X509CRLSelector JDK 1.6)

public void addIssuer (X500Principal issuer)

Adds a name to the issuerNames criterion.

Adds a name to the issuerNames criterion. The issuer distinguished name in the X509CRL must match at least one of the specified distinguished names.

This method allows the caller to add a name to the set of issuer names which X509CRLs may contain. The specified name is added to any previous value for the issuerNames criterion. If the specified name is a duplicate, it may be ignored.
Parameters:
- issuer - the issuer as X500Principal
Since: 1.5

public void addIssuerName (byte[] name) throws IOException

Adds a name to the issuerNames criterion.

Adds a name to the issuerNames criterion. The issuer distinguished name in the X509CRL must match at least one of the specified distinguished names.

This method allows the caller to add a name to the set of issuer names which X509CRLs may contain. The specified name is added to any previous value for the issuerNames criterion. If the specified name is a duplicate, it may be ignored. If a name is specified as a byte array, it should contain a single DER encoded distinguished name, as defined in X.501. The ASN.1 notation for this structure is as follows.

The name is provided as a byte array. This byte array should contain a single DER encoded distinguished name, as defined in X.501. The ASN.1 notation for this structure appears in the documentation for setIssuerNames(Collection names).

Note that the byte array supplied here is cloned to protect against subsequent modifications.
Parameters:
- name - a byte array containing the name in ASN.1 DER encoded form
Throws:
- IOException - if a parsing error occurs

public void addIssuerName (String name) throws IOException

Denigrated, use X509CRLSelector.addIssuer(X500Principal) or X509CRLSelector.addIssuerName(byte[]) instead.

public Object clone () [Specified in CRLSelector]

Returns a copy of this object.

public X509Certificate getCertificateChecking ()

Returns the certificate being checked.

Returns the certificate being checked. This is not a criterion. Rather,
it is optional information that may help a CertStore
find CRLs that would be relevant when checking revocation for the
specified certificate. If the value returned is null, then
no such optional information is provided.
Returns: the certificate being checked (or null)
See Also: X509CRLSelector.setCertificateChecking(java.security.cert.X509Certificate),

public Date getDateAndTime ()

Returns the dateAndTime criterion.

Returns the dateAndTime criterion. The specified date must be equal to or later than the value of the thisUpdate component of the X509CRL and earlier than the value of the nextUpdate component. There is no match if the X509CRL does not contain a nextUpdate component. If null, no dateAndTime check will be done.

Note that the Date returned is cloned to protect against subsequent modifications.
Returns: the Date to match against (or null)
See Also: X509CRLSelector.setDateAndTime(java.util.Date),

public Collection<Object> getIssuerNames ()

Returns a copy of the issuerNames criterion.

Returns a copy of the issuerNames criterion. The issuer distinguished name in the X509CRL must match at least one of the specified distinguished names. If the value returned is null, any issuer distinguished name will do.

If the value returned is not null, it is a Collection of names. Each name is a String or a byte array representing a distinguished name (in RFC 2253 or ASN.1 DER encoded form, respectively). Note that the Collection returned may contain duplicate names.

If a name is specified as a byte array, it should contain a single DER encoded distinguished name, as defined in X.501. The ASN.1 notation for this structure is given in the documentation for setIssuerNames(Collection names).

Note that a deep copy is performed on the Collection to protect against subsequent modifications.
Returns: a Collection of names (or null)
See Also: X509CRLSelector.setIssuerNames(java.util.Collection),

public Collection<X500Principal> getIssuers ()

Returns the issuerNames criterion.

Returns the issuerNames criterion. The issuer distinguished name in the X509CRL must match at least one of the specified distinguished names. If the value returned is null, any issuer distinguished name will do.

If the value returned is not null, it is a unmodifiable Collection of X500Principals.
Returns: an unmodifiable Collection of names (or null)
Since: 1.5
See Also: X509CRLSelector.setIssuers(java.util.Collection),

public BigInteger getMaxCRL ()

Returns the maxCRLNumber criterion.

Returns the maxCRLNumber criterion. The X509CRL must have a
CRL number extension whose value is less than or equal to the
specified value. If null, no maxCRLNumber check will be
done.
Returns: the maximum CRL number accepted (or null)

public BigInteger getMinCRL ()

Returns the minCRLNumber criterion.

Returns the minCRLNumber criterion. The X509CRL must have a
CRL number extension whose value is greater than or equal to the
specified value. If null, no minCRLNumber check will be done.
Returns: the minimum CRL number accepted (or null)

public boolean match (CRL crl) [Specified in CRLSelector]

Decides whether a CRL should be selected.

Decides whether a CRL should be selected.
Returns: true if the CRL should be selected, false otherwise
Parameters:
- crl - the CRL to be checked

public void setCertificateChecking (X509Certificate cert)

Sets the certificate being checked.

Sets the certificate being checked. This is not a criterion. Rather,
it is optional information that may help a CertStore
find CRLs that would be relevant when checking revocation for the
specified certificate. If null is specified, then no
such optional information is provided.
Parameters:
- cert - the X509Certificate being checked (or null)
See Also: X509CRLSelector.getCertificateChecking(),

public void setDateAndTime (Date dateAndTime)

Sets the dateAndTime criterion.

Sets the dateAndTime criterion. The specified date must be equal to or later than the value of the thisUpdate component of the X509CRL and earlier than the value of the nextUpdate component. There is no match if the X509CRL does not contain a nextUpdate component. If null, no dateAndTime check will be done.

Note that the Date supplied here is cloned to protect against subsequent modifications.
Parameters:
- dateAndTime - the Date to match against (or null)
See Also: X509CRLSelector.getDateAndTime(),

public void setIssuerNames (Collection<Object> names) throws IOException

Note: use X509CRLSelector.setIssuers(Collection) instead or only specify the byte array form of distinguished names when using this method.

Note: use X509CRLSelector.setIssuers(Collection) instead or only specify the byte array form of distinguished names when using this method. See X509CRLSelector.addIssuerName(String) for more information.

Sets the issuerNames criterion. The issuer distinguished name in the X509CRL must match at least one of the specified distinguished names. If null, any issuer distinguished name will do.

This method allows the caller to specify, with a single method call, the complete set of issuer names which X509CRLs may contain. The specified value replaces the previous value for the issuerNames criterion.

The names parameter (if not null) is a Collection of names. Each name is a String or a byte array representing a distinguished name (in RFC 2253 or ASN.1 DER encoded form, respectively). If null is supplied as the value for this argument, no issuerNames check will be performed.

Note that the names parameter can contain duplicate distinguished names, but they may be removed from the Collection of names returned by the getIssuerNames method.

If a name is specified as a byte array, it should contain a single DER encoded distinguished name, as defined in X.501. The ASN.1 notation for this structure is as follows.


 Name ::= CHOICE {
   RDNSequence }

 RDNSequence ::= SEQUENCE OF RelativeDistinguishedName

 RelativeDistinguishedName ::=
   SET SIZE (1 .. MAX) OF AttributeTypeAndValue

 AttributeTypeAndValue ::= SEQUENCE {
   type     AttributeType,
   value    AttributeValue }

 AttributeType ::= OBJECT IDENTIFIER

 AttributeValue ::= ANY DEFINED BY AttributeType
 ....
 DirectoryString ::= CHOICE {
       teletexString           TeletexString (SIZE (1..MAX)),
       printableString         PrintableString (SIZE (1..MAX)),
       universalString         UniversalString (SIZE (1..MAX)),
       utf8String              UTF8String (SIZE (1.. MAX)),
       bmpString               BMPString (SIZE (1..MAX)) }

Note that a deep copy is performed on the Collection to protect against subsequent modifications.
Parameters:
- names - a Collection of names (or null)
Throws:
- IOException - if a parsing error occurs
See Also: X509CRLSelector.getIssuerNames(),

public void setIssuers (Collection<X500Principal> issuers)

Sets the issuerNames criterion.

Sets the issuerNames criterion. The issuer distinguished name in the X509CRL must match at least one of the specified distinguished names. If null, any issuer distinguished name will do.

This method allows the caller to specify, with a single method call, the complete set of issuer names which X509CRLs may contain. The specified value replaces the previous value for the issuerNames criterion.

The names parameter (if not null) is a Collection of X500Principals.

Note that the names parameter can contain duplicate distinguished names, but they may be removed from the Collection of names returned by the getIssuers method.

Note that a copy is performed on the Collection to protect against subsequent modifications.
Parameters:
- issuers - a Collection of X500Principals (or null)
Since: 1.5
See Also: X509CRLSelector.getIssuers(),

public void setMaxCRLNumber (BigInteger maxCRL)

Sets the maxCRLNumber criterion.

Sets the maxCRLNumber criterion. The X509CRL must have a
CRL number extension whose value is less than or equal to the
specified value. If null, no maxCRLNumber check will be
done.
Parameters:
- maxCRL - the maximum CRL number accepted (or null)

public void setMinCRLNumber (BigInteger minCRL)

Sets the minCRLNumber criterion.

Sets the minCRLNumber criterion. The X509CRL must have a
CRL number extension whose value is greater than or equal to the
specified value. If null, no minCRLNumber check will be
done.
Parameters:
- minCRL - the minimum CRL number accepted (or null)

public String toString ()

Returns a printable representation of the X509CRLSelector.

Returns a printable representation of the X509CRLSelector.
Returns: a String describing the contents of the X509CRLSelector.