org.demoiselle.signer.policy.impl.cades.pkcs7.attribute.impl

Class RevocationRefs

java.lang.Object

org.demoiselle.signer.policy.impl.cades.pkcs7.attribute.impl.RevocationRefs

All Implemented Interfaces:

SignedOrUnsignedAttribute, UnsignedAttribute

public class RevocationRefs
extends Object
implements UnsignedAttribute

Complete Revocation Refs Attribute Definition

The Complete Revocation Refs attribute is an unsigned attribute. Only a single instance of this attribute must occur with an electronic signature. It references the full set of the CRL or OCSP responses that have been used in the validation of the signer and CA certificates used in ES with Complete validation data.

The following object identifier identifies the CompleteRevocationRefs attribute:

id-aa-ets-revocationRefs OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) id-aa(2) 22}

The complete revocation refs attribute value has the ASN.1 syntax CompleteRevocationRefs.

CompleteRevocationRefs ::= SEQUENCE OF CrlOcspRef

The complete-revocation-references attribute value has the ASN.1 syntax CompleteRevocationRefs:

CompleteRevocationRefs ::= SEQUENCE OF CrlOcspRef

CrlOcspRef ::= SEQUENCE { crlids [0] CRLListID OPTIONAL, ocspids [1] OcspListID OPTIONAL, otherRev [2] OtherRevRefs OPTIONAL }

CompleteRevocationRefs shall contain one CrlOcspRef for the signing-certificate, followed by one for each OtherCertID in the CompleteCertificateRefs attribute. The second and subsequent CrlOcspRef fields shall be in the same order as the OtherCertID to which they relate. At least one of CRLListID or OcspListID or OtherRevRefs should be present for all but the "trusted" CA of the certificate path.

CRLListID ::= SEQUENCE { crls SEQUENCE OF CrlValidatedID }

CrlValidatedID ::= SEQUENCE { crlHash OtherHash, crlIdentifier CrlIdentifier OPTIONAL }

CrlIdentifier ::= SEQUENCE { crlissuer Name, crlIssuedTime UTCTime, crlNumber INTEGER OPTIONAL }

OcspListID ::= SEQUENCE { ocspResponses SEQUENCE OF OcspResponsesID }

OcspResponsesID ::= SEQUENCE { ocspIdentifier OcspIdentifier, ocspRepHash OtherHash OPTIONAL }

OcspIdentifier ::= SEQUENCE { ocspResponderID ResponderID, -- As in OCSP response data producedAt GeneralizedTime -- As in OCSP response data }

Constructor Summary

Constructors

Constructor and Description
RevocationRefs()

Method Summary

Modifier and Type	Method and Description
String	getOID() OID value of the attribute.
org.bouncycastle.asn1.cms.Attribute	getValue() Represents the value of the attribute itself.
void	initialize(PrivateKey privateKey, Certificate[] certificates, byte[] content, SignaturePolicy signaturePolicy, byte[] hash) Performs the initial parameterization for attribute retrieval

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RevocationRefs

public RevocationRefs()

Method Detail

initialize

public void initialize(PrivateKey privateKey,
                       Certificate[] certificates,
                       byte[] content,
                       SignaturePolicy signaturePolicy,
                       byte[] hash)

Description copied from interface: SignedOrUnsignedAttribute

Performs the initial parameterization for attribute retrieval

Specified by:

initialize in interface SignedOrUnsignedAttribute

Parameters:

privateKey - private key

certificates - certificate chain

content - set null if signing only hash

signaturePolicy - signature policy

hash - set null if signing content

getOID

public String getOID()

Description copied from interface: SignedOrUnsignedAttribute

OID value of the attribute. Ex: "1.12.2.54.94"

Specified by:

getOID in interface SignedOrUnsignedAttribute

Returns:

OID of attribute

getValue

public org.bouncycastle.asn1.cms.Attribute getValue()
                                             throws SignerException

Description copied from interface: SignedOrUnsignedAttribute

Represents the value of the attribute itself.

Specified by:

getValue in interface SignedOrUnsignedAttribute

Returns:

Attribute value

Throws:

SignerException