// --- BEGIN COPYRIGHT BLOCK --- // This program is free software; you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation; version 2 of the License. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // // You should have received a copy of the GNU General Public License along // with this program; if not, write to the Free Software Foundation, Inc., // 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. // // (C) 2007 Red Hat, Inc. // All rights reserved. // --- END COPYRIGHT BLOCK --- package netscape.security.x509; import java.io.BufferedOutputStream; import java.io.FileOutputStream; import java.io.IOException; import java.io.InputStream; import java.io.OutputStream; import java.security.cert.CertificateException; import java.util.Enumeration; import java.util.Hashtable; import java.util.Vector; import netscape.security.util.BitArray; import netscape.security.util.DerOutputStream; import org.mozilla.jss.asn1.ASN1Util; import org.mozilla.jss.asn1.InvalidBERException; import org.mozilla.jss.asn1.SEQUENCE; /** * An extension that tells applications where to find the CRL for * this certificate. * *
* cRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint * * DistributionPoint ::= SEQUENCE { * distributionPoint [0] DistributionPointName OPTIONAL, * reasons [1] ReasonFlags OPTIONAL, * cRLIssuer [2] GeneralNames OPTIONAL } * * DistributionPointName ::= CHOICE { * fullName [0] GeneralNames, * nameRelativeToCRLIssuer [1] RelativeDistinguishedName } * * ReasonFlags ::= BIT STRING { * unused (0), * keyCompromise (1), * cACompromise (2), * affiliationChanged (3), * superseded (4), * cessationOfOperation (5), * certificateHold (6) } **/ public class CRLDistributionPointsExtension extends Extension implements CertAttrSet { /** * */ private static final long serialVersionUID = 8551761833349709229L; // vector of CRLDistributionPoint private SEQUENCE distributionPoints = new SEQUENCE(); // Cached DER-encoding to improve performance. private byte[] cachedEncoding = null; /** * This constructor is called by the CertificateExtensions class to decode * an extension whose OID indicates it is a CRLDistributionsPoints * extension. */ public CRLDistributionPointsExtension(Boolean critical, Object value) //throws IOException { try { this.extensionId = PKIXExtensions.CRLDistributionPoints_Id; this.critical = critical.booleanValue(); this.extensionValue = ((byte[]) value).clone(); // decode the value try { SEQUENCE.OF_Template seqOfCRLDP = new SEQUENCE.OF_Template(CRLDistributionPoint.getTemplate()); distributionPoints = (SEQUENCE) ASN1Util.decode(seqOfCRLDP, extensionValue); } catch (InvalidBERException e) { throw new IOException("Invalid BER-encoding: " + e.toString()); } } catch (IOException e) { System.out.println("Big error"); System.out.println(e); e.printStackTrace(); //throw e; } } /** * The Object Identifier for this extension. */ public static final String OID = "2.5.29.31"; /** * Creates a new CRLDistributionPoints extension, with the given * distribution point as the first element. */ public CRLDistributionPointsExtension(CRLDistributionPoint dp) { this.extensionId = PKIXExtensions.CRLDistributionPoints_Id; this.critical = false; distributionPoints.addElement(dp); } /** * Adds an additional distribution point to the end of the sequence. */ public void addPoint(CRLDistributionPoint dp) { distributionPoints.addElement(dp); cachedEncoding = null; } /** * Returns the number of distribution points in the sequence. */ public int getNumPoints() { return distributionPoints.size(); } /** * Returns the DistributionPoint at the given index in the sequence. */ public CRLDistributionPoint getPointAt(int index) { return (CRLDistributionPoint) distributionPoints.elementAt(index); } /** * Sets the criticality of this extension. PKIX dictates that this * extension SHOULD NOT be critical, so applications can make it critical * if they have a very good reason. By default, the extension is not * critical. */ public void setCritical(boolean critical) { this.critical = critical; } /** * Encodes this extension to the given DerOutputStream. * This method re-encodes each time it is called, so it is not very * efficient. */ public void encode(DerOutputStream out) throws IOException { extensionValue = ASN1Util.encode(distributionPoints); super.encode(out); } /** * Should be called if any change is made to this data structure * so that the cached DER encoding can be discarded. */ public void flushCachedEncoding() { cachedEncoding = null; } ///////////////////////////////////////////////////////////// // CertAttrSet interface // This interface is not really appropriate for this extension // because it is so complicated. Therefore, we only provide a // minimal implementation. ///////////////////////////////////////////////////////////// public static final String NAME = "CRLDistributionPoints"; static { try { OIDMap.addAttribute(CRLDistributionPointsExtension.class.getName(), OID, NAME); } catch (CertificateException e) { } } @Override public String toString() { return NAME; } /** * DER-encodes this extension to the given OutputStream. */ public void encode(OutputStream ostream) throws CertificateException, IOException { if (cachedEncoding == null) { // only re-encode if necessary DerOutputStream tmp = new DerOutputStream(); encode(tmp); cachedEncoding = tmp.toByteArray(); } ostream.write(cachedEncoding); } public void decode(InputStream in) throws CertificateException, IOException { throw new IOException("Not supported"); } public void set(String name, Object obj) throws CertificateException, IOException { throw new IOException("Attribute name not recognized by " + "CertAttrSet:CRLDistributionPointsExtension"); } public Object get(String name) throws CertificateException, IOException { throw new IOException("Attribute name not recognized by " + "CertAttrSet:CRLDistributionPointsExtension"); } public void delete(String name) throws CertificateException, IOException { throw new IOException("Attribute name not recognized by " + "CertAttrSet:CRLDistributionPointsExtension"); } /* * TODO use an empty collection to generate these */ public Enumeration