|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Object | +--com.ibm.security12.sun.security.x509.Extension | +--com.ibm.security12.sun.security.x509.NameConstraintsExtension
This class defines the Name Constraints Extension.
The name constraints extension provides permitted and excluded subtrees that place restrictions on names that may be included within a certificate issued by a given CA. Restrictions may apply to the subject distinguished name or subject alternative names. Any name matching a restriction in the excluded subtrees field is invalid regardless of information appearing in the permitted subtrees.
The ASN.1 syntax for this is:
NameConstraints ::= SEQUENCE { permittedSubtrees [0] GeneralSubtrees OPTIONAL, excludedSubtrees [1] GeneralSubtrees OPTIONAL } GeneralSubtrees ::= SEQUENCE SIZE (1..MAX) OF GeneralSubtree
Extension
,
CertAttrSet
Field Summary | |
static String |
EXCLUDED_SUBTREES
|
static String |
IDENT
Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type. |
static String |
NAME
Attribute names. |
static String |
PERMITTED_SUBTREES
|
Fields inherited from class com.ibm.security12.sun.security.x509.Extension |
critical,
extensionId,
extensionValue |
Constructor Summary | |
NameConstraintsExtension(Boolean critical,
Object value)
Create the extension from the passed DER encoded value. |
|
NameConstraintsExtension(GeneralSubtrees permitted,
GeneralSubtrees excluded)
The default constructor for this class. |
Method Summary | |
void |
decode(InputStream in)
Decode the extension from the InputStream. |
void |
delete(String name)
Delete the attribute value. |
void |
encode(OutputStream out)
Write the extension to the OutputStream. |
Object |
get(String name)
Get the attribute value. |
Enumeration |
getElements()
Return an enumeration of names of attributes existing within this attribute. |
String |
getName()
Return the name of this attribute. |
void |
set(String name,
Object obj)
Set the attribute value. |
String |
toString()
Return the printable string. |
Methods inherited from class com.ibm.security12.sun.security.x509.Extension |
encode,
equals,
getExtensionId,
getExtensionValue,
hashCode,
isCritical |
Methods inherited from class java.lang.Object |
clone,
finalize,
getClass,
notify,
notifyAll,
wait,
wait,
wait |
Field Detail |
public static final String IDENT
public static final String NAME
public static final String PERMITTED_SUBTREES
public static final String EXCLUDED_SUBTREES
Constructor Detail |
public NameConstraintsExtension(GeneralSubtrees permitted, GeneralSubtrees excluded) throws IOException
permitted
- the permitted GeneralSubtrees (null for optional).excluded
- the excluded GeneralSubtrees (null for optional).public NameConstraintsExtension(Boolean critical, Object value) throws IOException
critical
- true if the extension is to be treated as critical.value
- Array of DER encoded bytes of the actual value.Method Detail |
public String toString()
public void decode(InputStream in) throws IOException
in
- the InputStream to unmarshal the contents from.public void encode(OutputStream out) throws IOException
out
- the OutputStream to write the extension to.public void set(String name, Object obj) throws IOException
public Object get(String name) throws IOException
public void delete(String name) throws IOException
public Enumeration getElements()
public String getName()
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |