Package org.mozilla.jss.netscape.security.x509

Class PrivateKeyUsageExtension

java.lang.Object

org.mozilla.jss.netscape.security.x509.Extension

org.mozilla.jss.netscape.security.x509.PrivateKeyUsageExtension

All Implemented Interfaces:

Serializable, CertAttrSet

public class PrivateKeyUsageExtension
extends Extension
implements CertAttrSet

This class defines the Private Key Usage Extension.

The Private Key Usage Period extension allows the certificate issuer to specify a different validity period for the private key than the certificate. This extension is intended for use with digital signature keys. This extension consists of two optional components notBefore and notAfter. The private key associated with the certificate should not be used to sign objects before or after the times specified by the two components, respectively.

 PrivateKeyUsagePeriod ::= SEQUENCE {
     notBefore  [0]  GeneralizedTime OPTIONAL,
     notAfter   [1]  GeneralizedTime OPTIONAL }
 

Version:

1.12

See Also:

• Extension
• CertAttrSet
• Serialized Form

Field Summary

Fields

Modifier and Type	Field	Description
static final String	IDENT	Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.
static final String	NAME	Sub attributes name for this CertAttrSet.
static final String	NOT_AFTER
static final String	NOT_BEFORE
private Date	notAfter
private Date	notBefore
private static final long	serialVersionUID
private static final byte	TAG_AFTER
private static final byte	TAG_BEFORE

Fields inherited from class org.mozilla.jss.netscape.security.x509.Extension

critical, extensionId, extensionValue

Constructor Summary

Constructors

Constructor	Description
PrivateKeyUsageExtension(Boolean critical, Object value)	Create the extension from the passed DER encoded value.
PrivateKeyUsageExtension(Date notBefore, Date notAfter)	The default constructor for PrivateKeyUsageExtension.

Method Summary

Modifier and Type	Method	Description
void	decode(InputStream in)	Decode the extension from the InputStream.
void	delete(String name)	Delete the attribute value.
void	encode(OutputStream out)	Write the extension to the OutputStream.
private void	encodeThis()
Object	get(String name)	Get the attribute value.
Enumeration<String>	getAttributeNames()	Return an enumeration of names of attributes existing within this attribute.
String	getName()	Return the name of this attribute.
Date	getNotAfter()	Return notAfter date
Date	getNotBefore()	Return notBefore date
void	set(String name, Object obj)	Set the attribute value.
String	toString()	Return the printable string.
void	valid()	Verify that that the current time is within the validity period.
void	valid(Date now)	Verify that that the passed time is within the validity period.

Methods inherited from class org.mozilla.jss.netscape.security.x509.Extension

clearValue, encode, getExtensionId, getExtensionValue, isCritical, setCritical, setExtensionId, setExtensionValue

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Details

serialVersionUID

private static final long serialVersionUID

See Also:

• Constant Field Values

IDENT

public static final String IDENT

Identifier for this attribute, to be used with the get, set, delete methods of Certificate, x509 type.

See Also:

• Constant Field Values

NAME

public static final String NAME

Sub attributes name for this CertAttrSet.

See Also:

• Constant Field Values

NOT_BEFORE

public static final String NOT_BEFORE

See Also:

• Constant Field Values

NOT_AFTER

public static final String NOT_AFTER

See Also:

• Constant Field Values

TAG_BEFORE

private static final byte TAG_BEFORE

See Also:

• Constant Field Values

TAG_AFTER

private static final byte TAG_AFTER

See Also:

• Constant Field Values

notBefore

private Date notBefore

notAfter

private Date notAfter

Constructor Details

PrivateKeyUsageExtension

public PrivateKeyUsageExtension(Date notBefore,
 Date notAfter)
                         throws IOException

The default constructor for PrivateKeyUsageExtension.

Parameters:

notBefore - the date/time before which the private key should not be used.

notAfter - the date/time after which the private key should not be used.

Throws:

IOException

PrivateKeyUsageExtension

public PrivateKeyUsageExtension(Boolean critical,
 Object value)
                         throws CertificateException,
IOException

Create the extension from the passed DER encoded value.

Parameters:

critical - true if the extension is to be treated as critical.

value - Array of DER encoded bytes of the actual value.

Throws:

CertificateException - on certificate parsing errors.

IOException - on error.

Method Details

encodeThis

private void encodeThis()
                 throws IOException

Throws:

IOException

toString

public String toString()

Return the printable string.

Specified by:

toString in interface CertAttrSet

Overrides:

toString in class Extension

Returns:

value of this certificate attribute in printable form.

getNotBefore

public Date getNotBefore()

Return notBefore date

getNotAfter

public Date getNotAfter()

Return notAfter date

valid

public void valid()
           throws CertificateNotYetValidException,
CertificateExpiredException

Verify that that the current time is within the validity period.

Throws:

CertificateExpiredException - if the certificate has expired.

CertificateNotYetValidException - if the certificate is not yet valid.

valid

public void valid(Date now)
           throws CertificateNotYetValidException,
CertificateExpiredException

Verify that that the passed time is within the validity period.

Throws:

CertificateExpiredException - if the certificate has expired with respect to the Date supplied.

CertificateNotYetValidException - if the certificate is not yet valid with respect to the Date supplied.

encode

public void encode(OutputStream out)
            throws IOException

Write the extension to the OutputStream.

Specified by:

encode in interface CertAttrSet

Parameters:

out - the OutputStream to write the extension to.

Throws:

IOException - on encoding errors.

decode

public void decode(InputStream in)
            throws CertificateException

Decode the extension from the InputStream.

Specified by:

decode in interface CertAttrSet

Parameters:

in - the InputStream to unmarshal the contents from.

Throws:

CertificateException - on decoding errors.

set

public void set(String name,
 Object obj)
         throws CertificateException

Set the attribute value.

Specified by:

set in interface CertAttrSet

Parameters:

name - the name of the attribute (e.g. "x509.info.key")

obj - the attribute object.

Throws:

CertificateException - on attribute handling errors.

get

public Object get(String name)
           throws CertificateException

Get the attribute value.

Specified by:

get in interface CertAttrSet

Parameters:

name - the name of the attribute to return.

Returns:

attribute value

Throws:

CertificateException - on attribute handling errors.

delete

public void delete(String name)
            throws CertificateException

Delete the attribute value.

Specified by:

delete in interface CertAttrSet

Parameters:

name - the name of the attribute to delete.

Throws:

CertificateException - on attribute handling errors.

getAttributeNames

public Enumeration<String> getAttributeNames()

Return an enumeration of names of attributes existing within this attribute.

Specified by:

getAttributeNames in interface CertAttrSet

Returns:

an enumeration of the attribute names.

getName

public String getName()

Return the name of this attribute.

Specified by:

getName in interface CertAttrSet

Returns:

the name of this CertAttrSet.