/* * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /** * @author Alexander Y. Kleymenov * @version $Revision$ */ package org.apache.harmony.security.x509; import java.io.IOException; import javax.security.auth.x500.X500Principal; import org.apache.harmony.security.asn1.ASN1Choice; import org.apache.harmony.security.asn1.ASN1Implicit; import org.apache.harmony.security.asn1.ASN1Type; import org.apache.harmony.security.asn1.BerInputStream; import org.apache.harmony.security.x501.Name; /** * The class encapsulates the ASN.1 DER encoding/decoding work * with the DistributionPointName structure which is the part * of X.509 CRL * (as specified in RFC 3280 - * Internet X.509 Public Key Infrastructure. * Certificate and Certificate Revocation List (CRL) Profile. * http://www.ietf.org/rfc/rfc3280.txt): * *
* CRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint * * DistributionPoint ::= SEQUENCE { * distributionPoint [0] DistributionPointName OPTIONAL, * reasons [1] ReasonFlags OPTIONAL, * cRLIssuer [2] GeneralNames OPTIONAL * } * * DistributionPointName ::= CHOICE { * fullName [0] GeneralNames, * nameRelativeToCRLIssuer [1] RelativeDistinguishedName * } * * ReasonFlags ::= BIT STRING { * unused (0), * keyCompromise (1), * cACompromise (2), * affiliationChanged (3), * superseded (4), * cessationOfOperation (5), * certificateHold (6), * privilegeWithdrawn (7), * aACompromise (8) * } **/ public final class DistributionPointName { private final GeneralNames fullName; private final Name nameRelativeToCRLIssuer; public DistributionPointName(GeneralNames fullName) { this.fullName = fullName; this.nameRelativeToCRLIssuer = null; } public DistributionPointName(Name nameRelativeToCRLIssuer) { this.fullName = null; this.nameRelativeToCRLIssuer = nameRelativeToCRLIssuer; } public void dumpValue(StringBuilder sb, String prefix) { sb.append(prefix); sb.append("Distribution Point Name: [\n"); if (fullName != null) { fullName.dumpValue(sb, prefix + " "); } else { sb.append(prefix); sb.append(" "); sb.append(nameRelativeToCRLIssuer.getName(X500Principal.RFC2253)); } sb.append(prefix); sb.append("]\n"); } public static final ASN1Choice ASN1 = new ASN1Choice(new ASN1Type[] { new ASN1Implicit(0, GeneralNames.ASN1), new ASN1Implicit(1, Name.ASN1_RDN) }) { public int getIndex(java.lang.Object object) { DistributionPointName dpn = (DistributionPointName) object; return (dpn.fullName == null) ? 1 : 0; } @Override protected Object getDecodedObject(BerInputStream in) throws IOException { DistributionPointName result = null; if (in.choiceIndex == 0) { result = new DistributionPointName((GeneralNames) in.content); } else { // note: ASN.1 decoder will report an error if index // is neither 0 or 1 result = new DistributionPointName((Name) in.content); } return result; } public Object getObjectToEncode(Object object) { DistributionPointName dpn = (DistributionPointName) object; if (dpn.fullName == null) { return dpn.nameRelativeToCRLIssuer; } else { return dpn.fullName; } } }; }