public class BasicConstraintsExtension extends X509Extension
The path length constraint only makes sense if the CA flag is true
. The default value for path length is null
, indicating no limit on the number of following certificates in a chain. A value of 0
indicates that only an end-entity certificate may follow the certificate having this extension. Non-null
values must be non-negative.
id_netscape_ce, id_netscape_ce_type, id_set_ce, id_set_ce_type, isDecoded
Constructor and Description |
---|
BasicConstraintsExtension()
Create a new extension with the appropriate OID type.
|
BasicConstraintsExtension(java.math.BigInteger pathLen)
Creates a new extension with CA flag
true and the specified path length. |
BasicConstraintsExtension(java.math.BigInteger pathLen, boolean critical)
Creates a new extension with CA flag
true and the specified path length. |
BasicConstraintsExtension(boolean ca)
Creates a new extension with the specified CA flag.
|
BasicConstraintsExtension(boolean ca, boolean critical)
Creates a new extension with the specified CA flag.
|
BasicConstraintsExtension(java.io.InputStream is) |
Modifier and Type | Method and Description |
---|---|
boolean |
getCA()
Gets the CA flag.
|
java.math.BigInteger |
getPathLen()
Gets the path length constraint.
|
java.lang.String |
toString()
Returns a string representation of this object.
|
getCritical, getType, getValue, input, inputInstance, isRecognized, length, output, readExternal, setCritical, setValue, writeExternal
public BasicConstraintsExtension()
Note: An object created using this constructor may not be in a valid state. This constructor is intended primarily for use in conjunction with the X509Extension.input(java.io.InputStream)
method.
public BasicConstraintsExtension(boolean ca)
ca
- true
to mark this certificate as a CA.public BasicConstraintsExtension(boolean ca, boolean critical)
ca
- true
to mark this certificate as a CA.critical
- true
if this extension is critical, false
otherwise.public BasicConstraintsExtension(java.math.BigInteger pathLen)
true
and the specified path length. Extension is critical.pathLen
- The allowed length of the certificate chain following the certificate having this extension. A value of null
means unlimited, 0
means only an end-entity certificate may follow. Non-null
values must be non-negative.public BasicConstraintsExtension(java.math.BigInteger pathLen, boolean critical)
true
and the specified path length.pathLen
- The allowed length of the certificate chain following the certificate having this extension. A value of null
means unlimited, 0
means only an end-entity certificate may follow. Non-null
values must be non-negative.critical
- true
if this extension is critical, false
otherwise.public BasicConstraintsExtension(java.io.InputStream is) throws java.io.IOException
java.io.IOException
public boolean getCA()
public java.math.BigInteger getPathLen()
BigInteger
path length, or null
if none is defined.public java.lang.String toString()
X509Extension
toString
in class X509Extension