org.apache.commons.ssl.org.bouncycastle.asn1.isismtt.ocsp

Class CertHash

java.lang.Object

org.apache.commons.ssl.org.bouncycastle.asn1.ASN1Object

org.apache.commons.ssl.org.bouncycastle.asn1.isismtt.ocsp.CertHash

All Implemented Interfaces:

ASN1Encodable

public class CertHash
extends ASN1Object

ISIS-MTT PROFILE: The responder may include this extension in a response to send the hash of the requested certificate to the responder. This hash is cryptographically bound to the certificate and serves as evidence that the certificate is known to the responder (i.e. it has been issued and is present in the directory). Hence, this extension is a means to provide a positive statement of availability as described in T8.[8]. As explained in T13.[1], clients may rely on this information to be able to validate signatures after the expiry of the corresponding certificate. Hence, clients MUST support this extension. If a positive statement of availability is to be delivered, this extension syntax and OID MUST be used.

     CertHash ::= SEQUENCE {
       hashAlgorithm AlgorithmIdentifier,
       certificateHash OCTET STRING
     }
 

Field Summary

Fields

Modifier and Type	Field and Description
private byte[]	certificateHash
private AlgorithmIdentifier	hashAlgorithm

Constructor Summary

Constructors

Modifier	Constructor and Description
	CertHash(AlgorithmIdentifier hashAlgorithm, byte[] certificateHash) Constructor from a given details.
private	CertHash(ASN1Sequence seq) Constructor from ASN1Sequence.

Method Summary

Modifier and Type	Method and Description
byte[]	getCertificateHash()
AlgorithmIdentifier	getHashAlgorithm()
static CertHash	getInstance(Object obj)
ASN1Primitive	toASN1Primitive() Produce an object suitable for an ASN1OutputStream.

Methods inherited from class org.apache.commons.ssl.org.bouncycastle.asn1.ASN1Object

equals, getEncoded, getEncoded, hasEncodedTagValue, hashCode, toASN1Object

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Field Detail

hashAlgorithm

private AlgorithmIdentifier hashAlgorithm

certificateHash

private byte[] certificateHash

Constructor Detail

CertHash

private CertHash(ASN1Sequence seq)

Constructor from ASN1Sequence.

The sequence is of type CertHash:

     CertHash ::= SEQUENCE {
       hashAlgorithm AlgorithmIdentifier,
       certificateHash OCTET STRING
     }
 

Parameters:

seq - The ASN.1 sequence.

CertHash

public CertHash(AlgorithmIdentifier hashAlgorithm,
                byte[] certificateHash)

Constructor from a given details.

Parameters:

hashAlgorithm - The hash algorithm identifier.

certificateHash - The hash of the whole DER encoding of the certificate.

Method Detail

getInstance

public static CertHash getInstance(Object obj)

getHashAlgorithm

public AlgorithmIdentifier getHashAlgorithm()

getCertificateHash

public byte[] getCertificateHash()

toASN1Primitive

public ASN1Primitive toASN1Primitive()

Produce an object suitable for an ASN1OutputStream.

Returns:

     CertHash ::= SEQUENCE {
       hashAlgorithm AlgorithmIdentifier,
       certificateHash OCTET STRING
     }
 

Specified by:

toASN1Primitive in interface ASN1Encodable

Specified by:

toASN1Primitive in class ASN1Object

Returns:

a DERObject