com.rsa.certj.cert.extensions

Class OCSPAcceptableResponses

java.lang.Object
  |
  +--com.rsa.certj.cert.extensions.X509V3Extension
        |
        +--com.rsa.certj.cert.extensions.OCSPAcceptableResponses

All Implemented Interfaces:

Cloneable, OCSPRequestExtension, Serializable

public class OCSPAcceptableResponses

extends X509V3Extension

implements Cloneable, Serializable, OCSPRequestExtension

This class builds and holds the OCSP-specific AcceptableResponses extension.

The ASN.1 definition is as follows:

 OCSPAcceptableResponses EXTENSION ::= {
   SYNTAX         AcceptableResponses
   IDENTIFIED BY  id-pkix-ocsp-response }
 
 AcceptableResponses ::= SEQUENCE OF OBJECT IDENTIFIER
 id-pkix-ocsp-response::= {id-pkix-ocsp 4}

draft-ietf-pkix-ocspv2-01 defines the following Acceptable Response types:

 id-pkix-ocsp-basic    OBJECT IDENTIFIER ::= { id-pkix-ocsp 1 }
 

See Also

Serialized Form

Field Summary

static byte[]

ID_PKIX_OCSP_BASIC Holds the OCSP Acceptable Basic Response Type OID

Fields inherited from class com.rsa.certj.cert.extensions.X509V3Extension

ARCHIVE_CUTOFF, ARCHIVE_CUTOFF_OID, AUTHORITY_INFO_ACCESS, AUTHORITY_INFO_OID, AUTHORITY_KEY_ID, BASIC_CONSTRAINTS, BIO_INFO, BIO_INFO_OID, CERT_POLICIES, CERTIFICATE_ISSUER, CRL_DISTRIBUTION_POINTS, CRL_NUMBER, CRL_REFERENCE, CRL_REFERENCE_OID, DELTA_CRL_INDICATOR, EXTENDED_KEY_USAGE, HOLD_INSTRUCTION_CODE, INHIBIT_ANY_POLICY, INVALIDITY_DATE, ISSUER_ALT_NAME, ISSUING_DISTRIBUTION_POINT, KEY_USAGE, NAME_CONSTRAINTS, NETSCAPE_BASE_URL, NETSCAPE_BASE_URL_OID, NETSCAPE_CA_POLICY_URL, NETSCAPE_CA_POLICY_URL_OID, NETSCAPE_CA_REVOCATION_URL, NETSCAPE_CA_REVOCATION_URL_OID, NETSCAPE_CERT_RENEWAL_URL, NETSCAPE_CERT_RENEWAL_URL_OID, NETSCAPE_CERT_TYPE, NETSCAPE_CERT_TYPE_OID, NETSCAPE_COMMENT, NETSCAPE_COMMENT_OID, NETSCAPE_REVOCATION_URL, NETSCAPE_REVOCATION_URL_OID, NETSCAPE_SSL_SERVER_NAME, NETSCAPE_SSL_SERVER_NAME_OID, NON_STANDARD_EXTENSION, OCSP_ACCEPTABLE_RESPONSES, OCSP_ACCEPTABLE_RESPONSES_OID, OCSP_NOCHECK, OCSP_NOCHECK_OID, OCSP_NONCE, OCSP_NONCE_OID, OCSP_SERVICE_LOCATOR, OCSP_SERVICE_LOCATOR_OID, POLICY_CONSTRAINTS, POLICY_MAPPINGS, PRIVATE_KEY_USAGE_PERIOD, QC_STATEMENTS, QC_STATEMENTS_OID, REASON_CODE, SUBJECT_ALT_NAME, SUBJECT_DIRECTORY_ATTRIBUTES, SUBJECT_KEY_ID, VERISIGN_CZAG, VERISIGN_CZAG_OID, VERISIGN_FIDELITY_ID, VERISIGN_FIDELITY_ID_OID, VERISIGN_JURISDICTION_HASH, VERISIGN_JURISDICTION_HASH_OID, VERISIGN_NETSCAPE_INBOX_V1, VERISIGN_NETSCAPE_INBOX_V1_OID, VERISIGN_NETSCAPE_INBOX_V2, VERISIGN_NETSCAPE_INBOX_V2_OID, VERISIGN_NON_VERIFIED, VERISIGN_NON_VERIFIED_OID, VERISIGN_SERIAL_NUMBER, VERISIGN_SERIAL_NUMBER_OID, VERISIGN_TOKEN_TYPE, VERISIGN_TOKEN_TYPE_OID

Constructor Summary

OCSPAcceptableResponses()

Constructs an empty OCSPAcceptableResponses object.

Method Summary

void	addAcceptableResponse(byte[] acceptableResponseType, int typeOffset, int typeLen) Add an acceptableResponseType to this extension.
Object	clone() Overrides the default clone method to get a deeper clone.
void	decodeValue(byte[] valueBER, int offset) Decode the value.
int	derEncodeValue(byte[] encoding, int offset) Place the encoding of the value into encoding, beginning at offset.
int	derEncodeValueInit() Initialize for encoding the value.
byte[]	getAcceptableResponse(int index) Get the acceptableResponseType by index.
int	getAcceptableResponseCount() Get the count of acceptableResponseType in this extension.

Methods inherited from class com.rsa.certj.cert.extensions.X509V3Extension

extend, getCriticality, getDEREncoding, getDERLen, getExtensionType, getExtensionTypeString, getInstance, getNextBEROffset, isExtensionType, setCriticality, setEncoding, setSpecialOID, setStandardOID

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ID_PKIX_OCSP_BASIC

public static byte[] ID_PKIX_OCSP_BASIC

Holds the OCSP Acceptable Basic Response Type OID

 id-pkix-ocsp           OBJECT IDENTIFIER ::= { id-ad-ocsp }
 id-pkix-ocsp-basic     OBJECT IDENTIFIER ::= { id-pkix-ocsp 1 }
 

Constructor Detail

OCSPAcceptableResponses

public OCSPAcceptableResponses()

Constructs an empty OCSPAcceptableResponses object.

Method Detail

addAcceptableResponse

public void addAcceptableResponse(byte[] acceptableResponseType,
                                  int typeOffset,
                                  int typeLen)
                           throws CertificateException

Add an acceptableResponseType to this extension.

Parameters

	acceptableResponseType		The byte array that specifies the name.
	typeOffset		The offset to the byte array.
	typeLen		The length of the acceptableResponseType.

Throws

CertificateException - If any value is null.

getAcceptableResponseCount

public int getAcceptableResponseCount()

Get the count of acceptableResponseType in this extension.

Returns

The number of acceptableResponseType in this extension.

getAcceptableResponse

public byte[] getAcceptableResponse(int index)
                             throws InvalidParameterException

Get the acceptableResponseType by index.

Parameters

index

index to the acceptableResponse array in the extension.

Returns

A byte array point to an acceptableResponseType. This value is read only value.

decodeValue

public void decodeValue(byte[] valueBER,
                        int offset)
                 throws CertificateException

Decode the value. The input is the BER encoding that was wrapped in the OCTET STRING.

Overrides

decodeValue in class X509V3Extension

Parameters

	valueBER		The BER encoding of the extension's value.
	offset		The offset into valueBER where the encoding begins.

Throws

CertificateException - If the encoding is invalid for this extension.

derEncodeValueInit

public int derEncodeValueInit()

Initialize for encoding the value.

Overrides

derEncodeValueInit in class X509V3Extension

Returns

How many bytes the encoding will be.

derEncodeValue

public int derEncodeValue(byte[] encoding,
                          int offset)

Place the encoding of the value into encoding, beginning at offset. This is the actual contents that are wrapped in the OCTET STRING (not the surrounding OCTET STRING tag and length).

Overrides

derEncodeValue in class X509V3Extension

Parameters

	encoding		The byte array into which the result will be placed.
	offset		The offest into encoding where the writing is to begin.

Returns

The number of bytes actually placed into encoding.

clone

public Object clone()
             throws CloneNotSupportedException

Overrides the default clone method to get a deeper clone.

Overrides

clone in class X509V3Extension

Returns

A new OCSPNoCheck object, a copy of this object.

Throws

CloneNotSupportedException - If the cloning operation is not successful.