Package org.bouncycastle.jcajce

Class PKIXCRLStoreSelector<T extends java.security.cert.CRL>

  • All Implemented Interfaces:
    java.lang.Cloneable, Selector<T>
    public class PKIXCRLStoreSelector<T extends java.security.cert.CRL>
extends java.lang.Object
implements Selector<T>
    This class is a Selector implementation for X.509 certificate revocation lists.
    See Also:
    Selector

    • Method Detail

      • isIssuingDistributionPointEnabled

        public boolean isIssuingDistributionPointEnabled()
        Returns if the issuing distribution point criteria should be applied. Defaults to false.

        You may also set the issuing distribution point criteria if not a missing issuing distribution point should be assumed.

        Returns:
        Returns if the issuing distribution point check is enabled.

      • match

        public boolean match​(java.security.cert.CRL obj)
        Description copied from interface: Selector
        Match the passed in object, returning true if it would be selected by this selector, false otherwise.
        Specified by:
        match in interface Selector<T extends java.security.cert.CRL>
        Parameters:
        obj - the object to be matched.
        Returns:
        true if the object is a match for this selector, false otherwise.

      • isDeltaCRLIndicatorEnabled

        public boolean isDeltaCRLIndicatorEnabled()
        Returns if this selector must match CRLs with the delta CRL indicator extension set. Defaults to false.
        Returns:
        Returns true if only CRLs with the delta CRL indicator extension are selected.

      • clone

        public java.lang.Object clone()
        Specified by:
        clone in interface Selector<T extends java.security.cert.CRL>
        Overrides:
        clone in class java.lang.Object

      • isCompleteCRLEnabled

        public boolean isCompleteCRLEnabled()
        If true only complete CRLs are returned. Defaults to false.
        Returns:
        true if only complete CRLs are returned.

      • getMaxBaseCRLNumber

        public java.math.BigInteger getMaxBaseCRLNumber()
        Get the maximum base CRL number. Defaults to null.
        Returns:
        Returns the maximum base CRL number.

      • getIssuingDistributionPoint

        public byte[] getIssuingDistributionPoint()
        Returns the issuing distribution point. Defaults to null, which is a missing issuing distribution point extension.

        The internal byte array is cloned before it is returned.

        The criteria must be enable with Builder.setIssuingDistributionPointEnabled(boolean)}.

        Returns:
        Returns the issuing distribution point.

      • getCertificateChecking

        public java.security.cert.X509Certificate getCertificateChecking()

      • getCRLs

        public static java.util.Collection<? extends java.security.cert.CRL> getCRLs​(PKIXCRLStoreSelector selector,
                                                                             java.security.cert.CertStore certStore)
                                                                      throws java.security.cert.CertStoreException
        Throws:
        java.security.cert.CertStoreException