org.bouncycastle.cert.ct

Class SignedCertificateTimestampList

java.lang.Object

org.bouncycastle.cert.ct.SignedCertificateTimestampList

public class SignedCertificateTimestampList
extends java.lang.Object

RFC 6962 (CT v1) SignedCertificateTimestampList: the TLS-encoded structure carried inside the embedded-SCT certificate extension and the OCSP SCT-list extension.

     opaque SerializedSCT<1..2^16-1>;

     struct {
         SerializedSCT sct_list<1..2^16-1>;
     } SignedCertificateTimestampList;
 

The list bytes — i.e. what this class consumes — are the unwrapped contents of the extension's OCTET STRING value (the bytes returned by Extension.getExtnValue().getOctets()), not the OCTET STRING header itself.

For RFC 9162 (CT v2), the analogous list type is TransItemList; the two formats are not interchangeable.

See Also:

X509ObjectIdentifiers.id_ce_ct_embeddedSCTList, X509ObjectIdentifiers.id_ocsp_ct_sctList

Constructor Summary

Constructors

Constructor and Description
SignedCertificateTimestampList(SignedCertificateTimestamp[] scts)

Method Summary

Modifier and Type	Method and Description
static SignedCertificateTimestampList	fromExtensions(org.bouncycastle.asn1.x509.Extensions extensions) Recover the v1 SCT list from the X509ObjectIdentifiers.id_ce_ct_embeddedSCTList certificate extension, if present.
byte[]	getEncoded() Serialize the list to its TLS wire form (the bytes that would be carried as the OCTET STRING contents of the embedded-SCT or OCSP-SCT extension's extnValue).
static SignedCertificateTimestampList	getInstance(byte[] encoded) Decode a list from its TLS wire form (the bytes of the extension value's OCTET STRING contents).
java.util.List	getSCTs() The decoded SCTs, in wire order.
int	size()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SignedCertificateTimestampList

public SignedCertificateTimestampList(SignedCertificateTimestamp[] scts)

Method Detail

getInstance

public static SignedCertificateTimestampList getInstance(byte[] encoded)

Decode a list from its TLS wire form (the bytes of the extension value's OCTET STRING contents).

fromExtensions

public static SignedCertificateTimestampList fromExtensions(org.bouncycastle.asn1.x509.Extensions extensions)

Recover the v1 SCT list from the X509ObjectIdentifiers.id_ce_ct_embeddedSCTList certificate extension, if present. Returns null when the extension is absent.

getSCTs

public java.util.List getSCTs()

The decoded SCTs, in wire order.

size

public int size()

getEncoded

public byte[] getEncoded()

Serialize the list to its TLS wire form (the bytes that would be carried as the OCTET STRING contents of the embedded-SCT or OCSP-SCT extension's extnValue).