Class PolicyQualifierInfo
- java.lang.Object
-
- java.security.cert.PolicyQualifierInfo
-
public class PolicyQualifierInfo extends Object
An immutable policy qualifier represented by the ASN.1 PolicyQualifierInfo structure.The ASN.1 definition is as follows:
PolicyQualifierInfo ::= SEQUENCE { policyQualifierId PolicyQualifierId, qualifier ANY DEFINED BY policyQualifierId }A certificate policies extension, if present in an X.509 version 3 certificate, contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers. In an end-entity certificate, these policy information terms indicate the policy under which the certificate has been issued and the purposes for which the certificate may be used. In a CA certificate, these policy information terms limit the set of policies for certification paths which include this certificate.
A
SetofPolicyQualifierInfoobjects are returned by thePolicyNode.getPolicyQualifiersmethod. This allows applications with specific policy requirements to process and validate each policy qualifier. Applications that need to process policy qualifiers should explicitly set thepolicyQualifiersRejectedflag to false (by calling thePKIXParameters.setPolicyQualifiersRejectedmethod) before validating a certification path.Note that the PKIX certification path validation algorithm specifies that any policy qualifier in a certificate policies extension that is marked critical must be processed and validated. Otherwise the certification path must be rejected. If the
policyQualifiersRejectedflag is set to false, it is up to the application to validate all policy qualifiers in this manner in order to be PKIX compliant.Concurrent Access
All
PolicyQualifierInfoobjects must be immutable and thread-safe. That is, multiple threads may concurrently invoke the methods defined in this class on a singlePolicyQualifierInfoobject (or more than one) with no ill effects. RequiringPolicyQualifierInfoobjects to be immutable and thread-safe allows them to be passed around to various pieces of code without worrying about coordinating access.- Since:
- 1.4
-
-
Constructor Summary
Constructors Constructor and Description PolicyQualifierInfo(byte[] encoded)Creates an instance ofPolicyQualifierInfofrom the encoded bytes.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method and Description byte[]getEncoded()Returns the ASN.1 DER encoded form of thisPolicyQualifierInfo.byte[]getPolicyQualifier()Returns the ASN.1 DER encoded form of thequalifierfield of thisPolicyQualifierInfo.StringgetPolicyQualifierId()Returns thepolicyQualifierIdfield of thisPolicyQualifierInfo.StringtoString()Return a printable representation of thisPolicyQualifierInfo.
-
-
-
Constructor Detail
PolicyQualifierInfo
public PolicyQualifierInfo(byte[] encoded) throws IOExceptionCreates an instance ofPolicyQualifierInfofrom the encoded bytes. The encoded byte array is copied on construction.- Parameters:
-
encoded- a byte array containing the qualifier in DER encoding - Throws:
-
IOException- thrown if the byte array does not represent a valid and parsable policy qualifier
-
Method Detail
getPolicyQualifierId
public final String getPolicyQualifierId()
Returns thepolicyQualifierIdfield of thisPolicyQualifierInfo. ThepolicyQualifierIdis an Object Identifier (OID) represented by a set of nonnegative integers separated by periods.- Returns:
-
the OID (never
null)
getEncoded
public final byte[] getEncoded()
Returns the ASN.1 DER encoded form of thisPolicyQualifierInfo.- Returns:
-
the ASN.1 DER encoded bytes (never
null). Note that a copy is returned, so the data is cloned each time this method is called.
getPolicyQualifier
public final byte[] getPolicyQualifier()
Returns the ASN.1 DER encoded form of thequalifierfield of thisPolicyQualifierInfo.- Returns:
-
the ASN.1 DER encoded bytes of the
qualifierfield. Note that a copy is returned, so the data is cloned each time this method is called.
-
Submit a bug or feature
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
Copyright © 1993, 2022, Oracle and/or its affiliates. All rights reserved. Use is subject to license terms. Also see the documentation redistribution policy.
