Class PKIXCRLStoreSelector.Builder
- Enclosing class:
PKIXCRLStoreSelector<T extends CRL>
-
Constructor Summary
ConstructorsConstructorDescriptionBuilder(CRLSelector crlSelector) Constructor initializing a builder with a CertSelector. -
Method Summary
Modifier and TypeMethodDescriptionPKIXCRLStoreSelector<? extends CRL> build()Build a selector.setCompleteCRLEnabled(boolean completeCRLEnabled) If set totrueonly complete CRLs are returned.setDeltaCRLIndicatorEnabled(boolean deltaCRLIndicator) If this is set totruethe CRL reported contains the delta CRL indicator CRL extension.voidsetIssuingDistributionPoint(byte[] issuingDistributionPoint) Sets the issuing distribution point.voidsetIssuingDistributionPointEnabled(boolean issuingDistributionPointEnabled) Enables or disables the issuing distribution point check.voidsetMaxBaseCRLNumber(BigInteger maxBaseCRLNumber) Sets the maximum base CRL number.
-
Constructor Details
-
Builder
Constructor initializing a builder with a CertSelector.- Parameters:
crlSelector- the CertSelector to copy the match details from.
-
-
Method Details
-
setCompleteCRLEnabled
If set totrueonly complete CRLs are returned.setCompleteCRLEnabled(boolean)andsetDeltaCRLIndicatorEnabled(boolean)excluded each other.- Parameters:
completeCRLEnabled-trueif only complete CRLs should be returned.
-
setDeltaCRLIndicatorEnabled
If this is set totruethe CRL reported contains the delta CRL indicator CRL extension.setCompleteCRLEnabled(boolean)andsetDeltaCRLIndicatorEnabled(boolean)excluded each other.- Parameters:
deltaCRLIndicator-trueif the delta CRL indicator extension must be in the CRL.
-
setMaxBaseCRLNumber
Sets the maximum base CRL number. Setting tonulldisables this cheack.This is only meaningful for delta CRLs. Complete CRLs must have a CRL number which is greater or equal than the base number of the corresponding CRL.
- Parameters:
maxBaseCRLNumber- The maximum base CRL number to set.
-
setIssuingDistributionPointEnabled
public void setIssuingDistributionPointEnabled(boolean issuingDistributionPointEnabled) Enables or disables the issuing distribution point check.- Parameters:
issuingDistributionPointEnabled-trueto enable the issuing distribution point check.
-
setIssuingDistributionPoint
public void setIssuingDistributionPoint(byte[] issuingDistributionPoint) Sets the issuing distribution point.The issuing distribution point extension is a CRL extension which identifies the scope and the distribution point of a CRL. The scope contains among others information about revocation reasons contained in the CRL. Delta CRLs and complete CRLs must have matching issuing distribution points.
The byte array is cloned to protect against subsequent modifications.
You must also enable or disable this criteria with
setIssuingDistributionPointEnabled(boolean).- Parameters:
issuingDistributionPoint- The issuing distribution point to set. This is the DER encoded OCTET STRING extension value.- See Also:
-
build
Build a selector.- Returns:
- a new PKIXCRLStoreSelector
-