CertHash (Bouncy Castle Library 1.37 API Specification)

ISIS-MTT PROFILE: The responder may include this extension in a response to send the hash of the requested certificate to the responder. This hash is cryptographically bound to the certificate and serves as evidence that the certificate is known to the responder (i.e. it has been issued and is present in the directory). Hence, this extension is a means to provide a positive statement of availability as described in T8.[8]. As explained in T13.[1], clients may rely on this information to be able to validate signatures after the expiry of the corresponding certificate. Hence, clients MUST support this extension. If a positive statement of availability is to be delivered, this extension syntax and OID MUST be used.

     CertHash ::= SEQUENCE {
       hashAlgorithm AlgorithmIdentifier,
       certificateHash OCTET STRING
     }

Constructor Summary
	CertHash(AlgorithmIdentifier hashAlgorithm, byte[] certificateHash) Constructor from a given details.

Method Summary
byte[]	getCertificateHash()
AlgorithmIdentifier	getHashAlgorithm()
static CertHash	getInstance(Object obj)
DERObject	toASN1Object() Produce an object suitable for an ASN1OutputStream.

Constructor Detail

CertHash

Constructor from a given details.

Parameters: hashAlgorithm The hash algorithm identifier. certificateHash The hash of the whole DER encoding of the certificate.

Produce an object suitable for an ASN1OutputStream.

Returns:

     CertHash ::= SEQUENCE {
       hashAlgorithm AlgorithmIdentifier,
       certificateHash OCTET STRING
     }

Returns: a DERObject