Package org.bouncycastle.jcajce

Class PKIXCRLStoreSelector<T extends CRL>

java.lang.Object

org.bouncycastle.jcajce.PKIXCRLStoreSelector<T>

All Implemented Interfaces:

Cloneable, Selector<T>

public class PKIXCRLStoreSelector<T extends CRL>
extends Object
implements Selector<T>

This class is a Selector implementation for X.509 certificate revocation lists.

See Also:

Selector

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	PKIXCRLStoreSelector.Builder

Method Summary

Modifier and Type	Method	Description
Object	clone()	Creates and returns a copy of this Object.
X509Certificate	getCertificateChecking()
static Collection<? extends CRL>	getCRLs(PKIXCRLStoreSelector selector, CertStore certStore)
byte[]	getIssuingDistributionPoint()	Returns the issuing distribution point.
BigInteger	getMaxBaseCRLNumber()	Get the maximum base CRL number.
boolean	isCompleteCRLEnabled()	If true only complete CRLs are returned.
boolean	isDeltaCRLIndicatorEnabled()	Returns if this selector must match CRLs with the delta CRL indicator extension set.
boolean	isIssuingDistributionPointEnabled()	Returns if the issuing distribution point criteria should be applied.
boolean	match(CRL obj)

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

isIssuingDistributionPointEnabled

public boolean isIssuingDistributionPointEnabled()

Returns if the issuing distribution point criteria should be applied. Defaults to false.

You may also set the issuing distribution point criteria if not a missing issuing distribution point should be assumed.

Returns:

Returns if the issuing distribution point check is enabled.

match

public boolean match(CRL obj)

Specified by:

match in interface Selector<T extends CRL>

isDeltaCRLIndicatorEnabled

public boolean isDeltaCRLIndicatorEnabled()

Returns if this selector must match CRLs with the delta CRL indicator extension set. Defaults to false.

Returns:

Returns true if only CRLs with the delta CRL indicator extension are selected.

clone

public Object clone()

Description copied from class: Object

Creates and returns a copy of this Object. The default implementation returns a so-called "shallow" copy: It creates a new instance of the same class and then copies the field values (including object references) from this instance to the new instance. A "deep" copy, in contrast, would also recursively clone nested objects. A subclass that needs to implement this kind of cloning should call super.clone() to create the new instance and then create deep copies of the nested, mutable objects.

Specified by:

clone in interface Selector<T extends CRL>

Overrides:

clone in class Object

Returns:

a copy of this object.

isCompleteCRLEnabled

public boolean isCompleteCRLEnabled()

If true only complete CRLs are returned. Defaults to false.

Returns:

true if only complete CRLs are returned.

getMaxBaseCRLNumber

public BigInteger getMaxBaseCRLNumber()

Get the maximum base CRL number. Defaults to null.

Returns:

Returns the maximum base CRL number.

getIssuingDistributionPoint

public byte[] getIssuingDistributionPoint()

Returns the issuing distribution point. Defaults to null, which is a missing issuing distribution point extension.

The internal byte array is cloned before it is returned.

The criteria must be enable with Builder.setIssuingDistributionPointEnabled(boolean)}.

Returns:

Returns the issuing distribution point.

getCertificateChecking

public X509Certificate getCertificateChecking()

getCRLs

public static Collection<? extends CRL> getCRLs(PKIXCRLStoreSelector selector,
                                                CertStore certStore)
                                         throws CertStoreException

Throws:

CertStoreException