public class X509CRLSelector extends Object implements CRLSelector
X509CRLsãéžæããCRLSelectorã§ãã ãã®ã¯ã©ã¹ã¯ãèšŒææžã®åæ¶ãç¶æ³ããã§ãã¯ããããã«CertStoreããCRLãéžæãããšãã«ãç¹ã«åœ¹ç«ã¡ãŸãã
æåã«æ§ç¯ãããX509CRLSelectorã«ã¯æå¹ãªåºæºãå«ãŸããŠããªããããågetã¡ãœããã¯ããã©ã«ãå€(null)ãè¿ããŸãã ãããã£ãŠãmatchã¡ãœããã¯ãX509CRLã«å¯ŸããŠtrueãè¿ããŸãã éåžžãX509CRLSelectorã¯ãsetIssuersãsetDateAndTimeãåŒã³åºããŠããã€ãã®åºæºãæå¹ã«ããããšãCertStore.getCRLsãé¡äŒŒã®ã¡ãœããã«æž¡ãããŸãã
ãããã説æããX.509 CRLãã£ãŒã«ããšæ©èœæ¡åŒµã®å®çŸ©ã«ã€ããŠã¯ãRFC 3280ãInternet X.509 Public Key Infrastructure Certificate and CRL Profileããåç §ããŠãã ããã
䞊è¡ã¢ã¯ã»ã¹
ç¹ã«æããªããããããã®ã¯ã©ã¹ã§å®çŸ©ãããŠããã¡ãœããã¯ã¹ã¬ããã»ãŒãã§ã¯ãããŸããã åäžã®ãªããžã§ã¯ãã«äžŠè¡ã¢ã¯ã»ã¹ããå¿ èŠã®ããè€æ°ã¹ã¬ããã¯ãã¹ã¬ããéã§åæããšããå¿ èŠã«å¿ããŠããã¯ããå¿ èŠããããŸãã è€æ°ã®ã¹ã¬ãããããããåå¥ã®ãªããžã§ã¯ããåŠçããå Žåããããã®ã¹ã¬ããã¯åæããå¿ èŠã¯ãããŸããã
CRLSelector, X509CRL| ã³ã³ã¹ãã©ã¯ã¿ | 説æ |
|---|---|
X509CRLSelector() |
X509CRLSelectorãäœæããŸãã |
| 修食åãšå | ã¡ãœãã | 説æ |
|---|---|---|
void |
addIssuer(X500Principal issuer) |
ååãissuerNamesã®åºæºå€ã«è¿œå ããŸãã
|
void |
addIssuerName(byte[] name) |
ååãissuerNamesã®åºæºå€ã«è¿œå ããŸãã
|
void |
addIssuerName(String name) |
éæšå¥šã代ããã«addIssuer(X500Principal)ãŸãã¯addIssuerName(byte[])ã䜿çšããŠãã ããã
|
Object |
clone() |
ãã®ãªããžã§ã¯ãã®è€è£œãè¿ããŸãã
|
X509Certificate |
getCertificateChecking() |
ãã§ãã¯å¯Ÿè±¡ã®èšŒææžãè¿ããŸãã
|
Date |
getDateAndTime() |
dateAndTimeåºæºå€ãè¿ããŸãã
|
Collection<Object> |
getIssuerNames() |
issuerNamesã®åºæºå€ã®è€è£œãè¿ããŸãã
|
Collection<X500Principal> |
getIssuers() |
issuerNamesã®åºæºå€ãè¿ããŸãã
|
BigInteger |
getMaxCRL() |
maxCRLNumberåºæºå€ãè¿ããŸãã
|
BigInteger |
getMinCRL() |
minCRLNumberåºæºå€ãè¿ããŸãã
|
boolean |
match(CRL crl) |
CRLãéžæããããã©ããã倿ããŸãã |
void |
setCertificateChecking(X509Certificate cert) |
ãã§ãã¯å¯Ÿè±¡ã®èšŒææžãèšå®ããŸãã
|
void |
setDateAndTime(Date dateAndTime) |
dateAndTimeåºæºå€ãèšå®ããŸãã
|
void |
setIssuerNames(Collection<?> names) |
ããŒã: 代ããã«setIssuers(Collection)ã䜿çšãããããã®ã¡ãœããã䜿çšããéã«ãã€ãé
å圢åŒã®èå¥åã®ã¿ãæå®ããŠãã ããã
|
void |
setIssuers(Collection<X500Principal> issuers) |
issuerNamesã®åºæºå€ãèšå®ããŸãã
|
void |
setMaxCRLNumber(BigInteger maxCRL) |
maxCRLNumberåºæºå€ãèšå®ããŸãã
|
void |
setMinCRLNumber(BigInteger minCRL) |
minCRLNumberåºæºå€ãèšå®ããŸãã
|
String |
toString() |
X509CRLSelectorã®ããªã³ãå¯èœè¡šçŸãè¿ããŸãã |
public X509CRLSelector()
X509CRLSelectorãäœæããŸãã æåã¯æ¡ä»¶ãèšå®ãããŠããªããããã©ã®X509CRLã§ãäžèŽããŸãã public void setIssuers(Collection<X500Principal> issuers)
X509CRLã«ããçºè¡è
èå¥åã¯ãæå®ãããèå¥åã®å°ãªããšã1ã€ãšäžèŽããå¿
èŠããããŸãã nullã®å Žåãçºè¡è
èå¥åã¯åãããŸããã
ãã®ã¡ãœããã䜿çšãããšãåŒåºãåŽã¯ã1åã®ã¡ãœããåŒåºãã§ãX509CRLsã«å«ãŸããçºè¡è
åã®å®å
šãªã»ãããæå®ã§ããŸãã æå®ããå€ã§issuerNamesåºæºå€ã®åã®å€ã眮ãæããããŸãã
namesãã©ã¡ãŒã¿ãnullã§ã¯ãªãå Žåã¯ãX500Principalã®Collectionã§ãã
namesãã©ã¡ãŒã¿ã«ã¯éè€ããèå¥åãå«ãŸããŠããããšããããŸããããããã¯getIssuersã¡ãœããããè¿ãããååã®Collectionããåé€ã§ããŸãã
以åŸã®å€æŽããä¿è·ããããã«ãCollectionã«ã³ããŒãè¡ãããŸãã
issuers - X500Principalsã®Collection (ãŸãã¯null)getIssuers()public void setIssuerNames(Collection<?> names) throws IOException
addIssuerName(String)ãåç
§ããŠãã ããã
issuerNamesã®åºæºå€ãèšå®ããŸãã X509CRLã«ããçºè¡è
èå¥åã¯ãæå®ãããèå¥åã®å°ãªããšã1ã€ãšäžèŽããå¿
èŠããããŸãã nullã®å Žåãçºè¡è
èå¥åã¯åãããŸããã
ãã®ã¡ãœããã䜿çšãããšãåŒåºãåŽã¯ã1åã®ã¡ãœããåŒåºãã§ãX509CRLsã«å«ãŸããçºè¡è
åã®å®å
šãªã»ãããæå®ã§ããŸãã æå®ããå€ã§issuerNamesåºæºå€ã®åã®å€ã眮ãæããããŸãã
namesãã©ã¡ãŒã¿ãnullã§ã¯ãªãå Žåã¯ãååã®Collectionã§ãã ããããã®ååã¯Stringããèå¥åã衚ããã€ãé
å(ãããããRFC 2253ãŸãã¯ASN.1 DER笊å·å圢åŒ)ã§ãã ãã®åŒæ°ã®å€ãšããŠnullãæå®ãããå ŽåãissuerNamesã®ãã§ãã¯ã¯è¡ãããŸããã
namesãã©ã¡ãŒã¿ã«ã¯éè€ããèå¥åãå«ãŸããŠããããšããããŸããããããã¯getIssuerNamesã¡ãœããããè¿ãããååã®Collectionããåé€ã§ããŸãã
ååããã€ãé åã§æå®ãããå ŽåãX.501ã§å®çŸ©ãããŠããDER笊å·åãããåäžèå¥åãå«ãŸããå¿ èŠããããŸãã ãã®æ§é äœã®ASN.1衚èšã¯æ¬¡ã®ããã«ãªããŸãã
Name ::= CHOICE {
RDNSequence }
RDNSequence ::= SEQUENCE OF RelativeDistinguishedName
RelativeDistinguishedName ::=
SET SIZE (1 .. MAX) OF AttributeTypeAndValue
AttributeTypeAndValue ::= SEQUENCE {
type AttributeType,
value AttributeValue }
AttributeType ::= OBJECT IDENTIFIER
AttributeValue ::= ANY DEFINED BY AttributeType
....
DirectoryString ::= CHOICE {
teletexString TeletexString (SIZE (1..MAX)),
printableString PrintableString (SIZE (1..MAX)),
universalString UniversalString (SIZE (1..MAX)),
utf8String UTF8String (SIZE (1.. MAX)),
bmpString BMPString (SIZE (1..MAX)) }
以åŸã®å€æŽããä¿è·ããããã«ãCollectionã«ãã£ãŒãã»ã³ããŒãè¡ãããŸãã
names - ååã®CollectionããŸãã¯nullIOException - æ§æè§£æãšã©ãŒãçºçããå ŽågetIssuerNames()public void addIssuer(X500Principal issuer)
X509CRLã«ããçºè¡è
èå¥åã¯ãæå®ãããèå¥åã®å°ãªããšã1ã€ãšäžèŽããå¿
èŠããããŸãã
ãã®ã¡ãœããã§ã¯ãåŒåºãåŽãååãX509CRLsã«å«ãŸããçºè¡è
åã®ã»ããã«è¿œå ã§ããŸãã æå®ããååã¯ãissuerNamesåºæºã§å
ã«ååšããå€ã«è¿œå ãããŸãã æå®ããååãéè€ããå Žåã¯ç¡èŠãããŸãã
issuer - X500PrincipalãšããŠã®çºè¡è
public void addIssuerName(String name) throws IOException
ååãissuerNamesã®åºæºå€ã«è¿œå ããŸãã X509CRLã«ããçºè¡è
èå¥åã¯ãæå®ãããèå¥åã®å°ãªããšã1ã€ãšäžèŽããå¿
èŠããããŸãã
ãã®ã¡ãœããã§ã¯ãåŒåºãåŽãååãX509CRLsã«å«ãŸããçºè¡è
åã®ã»ããã«è¿œå ã§ããŸãã æå®ããååã¯ãissuerNamesåºæºã§å
ã«ååšããå€ã«è¿œå ãããŸãã æå®ããååãéè€ããå Žåã¯ç¡èŠãããŸãã
name - RFC 2253圢åŒã®ååIOException - æ§æè§£æãšã©ãŒãçºçããå Žåpublic void addIssuerName(byte[] name)
throws IOException
X509CRLã«ããçºè¡è
èå¥åã¯ãæå®ãããèå¥åã®å°ãªããšã1ã€ãšäžèŽããå¿
èŠããããŸãã
ãã®ã¡ãœããã§ã¯ãåŒåºãåŽãååãX509CRLsã«å«ãŸããçºè¡è
åã®ã»ããã«è¿œå ã§ããŸãã æå®ããååã¯ãissuerNamesåºæºã§å
ã«ååšããå€ã«è¿œå ãããŸãã æå®ããååãéè€ããå Žåã¯ç¡èŠãããŸãã ååããã€ãé
åã§æå®ãããå ŽåãX.501ã§å®çŸ©ãããŠããDER笊å·åãããåäžèå¥åãå«ãŸããå¿
èŠããããŸãã ãã®æ§é äœã®ASN.1衚èšã¯æ¬¡ã®ããã«ãªããŸãã
ååã¯ãã€ãé
åã§æå®ãããŸãã ãã®ãã€ãé
åã«ã¯ãX.501ã§å®çŸ©ãããŠããDER笊å·åãããåäžèå¥åãå«ãŸããå¿
èŠããããŸãã ãã®æ§é äœã®ASN.1衚èšã¯ãsetIssuerNames(Collection names)ã§èª¬æããŠããŸãã
以åŸã®å€æŽããä¿è·ããããã«ãããã§æäŸããããã€ãé åã¯è€è£œãããŠããŸãã
name - ASN.1 DER笊å·å圢åŒã«ããååãå«ããã€ãé
åIOException - æ§æè§£æãšã©ãŒãçºçããå Žåpublic void setMinCRLNumber(BigInteger minCRL)
X509CRLã§ã¯ãCRLæ°æ¡åŒµæ©èœããªããã°ãããŸãããCRLæ°æ¡åŒµæ©èœã®å€ã¯æå®ããå€ä»¥äžã«ãªããŸãã nullã®å ŽåãminCRLNumberã®ãã§ãã¯ã¯è¡ãããŸããã minCRL - 蚱容ãããæå°CRLæ°ããŸãã¯nullpublic void setMaxCRLNumber(BigInteger maxCRL)
X509CRLã§ã¯ãCRLæ°æ¡åŒµæ©èœããªããã°ãããŸãããCRLæ°æ¡åŒµæ©èœã®å€ã¯æå®ããå€ä»¥äžã«ãªããŸãã nullãæå®ãããå ŽåãmaxCRLNumberã®ãã§ãã¯ã¯è¡ãããŸããã maxCRL - 蚱容ãããæå€§CRLæ°ããŸãã¯nullpublic void setDateAndTime(Date dateAndTime)
X509CRLã®thisUpdateã³ã³ããŒãã³ãã®å€ä»¥éã§ããã€nextUpdateã³ã³ããŒãã³ãã®å€ä»¥åã§ãªããã°ãããŸããã X509CRLã«nextUpdateã³ã³ããŒãã³ããå«ãŸããŠããªãå Žåã¯ãäžèŽããæ¥ä»ã¯ãããŸããã nullã®å ŽåãdateAndTimeã®ãã§ãã¯ã¯è¡ãããŸããã
以åŸã®å€æŽããä¿è·ããããã«ãããã§æäŸãããDateã¯è€è£œãããŠããŸãã
dateAndTime - äžèŽãããDateããŸãã¯nullgetDateAndTime()public void setCertificateChecking(X509Certificate cert)
CertStoreãé¢é£ããCRLãæ€çŽ¢ããã®ã«åœ¹ç«ã€ãªãã·ã§ã³æ
å ±ã§ãã nullãæå®ãããå Žåããã®ãããªãªãã·ã§ã³æ
å ±ã¯æäŸãããŸããã cert - ãã§ãã¯å¯Ÿè±¡ã®X509CertificateããŸãã¯nullgetCertificateChecking()public Collection<X500Principal> getIssuers()
X509CRLã«ããçºè¡è
èå¥åã¯ãæå®ãããèå¥åã®å°ãªããšã1ã€ãšäžèŽããå¿
èŠããããŸãã è¿ãããå€ãnullã®å Žåã¯ãçºè¡è
èå¥åã¯åãããŸããã
æ»ãå€ãnullã§ãªãå Žåããã®æ»ãå€ã¯ãX500Principalã®å€æŽäžå¯èœãªCollectionã§ãã
CollectionããŸãã¯nullsetIssuers(java.util.Collection<javax.security.auth.x500.X500Principal>)public Collection<Object> getIssuerNames()
X509CRLã«ããçºè¡è
èå¥åã¯ãæå®ãããèå¥åã®å°ãªããšã1ã€ãšäžèŽããå¿
èŠããããŸãã è¿ãããå€ãnullã®å Žåã¯ãçºè¡è
èå¥åã¯åãããŸããã
è¿ãããå€ãnullã§ã¯ãªãå Žåã¯ãååã®Collectionã«ãªããŸãã ããããã®ååã¯Stringããèå¥åã衚ããã€ãé
å(ãããããRFC 2253ãŸãã¯ASN.1 DER笊å·å圢åŒ)ã§ãã è¿ãããCollectionã«ã¯ãéè€ããååãå«ãŸããŠããããšããããŸãã
ååããã€ãé
åã§æå®ãããå ŽåãX.501ã§å®çŸ©ãããŠããDER笊å·åãããåäžèå¥åãå«ãŸããå¿
èŠããããŸãã ãã®æ§é äœã®ASN.1衚èšã«ã€ããŠã¯ãsetIssuerNames(Collection names)ã®ããã¥ã¡ã³ããåç
§ããŠãã ããã
以åŸã®å€æŽããä¿è·ããããã«ãCollectionã«ãã£ãŒãã»ã³ããŒãè¡ãããŸãã
CollectionããŸãã¯nullsetIssuerNames(java.util.Collection<?>)public BigInteger getMinCRL()
X509CRLã§ã¯ãCRLæ°æ¡åŒµæ©èœããªããã°ãããŸãããCRLæ°æ¡åŒµæ©èœã®å€ã¯æå®ããå€ä»¥äžã«ãªããŸãã nullã®å ŽåãminCRLNumberã®ãã§ãã¯ã¯è¡ãããŸããã nullpublic BigInteger getMaxCRL()
X509CRLã§ã¯ãCRLæ°æ¡åŒµæ©èœããªããã°ãããŸãããCRLæ°æ¡åŒµæ©èœã®å€ã¯æå®ããå€ä»¥äžã«ãªããŸãã nullãæå®ãããå ŽåãmaxCRLNumberã®ãã§ãã¯ã¯è¡ãããŸããã nullpublic Date getDateAndTime()
X509CRLã®thisUpdateã³ã³ããŒãã³ãã®å€ä»¥éã§ããã€nextUpdateã³ã³ããŒãã³ãã®å€ä»¥åã§ãªããã°ãããŸããã X509CRLã«nextUpdateã³ã³ããŒãã³ããå«ãŸããŠããªãå Žåã¯ãäžèŽããæ¥ä»ã¯ãããŸããã nullã®å ŽåãdateAndTimeã®ãã§ãã¯ã¯è¡ãããŸããã
以åŸã®å€æŽããä¿è·ããããã«ãè¿ãããDateã¯è€è£œãããŠããŸãã
DateããŸãã¯nullsetDateAndTime(java.util.Date)public X509Certificate getCertificateChecking()
CertStoreãé¢é£ããCRLãæ€çŽ¢ããã®ã«åœ¹ç«ã€ãªãã·ã§ã³æ
å ±ã§ãã è¿ãããå€ãnullã®å Žåããã®ãããªè¿œå æ
å ±ã¯æäŸãããŸããã nullsetCertificateChecking(java.security.cert.X509Certificate)public String toString()
X509CRLSelectorã®ããªã³ãå¯èœè¡šçŸãè¿ããŸããpublic boolean match(CRL crl)
CRLãéžæããããã©ããã倿ããŸããmatchãã€ã³ã¿ãã§ãŒã¹CRLSelectorcrl - ãã§ãã¯å¯Ÿè±¡ã®CRLCRLãéžæãããå Žåã¯trueãããã§ãªãå Žåã¯false ãã°ãŸãã¯æ©èœãéä¿¡
詳现ãªAPIãªãã¡ã¬ã³ã¹ããã³éçºè
ããã¥ã¡ã³ãã«ã€ããŠã¯ãJava SEã®ããã¥ã¡ã³ããåç
§ããŠãã ããã ãã®ããã¥ã¡ã³ãã«ã¯ãæŠå¿µçãªæŠèŠãçšèªã®å®çŸ©ãåé¿æ¹æ³ãæå¹ãªã³ãŒãäŸãªã©ã®ãéçºè
ã察象ã«ãããã詳现ãªèª¬æãå«ãŸããŠããŸãã
Copyright © 1993, 2025, Oracle and/or its affiliates. All rights reserved. Use is subject to license terms. Documentation Redistribution Policyãåç
§ããŠãã ããã