUENCE {
     notBefore  [0]  GeneralizedTime OPTIONAL,
     notAfter   [1]  GeneralizedTime OPTIONAL }
 

See Also:

Extension

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	NAME

Fields inherited from class com.tencent.kona.sun.security.x509.Extension

critical, extensionId, extensionValue

Constructor Summary

Constructors

Constructor and Description
PrivateKeyUsageExtension(java.lang.Boolean critical, java.lang.Object value) Create the extension from the passed DER encoded value.
PrivateKeyUsageExtension(java.util.Date notBefore, java.util.Date notAfter) The default constructor for PrivateKeyUsageExtension.

Method Summary

Modifier and Type	Method and Description
void	encode(com.tencent.kona.sun.security.util.DerOutputStream out) Write the extension to the OutputStream.
java.lang.String	getName() Return the name of this extension.
java.util.Date	getNotAfter()
java.util.Date	getNotBefore()
java.lang.String	toString() Return the printable string.
void	valid() Verify that the current time is within the validity period.
void	valid(java.util.Date now) Verify that the passed time is within the validity period.

Methods inherited from class com.tencent.kona.sun.security.x509.Extension

encode, equals, getExtensionId, getExtensionValue, getId, getValue, hashCode, isCritical, newExtension

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

NAME

public static final java.lang.String NAME

See Also:

Constant Field Values

Constructor Detail

PrivateKeyUsageExtension

public PrivateKeyUsageExtension(java.util.Date notBefore,
                                java.util.Date notAfter)

The default constructor for PrivateKeyUsageExtension. At least one of the arguments must be non null.

Parameters:

notBefore - the date/time before which the private key should not be used

notAfter - the date/time after which the private key should not be used.

PrivateKeyUsageExtension

public PrivateKeyUsageExtension(java.lang.Boolean critical,
                                java.lang.Object value)
                         throws java.security.cert.CertificateException,
                                java.io.IOException

Create the extension from the passed DER encoded value.

Parameters:

critical - true if the extension is to be treated as critical.

value - an array of DER encoded bytes of the actual value.

Throws:

java.lang.ClassCastException - if value is not an array of bytes

java.security.cert.CertificateException - on certificate parsing errors.

java.io.IOException - on error.

Method Detail

toString

public java.lang.String toString()

Return the printable string.

Overrides:

toString in class Extension

valid

public void valid()
           throws java.security.cert.CertificateNotYetValidException,
                  java.security.cert.CertificateExpiredException

Verify that the current time is within the validity period.

Throws:

java.security.cert.CertificateExpiredException - if the certificate has expired.

java.security.cert.CertificateNotYetValidException - if the certificate is not yet valid.

valid

public void valid(java.util.Date now)
           throws java.security.cert.CertificateNotYetValidException,
                  java.security.cert.CertificateExpiredException

Verify that the passed time is within the validity period.

Throws:

java.security.cert.CertificateExpiredException - if the certificate has expired with respect to the Date supplied.

java.security.cert.CertificateNotYetValidException - if the certificate is not yet valid with respect to the Date supplied.

encode

public void encode(com.tencent.kona.sun.security.util.DerOutputStream out)

Write the extension to the OutputStream.

Specified by:

encode in interface com.tencent.kona.sun.security.util.DerEncoder

Overrides:

encode in class Extension

Parameters:

out - the DerOutputStream to write the extension to.

getNotBefore

public java.util.Date getNotBefore()

getNotAfter

public java.util.Date getNotAfter()

getName

public java.lang.String getName()

Return the name of this extension.

Overrides:

getName in class Extension