A shadow implementation of the non-working BouncyCastle implementation
of X.509 Attribute Certificates
getAcinfo
public AttributeCertificateInfo getAcinfo()
getAttributes
public ASN1Sequence getAttributes()
getAttributes
public List getAttributes(String oid)
Returns a list of the attributes matching the provided OID.
oid
- Object Identifier, on the form "1.2.3.4"
- List of ASN.1 objects representing the OID type in question
getCertList
public ACCerts getCertList()
getDERObject
public DERObject getDERObject()
Produce an object suitable for an ASN1OutputStream.
AttributeCertificate ::= SEQUENCE {
acinfo AttributeCertificateInfo,
signatureAlgorithm AlgorithmIdentifier,
signatureValue BIT STRING
}
getExtensions
public X509Extensions getExtensions()
getFullAttributes
public FullAttributes getFullAttributes()
getFullyQualifiedAttributes
public List getFullyQualifiedAttributes()
- List of String of the VOMS fully qualified
attributes names (FQANs):
vo[/group[/group2...]][/Role=[role]][/Capability=capability]
getHolder
public Holder getHolder()
getHolderX509
public String getHolderX509()
getHost
public String getHost()
getHostPort
public String getHostPort()
getInstance
public static AttributeCertificate getInstance(InputStream in)
throws IOException
Create an Attribute Certificate from a input stream containing
DER-encoded data
- the Attribute Certificate
getIssuer
public X500Principal getIssuer()
getIssuerX509
public X509Principal getIssuerX509()
getListOfFQAN
public List getListOfFQAN()
- List of FQAN of the VOMS fully qualified
attributes names (FQANs)
getNotAfter
public Date getNotAfter()
throws ParseException
getNotBefore
public Date getNotBefore()
throws ParseException
getPort
public int getPort()
getSerialNumber
public DERInteger getSerialNumber()
getSignature
public byte[] getSignature()
getSignatureAlgorithm
public AlgorithmIdentifier getSignatureAlgorithm()
getSignatureValue
public DERBitString getSignatureValue()
getTargets
public ACTargets getTargets()
getVO
public String getVO()
isValid
public boolean isValid()
Synonym for validAt(null)
validAt
public boolean validAt(Date date)
Checks if the AC was valid at the provided timestamp.
date
- if null
, current time is used
- true if the AC was valid at the time in question.
verify
public boolean verify(PublicKey key)
Verifies the signature of the AC using the provided signature key
key
- The (RSA) public key to verify the signature with
true
if success, false
otherwise
verifyCert
public boolean verifyCert(X509Certificate cert)