History

My first initial commit with all of mine experimental changes.

Dmitry Kabak (userdima committed 13 years ago

Commit d37b88d1 parent 3f5b46618352 files · +2598093 −-8690Browse files

Showing the changes to java/pkg/sun/security/x509/PKIXExtensions.java (1 of 18352 files). Show all

Unified · Split

java/pkg/sun/security/x509/PKIXExtensions.java+270−0
@@ -0,0 +1,270 @@
1+/*
2+ * Copyright (c) 1997, 2009, Oracle and/or its affiliates. All rights reserved.
3+ * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4+ *
5+ * This code is free software; you can redistribute it and/or modify it
6+ * under the terms of the GNU General Public License version 2 only, as
7+ * published by the Free Software Foundation. Oracle designates this
8+ * particular file as subject to the "Classpath" exception as provided
9+ * by Oracle in the LICENSE file that accompanied this code.
10+ *
11+ * This code is distributed in the hope that it will be useful, but WITHOUT
12+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14+ * version 2 for more details (a copy is included in the LICENSE file that
15+ * accompanied this code).
16+ *
17+ * You should have received a copy of the GNU General Public License version
18+ * 2 along with this work; if not, write to the Free Software Foundation,
19+ * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
20+ *
21+ * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
22+ * or visit www.oracle.com if you need additional information or have any
23+ * questions.
24+ */
25+
26+package sun.security.x509;
27+
28+import java.io.*;
29+
30+import sun.security.util.*;
31+
32+/**
33+ * Lists all the object identifiers of the X509 extensions of the PKIX profile.
34+ *
35+ * <p>Extensions are addiitonal attributes which can be inserted in a X509
36+ * v3 certificate. For example a "Driving License Certificate" could have
37+ * the driving license number as a extension.
38+ *
39+ * <p>Extensions are represented as a sequence of the extension identifier
40+ * (Object Identifier), a boolean flag stating whether the extension is to
41+ * be treated as being critical and the extension value itself (this is again
42+ * a DER encoding of the extension value).
43+ *
44+ * @see Extension
45+ *
46+ *
47+ * @author Amit Kapoor
48+ * @author Hemma Prafullchandra
49+ */
50+public class PKIXExtensions {
51+ // The object identifiers
52+ private static final int AuthorityKey_data [] = { 2, 5, 29, 35 };
53+ private static final int SubjectKey_data [] = { 2, 5, 29, 14 };
54+ private static final int KeyUsage_data [] = { 2, 5, 29, 15 };
55+ private static final int PrivateKeyUsage_data [] = { 2, 5, 29, 16 };
56+ private static final int CertificatePolicies_data [] = { 2, 5, 29, 32 };
57+ private static final int PolicyMappings_data [] = { 2, 5, 29, 33 };
58+ private static final int SubjectAlternativeName_data [] = { 2, 5, 29, 17 };
59+ private static final int IssuerAlternativeName_data [] = { 2, 5, 29, 18 };
60+ private static final int SubjectDirectoryAttributes_data [] = { 2, 5, 29, 9 };
61+ private static final int BasicConstraints_data [] = { 2, 5, 29, 19 };
62+ private static final int NameConstraints_data [] = { 2, 5, 29, 30 };
63+ private static final int PolicyConstraints_data [] = { 2, 5, 29, 36 };
64+ private static final int CRLDistributionPoints_data [] = { 2, 5, 29, 31 };
65+ private static final int CRLNumber_data [] = { 2, 5, 29, 20 };
66+ private static final int IssuingDistributionPoint_data [] = { 2, 5, 29, 28 };
67+ private static final int DeltaCRLIndicator_data [] = { 2, 5, 29, 27 };
68+ private static final int ReasonCode_data [] = { 2, 5, 29, 21 };
69+ private static final int HoldInstructionCode_data [] = { 2, 5, 29, 23 };
70+ private static final int InvalidityDate_data [] = { 2, 5, 29, 24 };
71+ private static final int ExtendedKeyUsage_data [] = { 2, 5, 29, 37 };
72+ private static final int InhibitAnyPolicy_data [] = { 2, 5, 29, 54 };
73+ private static final int CertificateIssuer_data [] = { 2, 5, 29, 29 };
74+ private static final int AuthInfoAccess_data [] = { 1, 3, 6, 1, 5, 5, 7, 1, 1};
75+ private static final int SubjectInfoAccess_data [] = { 1, 3, 6, 1, 5, 5, 7, 1, 11};
76+ private static final int FreshestCRL_data [] = { 2, 5, 29, 46 };
77+ private static final int OCSPNoCheck_data [] = { 1, 3, 6, 1, 5, 5, 7,
78+ 48, 1, 5};
79+
80+ /**
81+ * Identifies the particular public key used to sign the certificate.
82+ */
83+ public static final ObjectIdentifier AuthorityKey_Id;
84+
85+ /**
86+ * Identifies the particular public key used in an application.
87+ */
88+ public static final ObjectIdentifier SubjectKey_Id;
89+
90+ /**
91+ * Defines the purpose of the key contained in the certificate.
92+ */
93+ public static final ObjectIdentifier KeyUsage_Id;
94+
95+ /**
96+ * Allows the certificate issuer to specify a different validity period
97+ * for the private key than the certificate.
98+ */
99+ public static final ObjectIdentifier PrivateKeyUsage_Id;
100+
101+ /**
102+ * Contains the sequence of policy information terms.
103+ */
104+ public static final ObjectIdentifier CertificatePolicies_Id;
105+
106+ /**
107+ * Lists pairs of objectidentifiers of policies considered equivalent by the
108+ * issuing CA to the subject CA.
109+ */
110+ public static final ObjectIdentifier PolicyMappings_Id;
111+
112+ /**
113+ * Allows additional identities to be bound to the subject of the certificate.
114+ */
115+ public static final ObjectIdentifier SubjectAlternativeName_Id;
116+
117+ /**
118+ * Allows additional identities to be associated with the certificate issuer.
119+ */
120+ public static final ObjectIdentifier IssuerAlternativeName_Id;
121+
122+ /**
123+ * Identifies additional directory attributes.
124+ * This extension is always non-critical.
125+ */
126+ public static final ObjectIdentifier SubjectDirectoryAttributes_Id;
127+
128+ /**
129+ * Identifies whether the subject of the certificate is a CA and how deep
130+ * a certification path may exist through that CA.
131+ */
132+ public static final ObjectIdentifier BasicConstraints_Id;
133+
134+ /**
135+ * Provides for permitted and excluded subtrees that place restrictions
136+ * on names that may be included within a certificate issued by a given CA.
137+ */
138+ public static final ObjectIdentifier NameConstraints_Id;
139+
140+ /**
141+ * Used to either prohibit policy mapping or limit the set of policies
142+ * that can be in subsequent certificates.
143+ */
144+ public static final ObjectIdentifier PolicyConstraints_Id;
145+
146+ /**
147+ * Identifies how CRL information is obtained.
148+ */
149+ public static final ObjectIdentifier CRLDistributionPoints_Id;
150+
151+ /**
152+ * Conveys a monotonically increasing sequence number for each CRL
153+ * issued by a given CA.
154+ */
155+ public static final ObjectIdentifier CRLNumber_Id;
156+
157+ /**
158+ * Identifies the CRL distribution point for a particular CRL.
159+ */
160+ public static final ObjectIdentifier IssuingDistributionPoint_Id;
161+
162+ /**
163+ * Identifies the delta CRL.
164+ */
165+ public static final ObjectIdentifier DeltaCRLIndicator_Id;
166+
167+ /**
168+ * Identifies the reason for the certificate revocation.
169+ */
170+ public static final ObjectIdentifier ReasonCode_Id;
171+
172+ /**
173+ * This extension provides a registered instruction identifier indicating
174+ * the action to be taken, after encountering a certificate that has been
175+ * placed on hold.
176+ */
177+ public static final ObjectIdentifier HoldInstructionCode_Id;
178+
179+ /**
180+ * Identifies the date on which it is known or suspected that the private
181+ * key was compromised or that the certificate otherwise became invalid.
182+ */
183+ public static final ObjectIdentifier InvalidityDate_Id;
184+ /**
185+ * Identifies one or more purposes for which the certified public key
186+ * may be used, in addition to or in place of the basic purposes
187+ * indicated in the key usage extension field.
188+ */
189+ public static final ObjectIdentifier ExtendedKeyUsage_Id;
190+
191+ /**
192+ * Specifies whether any-policy policy OID is permitted
193+ */
194+ public static final ObjectIdentifier InhibitAnyPolicy_Id;
195+
196+ /**
197+ * Identifies the certificate issuer associated with an entry in an
198+ * indirect CRL.
199+ */
200+ public static final ObjectIdentifier CertificateIssuer_Id;
201+
202+ /**
203+ * This extension indicates how to access CA information and services for
204+ * the issuer of the certificate in which the extension appears.
205+ * This information may be used for on-line certification validation
206+ * services.
207+ */
208+ public static final ObjectIdentifier AuthInfoAccess_Id;
209+
210+ /**
211+ * This extension indicates how to access CA information and services for
212+ * the subject of the certificate in which the extension appears.
213+ */
214+ public static final ObjectIdentifier SubjectInfoAccess_Id;
215+
216+ /**
217+ * Identifies how delta CRL information is obtained.
218+ */
219+ public static final ObjectIdentifier FreshestCRL_Id;
220+
221+ /**
222+ * Identifies the OCSP client can trust the responder for the
223+ * lifetime of the responder's certificate.
224+ */
225+ public static final ObjectIdentifier OCSPNoCheck_Id;
226+
227+ static {
228+ AuthorityKey_Id = ObjectIdentifier.newInternal(AuthorityKey_data);
229+ SubjectKey_Id = ObjectIdentifier.newInternal(SubjectKey_data);
230+ KeyUsage_Id = ObjectIdentifier.newInternal(KeyUsage_data);
231+ PrivateKeyUsage_Id = ObjectIdentifier.newInternal(PrivateKeyUsage_data);
232+ CertificatePolicies_Id =
233+ ObjectIdentifier.newInternal(CertificatePolicies_data);
234+ PolicyMappings_Id = ObjectIdentifier.newInternal(PolicyMappings_data);
235+ SubjectAlternativeName_Id =
236+ ObjectIdentifier.newInternal(SubjectAlternativeName_data);
237+ IssuerAlternativeName_Id =
238+ ObjectIdentifier.newInternal(IssuerAlternativeName_data);
239+ ExtendedKeyUsage_Id = ObjectIdentifier.newInternal(ExtendedKeyUsage_data);
240+ InhibitAnyPolicy_Id = ObjectIdentifier.newInternal(InhibitAnyPolicy_data);
241+ SubjectDirectoryAttributes_Id =
242+ ObjectIdentifier.newInternal(SubjectDirectoryAttributes_data);
243+ BasicConstraints_Id =
244+ ObjectIdentifier.newInternal(BasicConstraints_data);
245+ ReasonCode_Id = ObjectIdentifier.newInternal(ReasonCode_data);
246+ HoldInstructionCode_Id =
247+ ObjectIdentifier.newInternal(HoldInstructionCode_data);
248+ InvalidityDate_Id = ObjectIdentifier.newInternal(InvalidityDate_data);
249+
250+ NameConstraints_Id = ObjectIdentifier.newInternal(NameConstraints_data);
251+ PolicyConstraints_Id =
252+ ObjectIdentifier.newInternal(PolicyConstraints_data);
253+ CRLDistributionPoints_Id =
254+ ObjectIdentifier.newInternal(CRLDistributionPoints_data);
255+ CRLNumber_Id =
256+ ObjectIdentifier.newInternal(CRLNumber_data);
257+ IssuingDistributionPoint_Id =
258+ ObjectIdentifier.newInternal(IssuingDistributionPoint_data);
259+ DeltaCRLIndicator_Id =
260+ ObjectIdentifier.newInternal(DeltaCRLIndicator_data);
261+ CertificateIssuer_Id =
262+ ObjectIdentifier.newInternal(CertificateIssuer_data);
263+ AuthInfoAccess_Id =
264+ ObjectIdentifier.newInternal(AuthInfoAccess_data);
265+ SubjectInfoAccess_Id =
266+ ObjectIdentifier.newInternal(SubjectInfoAccess_data);
267+ FreshestCRL_Id = ObjectIdentifier.newInternal(FreshestCRL_data);
268+ OCSPNoCheck_Id = ObjectIdentifier.newInternal(OCSPNoCheck_data);
269+ }
270+}