All Packages  Class Hierarchy  This Package  Previous  Next  Index

Class netscape.security.x509.NameConstraintsExtension

netscape.security.x509.Extension
   |
   +----netscape.security.x509.NameConstraintsExtension

public class NameConstraintsExtension
extends Extension
implements CertAttrSet
This class defines the Name Constraints Extension.

The name constraints extension provides permitted and excluded subtrees that place restrictions on names that may be included within a certificate issued by a given CA. Restrictions may apply to the subject distinguished name or subject alternative names. Any name matching a restriction in the excluded subtrees field is invalid regardless of information appearing in the permitted subtrees.

The ASN.1 syntax for this is:

 NameConstraints ::= SEQUENCE {
    permittedSubtrees [0]  GeneralSubtrees OPTIONAL,
    excludedSubtrees  [1]  GeneralSubtrees OPTIONAL
 }
 GeneralSubtrees ::= SEQUENCE SIZE (1..MAX) OF GeneralSubtree
 

See Also:
Extension, CertAttrSet

Variable Index

 o EXCLUDED_SUBTREES
 o IDENT
Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.
 o NAME
Attribute names.
 o PERMITTED_SUBTREES

Constructor Index

 o NameConstraintsExtension(Boolean, Object)
Create the extension from the passed DER encoded value.
 o NameConstraintsExtension(GeneralSubtrees, GeneralSubtrees)
The default constructor for this class.

Method Index

 o decode(InputStream)
Decode the extension from the InputStream.
 o delete(String)
Delete the attribute value.
 o encode(OutputStream)
Write the extension to the OutputStream.
 o get(String)
Get the attribute value.
 o getElements()
Return an enumeration of names of attributes existing within this attribute.
 o getName()
Return the name of this attribute.
 o set(String, Object)
Set the attribute value.
 o toString()
Return the printable string.

Variables

 o IDENT
 public static final String IDENT
Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.

 o NAME
 public static final String NAME
Attribute names.

 o PERMITTED_SUBTREES
 public static final String PERMITTED_SUBTREES
 o EXCLUDED_SUBTREES
 public static final String EXCLUDED_SUBTREES

Constructors

 o NameConstraintsExtension
 public NameConstraintsExtension(GeneralSubtrees permitted,
                                 GeneralSubtrees excluded) throws IOException
The default constructor for this class. Either parameter can be set to null to indicate it is omitted but both cannot be null.

Parameters:
permitted - the permitted GeneralSubtrees (null for optional).
excluded - the excluded GeneralSubtrees (null for optional).
 o NameConstraintsExtension
 public NameConstraintsExtension(Boolean critical,
                                 Object value) throws IOException
Create the extension from the passed DER encoded value.

Parameters:
critical - true if the extension is to be treated as critical.
value - Array of DER encoded bytes of the actual value.
Throws: IOException
on error.

Methods

 o toString
 public String toString()
Return the printable string.

Overrides:
toString in class Extension
 o decode
 public void decode(InputStream in) throws IOException
Decode the extension from the InputStream.

Parameters:
in - the InputStream to unmarshal the contents from.
Throws: IOException
on decoding or validity errors.
 o encode
 public void encode(OutputStream out) throws IOException
Write the extension to the OutputStream.

Parameters:
out - the OutputStream to write the extension to.
Throws: IOException
on encoding errors.
 o set
 public void set(String name,
                 Object obj) throws IOException
Set the attribute value.

 o get
 public Object get(String name) throws IOException
Get the attribute value.

 o delete
 public void delete(String name) throws IOException
Delete the attribute value.

 o getElements
 public Enumeration getElements()
Return an enumeration of names of attributes existing within this attribute.

 o getName
 public String getName()
Return the name of this attribute.


All Packages  Class Hierarchy  This Package  Previous  Next  Index