Class MTCCertificationAuthority
java.lang.Object
org.bouncycastle.asn1.ASN1Object
org.bouncycastle.asn1.x509.MTCCertificationAuthority
- All Implemented Interfaces:
ASN1Encodable, Encodable
ASN.1 structure for the
id-pe-mtcCertificationAuthority extension
defined in Section 5.5 of draft-ietf-plants-merkle-tree-certs:
MTCCertificationAuthority ::= SEQUENCE {
logHash AlgorithmIdentifier{DIGEST-ALGORITHM, {...}},
sigAlg AlgorithmIdentifier{SIGNATURE-ALGORITHM, {...}},
minSerial INTEGER (0..mtcMaxSerial),
maxSerial INTEGER (0..mtcMaxSerial)
}
logHash is the hash algorithm used by all issuance logs operated
by this CA. sigAlg is the CA cosigner's signature algorithm.
minSerial and maxSerial are the inclusive bounds of the cert
serial range this CA is authorized for; per Section 6.1 of the draft a serial
encodes the log number in its upper 16 bits and the entry index in the lower
48 bits (a 64-bit value), so the range can constrain either.
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final BigIntegermtcMaxSerial- the largest legal serial, 2^64 - 1 (a serial is the 64-bit composition of a 16-bit log number and a 48-bit entry index). -
Constructor Summary
ConstructorsConstructorDescriptionMTCCertificationAuthority(ASN1ObjectIdentifier logHashOid, ASN1ObjectIdentifier sigAlgOid, BigInteger minSerial, BigInteger maxSerial) Convenience constructor that wraps each algorithm OID in a parameterlessAlgorithmIdentifier.MTCCertificationAuthority(AlgorithmIdentifier logHash, AlgorithmIdentifier sigAlg, BigInteger minSerial, BigInteger maxSerial) -
Method Summary
Modifier and TypeMethodDescriptionstatic MTCCertificationAuthoritygetInstance(Object obj) Method providing a primitive representation of this object suitable for encoding.Methods inherited from class ASN1Object
encodeTo, encodeTo, equals, getEncoded, getEncoded, hasEncodedTagValue, hashCode
-
Field Details
-
MAX_SERIAL
mtcMaxSerial- the largest legal serial, 2^64 - 1 (a serial is the 64-bit composition of a 16-bit log number and a 48-bit entry index).
-
-
Constructor Details
-
MTCCertificationAuthority
public MTCCertificationAuthority(ASN1ObjectIdentifier logHashOid, ASN1ObjectIdentifier sigAlgOid, BigInteger minSerial, BigInteger maxSerial) Convenience constructor that wraps each algorithm OID in a parameterlessAlgorithmIdentifier. Equivalent toMTCCertificationAuthority(AlgorithmIdentifier, AlgorithmIdentifier, BigInteger, BigInteger)withnew AlgorithmIdentifier(logHashOid)andnew AlgorithmIdentifier(sigAlgOid). -
MTCCertificationAuthority
public MTCCertificationAuthority(AlgorithmIdentifier logHash, AlgorithmIdentifier sigAlg, BigInteger minSerial, BigInteger maxSerial)
-
-
Method Details
-
getInstance
-
getLogHash
-
getSigAlg
-
getMinSerial
-
getMaxSerial
-
toASN1Primitive
Description copied from class:ASN1ObjectMethod providing a primitive representation of this object suitable for encoding.- Specified by:
toASN1Primitivein interfaceASN1Encodable- Specified by:
toASN1Primitivein classASN1Object- Returns:
- a primitive representation of this object.
-