193 lines
6.0 KiB
Java
193 lines
6.0 KiB
Java
![]() |
/*
|
||
|
* Copyright (c) 1997, 2013, Oracle and/or its affiliates. All rights reserved.
|
||
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||
|
*
|
||
|
* This code is free software; you can redistribute it and/or modify it
|
||
|
* under the terms of the GNU General Public License version 2 only, as
|
||
|
* published by the Free Software Foundation. Oracle designates this
|
||
|
* particular file as subject to the "Classpath" exception as provided
|
||
|
* by Oracle in the LICENSE file that accompanied this code.
|
||
|
*
|
||
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
||
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||
|
* version 2 for more details (a copy is included in the LICENSE file that
|
||
|
* accompanied this code).
|
||
|
*
|
||
|
* You should have received a copy of the GNU General Public License version
|
||
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
||
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
||
|
*
|
||
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
||
|
* or visit www.oracle.com if you need additional information or have any
|
||
|
* questions.
|
||
|
*/
|
||
|
|
||
|
package java.security.cert;
|
||
|
|
||
|
import java.math.BigInteger;
|
||
|
import java.util.Date;
|
||
|
import javax.security.auth.x500.X500Principal;
|
||
|
|
||
|
import sun.security.x509.X509CRLEntryImpl;
|
||
|
|
||
|
/**
|
||
|
* <p>Abstract class for a revoked certificate in a CRL (Certificate
|
||
|
* Revocation List).
|
||
|
*
|
||
|
* The ASN.1 definition for <em>revokedCertificates</em> is:
|
||
|
* <pre>
|
||
|
* revokedCertificates SEQUENCE OF SEQUENCE {
|
||
|
* userCertificate CertificateSerialNumber,
|
||
|
* revocationDate ChoiceOfTime,
|
||
|
* crlEntryExtensions Extensions OPTIONAL
|
||
|
* -- if present, must be v2
|
||
|
* } OPTIONAL
|
||
|
*
|
||
|
* CertificateSerialNumber ::= INTEGER
|
||
|
*
|
||
|
* Extensions ::= SEQUENCE SIZE (1..MAX) OF Extension
|
||
|
*
|
||
|
* Extension ::= SEQUENCE {
|
||
|
* extnId OBJECT IDENTIFIER,
|
||
|
* critical BOOLEAN DEFAULT FALSE,
|
||
|
* extnValue OCTET STRING
|
||
|
* -- contains a DER encoding of a value
|
||
|
* -- of the type registered for use with
|
||
|
* -- the extnId object identifier value
|
||
|
* }
|
||
|
* </pre>
|
||
|
*
|
||
|
* @see X509CRL
|
||
|
* @see X509Extension
|
||
|
*
|
||
|
* @author Hemma Prafullchandra
|
||
|
* @since 1.2
|
||
|
*/
|
||
|
|
||
|
public abstract class X509CRLEntry implements X509Extension {
|
||
|
|
||
|
/**
|
||
|
* Compares this CRL entry for equality with the given
|
||
|
* object. If the {@code other} object is an
|
||
|
* {@code instanceof} {@code X509CRLEntry}, then
|
||
|
* its encoded form (the inner SEQUENCE) is retrieved and compared
|
||
|
* with the encoded form of this CRL entry.
|
||
|
*
|
||
|
* @param other the object to test for equality with this CRL entry.
|
||
|
* @return true iff the encoded forms of the two CRL entries
|
||
|
* match, false otherwise.
|
||
|
*/
|
||
|
public boolean equals(Object other) {
|
||
|
if (this == other)
|
||
|
return true;
|
||
|
if (!(other instanceof X509CRLEntry))
|
||
|
return false;
|
||
|
try {
|
||
|
byte[] thisCRLEntry = this.getEncoded();
|
||
|
byte[] otherCRLEntry = ((X509CRLEntry)other).getEncoded();
|
||
|
|
||
|
if (thisCRLEntry.length != otherCRLEntry.length)
|
||
|
return false;
|
||
|
for (int i = 0; i < thisCRLEntry.length; i++)
|
||
|
if (thisCRLEntry[i] != otherCRLEntry[i])
|
||
|
return false;
|
||
|
} catch (CRLException ce) {
|
||
|
return false;
|
||
|
}
|
||
|
return true;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Returns a hashcode value for this CRL entry from its
|
||
|
* encoded form.
|
||
|
*
|
||
|
* @return the hashcode value.
|
||
|
*/
|
||
|
public int hashCode() {
|
||
|
int retval = 0;
|
||
|
try {
|
||
|
byte[] entryData = this.getEncoded();
|
||
|
for (int i = 1; i < entryData.length; i++)
|
||
|
retval += entryData[i] * i;
|
||
|
|
||
|
} catch (CRLException ce) {
|
||
|
return(retval);
|
||
|
}
|
||
|
return(retval);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Returns the ASN.1 DER-encoded form of this CRL Entry,
|
||
|
* that is the inner SEQUENCE.
|
||
|
*
|
||
|
* @return the encoded form of this certificate
|
||
|
* @exception CRLException if an encoding error occurs.
|
||
|
*/
|
||
|
public abstract byte[] getEncoded() throws CRLException;
|
||
|
|
||
|
/**
|
||
|
* Gets the serial number from this X509CRLEntry,
|
||
|
* the <em>userCertificate</em>.
|
||
|
*
|
||
|
* @return the serial number.
|
||
|
*/
|
||
|
public abstract BigInteger getSerialNumber();
|
||
|
|
||
|
/**
|
||
|
* Get the issuer of the X509Certificate described by this entry. If
|
||
|
* the certificate issuer is also the CRL issuer, this method returns
|
||
|
* null.
|
||
|
*
|
||
|
* <p>This method is used with indirect CRLs. The default implementation
|
||
|
* always returns null. Subclasses that wish to support indirect CRLs
|
||
|
* should override it.
|
||
|
*
|
||
|
* @return the issuer of the X509Certificate described by this entry
|
||
|
* or null if it is issued by the CRL issuer.
|
||
|
*
|
||
|
* @since 1.5
|
||
|
*/
|
||
|
public X500Principal getCertificateIssuer() {
|
||
|
return null;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Gets the revocation date from this X509CRLEntry,
|
||
|
* the <em>revocationDate</em>.
|
||
|
*
|
||
|
* @return the revocation date.
|
||
|
*/
|
||
|
public abstract Date getRevocationDate();
|
||
|
|
||
|
/**
|
||
|
* Returns true if this CRL entry has extensions.
|
||
|
*
|
||
|
* @return true if this entry has extensions, false otherwise.
|
||
|
*/
|
||
|
public abstract boolean hasExtensions();
|
||
|
|
||
|
/**
|
||
|
* Returns a string representation of this CRL entry.
|
||
|
*
|
||
|
* @return a string representation of this CRL entry.
|
||
|
*/
|
||
|
public abstract String toString();
|
||
|
|
||
|
/**
|
||
|
* Returns the reason the certificate has been revoked, as specified
|
||
|
* in the Reason Code extension of this CRL entry.
|
||
|
*
|
||
|
* @return the reason the certificate has been revoked, or
|
||
|
* {@code null} if this CRL entry does not have
|
||
|
* a Reason Code extension
|
||
|
* @since 1.7
|
||
|
*/
|
||
|
public CRLReason getRevocationReason() {
|
||
|
if (!hasExtensions()) {
|
||
|
return null;
|
||
|
}
|
||
|
return X509CRLEntryImpl.getRevocationReason(this);
|
||
|
}
|
||
|
}
|