org.bouncycastle.jcajce

Class PKIXCRLStoreSelector<T extends CRL>

java.lang.Object

org.bouncycastle.jcajce.PKIXCRLStoreSelector<T>

All Implemented Interfaces:

Cloneable, Selector<T>

public class PKIXCRLStoreSelector<T extends CRL>
extends Object
implements Selector<T>

This class is a Selector implementation for X.509 certificate revocation lists.

See Also:

Selector

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	PKIXCRLStoreSelector.Builder Builder for a PKIXCRLStoreSelector.

Method Summary

Methods

Modifier and Type	Method and Description
Object	clone()
X509Certificate	getCertificateChecking()
static Collection<? extends CRL>	getCRLs(PKIXCRLStoreSelector selector, CertStore certStore)
byte[]	getIssuingDistributionPoint() Returns the issuing distribution point.
BigInteger	getMaxBaseCRLNumber() Get the maximum base CRL number.
boolean	isCompleteCRLEnabled() If true only complete CRLs are returned.
boolean	isDeltaCRLIndicatorEnabled() Returns if this selector must match CRLs with the delta CRL indicator extension set.
boolean	isIssuingDistributionPointEnabled() Returns if the issuing distribution point criteria should be applied.
boolean	match(CRL obj) Match the passed in object, returning true if it would be selected by this selector, false otherwise.

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

isIssuingDistributionPointEnabled

public boolean isIssuingDistributionPointEnabled()

Returns if the issuing distribution point criteria should be applied. Defaults to false.

You may also set the issuing distribution point criteria if not a missing issuing distribution point should be assumed.

Returns:

Returns if the issuing distribution point check is enabled.

match

public boolean match(CRL obj)

Description copied from interface: Selector

Match the passed in object, returning true if it would be selected by this selector, false otherwise.

Specified by:

match in interface Selector<T extends CRL>

Parameters:

obj - the object to be matched.

Returns:

true if the object is a match for this selector, false otherwise.

isDeltaCRLIndicatorEnabled

public boolean isDeltaCRLIndicatorEnabled()

Returns if this selector must match CRLs with the delta CRL indicator extension set. Defaults to false.

Returns:

Returns true if only CRLs with the delta CRL indicator extension are selected.

clone

public Object clone()

Specified by:

clone in interface Selector<T extends CRL>

Overrides:

clone in class Object

isCompleteCRLEnabled

public boolean isCompleteCRLEnabled()

If true only complete CRLs are returned. Defaults to false.

Returns:

true if only complete CRLs are returned.

getMaxBaseCRLNumber

public BigInteger getMaxBaseCRLNumber()

Get the maximum base CRL number. Defaults to null.

Returns:

Returns the maximum base CRL number.

getIssuingDistributionPoint

public byte[] getIssuingDistributionPoint()

Returns the issuing distribution point. Defaults to null, which is a missing issuing distribution point extension.

The internal byte array is cloned before it is returned.

The criteria must be enable with Builder.setIssuingDistributionPointEnabled(boolean)}.

Returns:

Returns the issuing distribution point.

getCertificateChecking

public X509Certificate getCertificateChecking()

getCRLs

public static Collection<? extends CRL> getCRLs(PKIXCRLStoreSelector selector,
                                CertStore certStore)
                                         throws CertStoreException

Throws:

CertStoreException