Package org.wildfly.security.x500.cert

Class PolicyConstraintsExtension

java.lang.Object

org.wildfly.security.x500.cert.X509CertificateExtension

org.wildfly.security.x500.cert.PolicyConstraintsExtension

All Implemented Interfaces:

Extension, ASN1Encodable

public final class PolicyConstraintsExtension
extends X509CertificateExtension

A policy constraints extension as defined by RFC 5280 § 4.2.1.11.

Author:

David M. Lloyd

Constructor Summary

Constructors

Constructor	Description
PolicyConstraintsExtension(int requireExplicitPolicy, int inhibitPolicyMapping)	Construct a new instance.

Method Summary

Modifier and Type	Method	Description
void	encodeTo(ASN1Encoder encoder)	Encode this object.
String	getId()	Get the OID of this extension.

Methods inherited from class org.wildfly.security.x500.cert.X509CertificateExtension

encode, getValue, isCritical

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PolicyConstraintsExtension

public PolicyConstraintsExtension(int requireExplicitPolicy,
                                  int inhibitPolicyMapping)

Construct a new instance.

Parameters:

requireExplicitPolicy - the number of additional certificates that may appear in the path before an explicit policy is required for the entire path (-1 to indicate that no such policy exists)

inhibitPolicyMapping - the number of additional certificates that may appear in the path before the policy mapping is no longer permitted (-1 to indicate that no such policy exists)

Method Detail

getId

public String getId()

Description copied from class: X509CertificateExtension

Get the OID of this extension.

Specified by:

getId in interface Extension

Specified by:

getId in class X509CertificateExtension

Returns:

the OID of this extension (must not be null)

encodeTo

public void encodeTo(ASN1Encoder encoder)

Description copied from interface: ASN1Encodable

Encode this object.

Parameters:

encoder - the encoder (must not be null)