org.xipki.security.asn1

Class CrlStreamParser

java.lang.Object

org.xipki.security.asn1.Asn1StreamParser

org.xipki.security.asn1.CrlStreamParser

public class CrlStreamParser
extends Asn1StreamParser

Both BouncyCastle and JDK read the whole CRL during the initialization. The size of the consumed memory is linear to the size of CRL. This may cause that OutOfMemory error for large CRLs.

This class implements a real stream based parser of CRL with constant memory consumption.

Definition of CertificateList.

 CertificateList  ::=  SEQUENCE  {
       tbsCertList          TBSCertList,
       signatureAlgorithm   AlgorithmIdentifier,
       signatureValue       BIT STRING  }

  TBSCertList  ::=  SEQUENCE  {
       version                 Version OPTIONAL,
                                    -- if present, MUST be v2
       signature               AlgorithmIdentifier,
       issuer                  Name,
       thisUpdate              Time,
       nextUpdate              Time OPTIONAL,
       revokedCertificates     SEQUENCE OF SEQUENCE  {
            userCertificate         CertificateSerialNumber,
            revocationDate          Time,
            crlEntryExtensions      Extensions OPTIONAL
                                     -- if present, version MUST be v2
                                 }  OPTIONAL,
       crlExtensions           [0]  EXPLICIT Extensions OPTIONAL
                                     -- if present, version MUST be v2
                                 }
 

Author:

Lijun Liao

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	CrlStreamParser.RevokedCert
class	CrlStreamParser.RevokedCertsIterator

Nested classes/interfaces inherited from class org.xipki.security.asn1.Asn1StreamParser

Asn1StreamParser.MyInt

Field Summary

Fields inherited from class org.xipki.security.asn1.Asn1StreamParser

TAG_CONSTRUCTED_SEQUENCE, TAG_CONSTRUCTED_SET

Constructor Summary

Constructors

Constructor and Description
CrlStreamParser(File crlFile)

Method Summary

Modifier and Type	Method and Description
org.bouncycastle.asn1.x509.AlgorithmIdentifier	getAlgorithmIdentifier()
BigInteger	getBaseCrlNumber()
org.bouncycastle.asn1.x509.Extensions	getCrlExtensions()
BigInteger	getCrlNumber()
org.bouncycastle.asn1.x500.X500Name	getIssuer()
Date	getNextUpdate()
byte[]	getSignature()
Date	getThisUpdate()
int	getVersion()
boolean	isDeltaCrl()
CrlStreamParser.RevokedCertsIterator	revokedCertificates()
boolean	verifySignature(PublicKey publicKey)
boolean	verifySignature(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo)

Methods inherited from class org.xipki.security.asn1.Asn1StreamParser

assertTag, markAndReadTag, readBlock, readBlock, readLength, readTime, readTime, skip

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CrlStreamParser

public CrlStreamParser(File crlFile)
                throws IOException

Throws:

IOException

Method Detail

getVersion

public int getVersion()

getIssuer

public org.bouncycastle.asn1.x500.X500Name getIssuer()

getThisUpdate

public Date getThisUpdate()

getNextUpdate

public Date getNextUpdate()

getAlgorithmIdentifier

public org.bouncycastle.asn1.x509.AlgorithmIdentifier getAlgorithmIdentifier()

getSignature

public byte[] getSignature()

getCrlNumber

public BigInteger getCrlNumber()

getBaseCrlNumber

public BigInteger getBaseCrlNumber()

isDeltaCrl

public boolean isDeltaCrl()

getCrlExtensions

public org.bouncycastle.asn1.x509.Extensions getCrlExtensions()

verifySignature

public boolean verifySignature(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo)
                        throws IOException

Throws:

IOException

verifySignature

public boolean verifySignature(PublicKey publicKey)
                        throws IOException

Throws:

IOException

revokedCertificates

public CrlStreamParser.RevokedCertsIterator revokedCertificates()
                                                         throws IOException

Throws:

IOException