/*
* Copyright (c) 2005, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation. Oracle designates this
* particular file as subject to the "Classpath" exception as provided
* by Oracle in the LICENSE file that accompanied this code.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* $Id: X509Data.java,v 1.4 2005/05/10 16:35:35 mullan Exp $
*/
package javax.xml.crypto.dsig.keyinfo;
import javax.xml.crypto.XMLStructure;
import java.security.cert.X509CRL;
import java.util.List;
/**
* A representation of the XML X509Data
element as defined in
* the
* W3C Recommendation for XML-Signature Syntax and Processing. An
* X509Data
object contains one or more identifers of keys
* or X.509 certificates (or certificates' identifiers or a revocation list).
* The XML Schema Definition is defined as:
*
*
* <element name="X509Data" type="ds:X509DataType"/> * <complexType name="X509DataType"> * <sequence maxOccurs="unbounded"> * <choice> * <element name="X509IssuerSerial" type="ds:X509IssuerSerialType"/> * <element name="X509SKI" type="base64Binary"/> * <element name="X509SubjectName" type="string"/> * <element name="X509Certificate" type="base64Binary"/> * <element name="X509CRL" type="base64Binary"/> * <any namespace="##other" processContents="lax"/> * </choice> * </sequence> * </complexType> * * <complexType name="X509IssuerSerialType"> * <sequence> * <element name="X509IssuerName" type="string"/> * <element name="X509SerialNumber" type="integer"/> * </sequence> * </complexType> ** * An
X509Data
instance may be created by invoking the
* {@link KeyInfoFactory#newX509Data newX509Data} methods of the
* {@link KeyInfoFactory} class and passing it a list of one or more
* {@link XMLStructure}s representing X.509 content; for example:
* * KeyInfoFactory factory = KeyInfoFactory.getInstance("DOM"); * X509Data x509Data = factory.newX509Data * (Collections.singletonList("cn=Alice")); ** * @author Sean Mullan * @author JSR 105 Expert Group * @since 1.6 * @see KeyInfoFactory#newX509Data(List) */ //@@@ check for illegal combinations of data violating MUSTs in W3c spec public interface X509Data extends XMLStructure { /** * URI identifying the X509Data KeyInfo type: * http://www.w3.org/2000/09/xmldsig#X509Data. This can be specified as * the value of the
type
parameter of the
* {@link RetrievalMethod} class to describe a remote
* X509Data
structure.
*/
final static String TYPE = "http://www.w3.org/2000/09/xmldsig#X509Data";
/**
* URI identifying the binary (ASN.1 DER) X.509 Certificate KeyInfo type:
* http://www.w3.org/2000/09/xmldsig#rawX509Certificate. This can be
* specified as the value of the type
parameter of the
* {@link RetrievalMethod} class to describe a remote X509 Certificate.
*/
final static String RAW_X509_CERTIFICATE_TYPE =
"http://www.w3.org/2000/09/xmldsig#rawX509Certificate";
/**
* Returns an {@link java.util.Collections#unmodifiableList unmodifiable
* list} of the content in this X509Data
. Valid types are
* {@link String} (subject names), byte[]
(subject key ids),
* {@link java.security.cert.X509Certificate}, {@link X509CRL},
* or {@link XMLStructure} ({@link X509IssuerSerial}
* objects or elements from an external namespace).
*
* @return an unmodifiable list of the content in this X509Data
* (never null
or empty)
*/
List getContent();
}