* Abstract class for a revoked certificate in a CRL. This class is for each entry in the
* revokedCertificates, so it deals with the inner SEQUENCE. The ASN.1 definition for this is:
*
*
* revokedCertificates SEQUENCE OF SEQUENCE {
* userCertificate CertificateSerialNumber,
* revocationDate ChoiceOfTime,
* crlEntryExtensions Extensions OPTIONAL
* -- if present, must be v2
* } OPTIONAL
*
* CertificateSerialNumber ::= INTEGER
*
* Extensions ::= SEQUENCE SIZE (1..MAX) OF Extension
*
* Extension ::= SEQUENCE {
* extnId OBJECT IDENTIFIER,
* critical BOOLEAN DEFAULT FALSE,
* extnValue OCTET STRING
* -- contains a DER encoding of a value
* -- of the type registered for use with
* -- the extnId object identifier value
* }
*
*
* @author Hemma Prafullchandra
* @version 1.6 97/12/10
*/
public class RevokedCertImpl extends RevokedCertificate implements Serializable {
/**
*
*/
private static final long serialVersionUID = -3449642360223397701L;
private SerialNumber serialNumber;
private Date revocationDate;
private CRLExtensions extensions = null;
private byte[] revokedCert;
private final static boolean isExplicit = false;
/**
* Default constructor.
*/
public RevokedCertImpl() {
}
/**
* Constructs a revoked certificate entry using the serial number and
* revocation date.
*
* @param num
* the serial number of the revoked certificate.
* @param date
* the Date on which revocation took place.
*/
public RevokedCertImpl(BigInteger num, Date date) {
this.serialNumber = new SerialNumber(num);
this.revocationDate = date;
}
/**
* Constructs a revoked certificate entry using the serial number,
* revocation date and the entry extensions.
*
* @param num
* the serial number of the revoked certificate.
* @param date
* the Date on which revocation took place.
* @param crlEntryExts
* the extensions for this entry.
*/
public RevokedCertImpl(BigInteger num, Date date, CRLExtensions crlEntryExts) {
this.serialNumber = new SerialNumber(num);
this.revocationDate = date;
this.extensions = crlEntryExts;
}
public byte[] getEncoded() throws CRLException {
// XXX NOT IMPLEMENTED
if (revokedCert == null) {
DerOutputStream os = new DerOutputStream();
try {
encode(os);
} catch (Exception e) {
// revokedCert = null;
}
revokedCert = os.toByteArray();
}
return revokedCert;
}
public boolean hasUnsupportedCriticalExtension() {
// XXX NOT IMPLEMENTED
return true;
}
/**
* Sets extensions for this impl.
*
* @param crlEntryExts
* CRLExtensions
*/
public void setExtensions(CRLExtensions crlEntryExts) {
this.extensions = crlEntryExts;
}
/**
* Unmarshals a revoked certificate from its encoded form.
*
* @param revokedCert
* the encoded bytes.
* @exception CRLException
* on parsing errors.
* @exception X509ExtensionException
* on extension handling errors.
*/
public RevokedCertImpl(byte[] revokedCert) throws CRLException,
X509ExtensionException {
try {
DerValue derValue = new DerValue(revokedCert);
parse(derValue);
} catch (IOException e) {
throw new CRLException("Parsing error: " + e.toString());
}
}
/**
* Unmarshals a revoked certificate from its encoded form.
*
* @param derValue
* the DER value containing the revoked certificate.
* @exception CRLException
* on parsing errors.
* @exception X509ExtensionException
* on extension handling errors.
*/
public RevokedCertImpl(DerValue derValue) throws CRLException,
X509ExtensionException {
parse(derValue);
}
/**
* Returns true if this revoked certificate entry has extensions, otherwise
* false.
*
* @return true if this CRL entry has extensions, otherwise false.
*/
public boolean hasExtensions() {
if (extensions == null)
return false;
else
return true;
}
/**
* Decode a revoked certificate from an input stream.
*
* @param inStrm
* an input stream holding at least one revoked certificate
* @exception CRLException
* on parsing errors.
* @exception X509ExtensionException
* on extension handling errors.
*/
public void decode(InputStream inStrm) throws CRLException,
X509ExtensionException {
try {
DerValue derValue = new DerValue(inStrm);
parse(derValue);
} catch (IOException e) {
throw new CRLException("Parsing error: " + e.toString());
}
}
/**
* Encodes the revoked certificate to an output stream.
*
* @param outStrm
* an output stream to which the encoded revoked certificate is
* written.
* @exception CRLException
* on encoding errors.
* @exception X509ExtensionException
* on extension handling errors.
*/
public void encode(DerOutputStream outStrm) throws CRLException,
X509ExtensionException {
try (DerOutputStream seq = new DerOutputStream()) {
if (revokedCert == null) {
DerOutputStream tmp = new DerOutputStream();
// sequence { serialNumber, revocationDate, extensions }
serialNumber.encode(tmp);
// from 2050 should encode GeneralizedTime
tmp.putUTCTime(revocationDate);
if (extensions != null)
extensions.encode(tmp, isExplicit);
seq.write(DerValue.tag_Sequence, tmp);
revokedCert = seq.toByteArray();
}
outStrm.write(revokedCert);
} catch (IOException e) {
throw new CRLException("Encoding error: " + e.toString());
}
}
/**
* Gets the serial number for this RevokedCertificate, the userCertificate.
*
* @return the serial number.
*/
public BigInteger getSerialNumber() {
return serialNumber.getNumber().toBigInteger();
}
/**
* Gets the revocation date for this RevokedCertificate, the revocationDate.
*
* @return the revocation date.
*/
public Date getRevocationDate() {
return (new Date(revocationDate.getTime()));
}
/**
* Returns extensions for this impl.
*
* @return the CRLExtensions
*/
public CRLExtensions getExtensions() {
return extensions;
}
/**
* Returns a printable string of this revoked certificate.
*
* @return value of this revoked certificate in a printable form.
*/
public String toString() {
StringBuffer sb = new StringBuffer(serialNumber.toString() + " On: " + revocationDate.toString());
if (extensions != null) {
sb.append("\n");
for (int i = 0; i < extensions.size(); i++)
sb.append("Entry Extension[" + i + "]: "
+ (extensions.elementAt(i)).toString());
}
sb.append("\n");
return (sb.toString());
}
/**
* Gets a Set of the extension(s) marked CRITICAL in the
* RevokedCertificate by OID strings.
*
* @return a set of the extension oid strings in the
* Object that are marked critical.
*/
public Setoid string is
* represented by a set of positive whole number separated
* by ".", that means,