Package zeroecho.pkix
package zeroecho.pkix
-
ClassDescriptionProvider-independent X.509
AlgorithmIdentifier(RFC 5280): an OID with an exactly-typed parameter form.Encoding form of the optionalparametersfield.The X.509BasicConstraintsextension value (RFC 5280, 4.2.1.9).A generic X.509 v3 extension (RFC 5280, 4.1): an OID, a criticality flag, and the exact DER of theextnValueOCTET STRING contents.Thrown when a PKCS#10 certification request cannot be parsed or its proof-of-possession self-signature fails verification.The ASN.1 string type used to encode a distinguished-name attribute value.Strict RFC 7030 server-key-generation template and recipient validation.An X.509ExtendedKeyUsageextension value (RFC 5280, 4.2.1.12): an ordered list of key-purpose OIDs.A typed X.509GeneralName(RFC 5280, 4.2.1.6), used for subject/issuer alternative names and related extensions.directoryName(tag 4).dNSName(tag 2).iPAddress(tag 7), as a textual IPv4/IPv6 literal.otherName(tag 0): a type-id OID plus the exact DER of the value.registeredID(tag 8).rfc822Name(tag 1), an e-mail address.uniformResourceIdentifier(tag 6).The X.509KeyUsagebits (RFC 5280, 4.2.1.3), in the standard bit order.The entry point of the ZeroEcho PKIX API: certificate, CSR, CRL, and OCSP builders and parsers plus content signing and verification, all in terms of standardjava.securitytypes.Immutable mathematical public-key identity for enrollment separation checks.A single-valued relative distinguished name: an attribute-type OID, its value, and the ASN.1 string type used to encode that value.Thrown byPkix.parseDistinguishedName(byte[])when a relative distinguished name carries an attribute value whose ASN.1 string type is not one of the supported directory string types (UTF8String,PrintableString,IA5String).