NameDateSize

..12-Dec-201716

AccessDescription.javaH A D12-Dec-20174 KiB

AlgIdDSA.javaH A D12-Dec-20177.5 KiB

AlgorithmId.javaH A D12-Dec-201739.5 KiB

AttributeNameEnumeration.javaH A D12-Dec-20171.8 KiB

AuthorityInfoAccessExtension.javaH A D12-Dec-20178.3 KiB

AuthorityKeyIdentifierExtension.javaH A D12-Dec-201711.7 KiB

AVA.javaH A D12-Dec-201750 KiB

BasicConstraintsExtension.javaH A D12-Dec-20179 KiB

certAttributes.htmlH A D12-Dec-20175.8 KiB

CertAttrSet.javaH A D12-Dec-20173.9 KiB

CertException.javaH A D12-Dec-20175.8 KiB

CertificateAlgorithmId.javaH A D12-Dec-20175.4 KiB

CertificateExtensions.javaH A D12-Dec-201712.6 KiB

CertificateIssuerExtension.javaH A D12-Dec-20176.8 KiB

CertificateIssuerName.javaH A D12-Dec-20175.6 KiB

CertificatePoliciesExtension.javaH A D12-Dec-20178.7 KiB

CertificatePolicyId.javaH A D12-Dec-20173.2 KiB

CertificatePolicyMap.javaH A D12-Dec-20173.5 KiB

CertificatePolicySet.javaH A D12-Dec-20173.1 KiB

CertificateSerialNumber.javaH A D12-Dec-20175.6 KiB

CertificateSubjectName.javaH A D12-Dec-20175.6 KiB

CertificateValidity.javaH A D12-Dec-20179.4 KiB

CertificateVersion.javaH A D12-Dec-20177 KiB

CertificateX509Key.javaH A D12-Dec-20174.9 KiB

CertParseError.javaH A D12-Dec-20171.6 KiB

CRLDistributionPointsExtension.javaH A D12-Dec-201710.5 KiB

CRLExtensions.javaH A D12-Dec-201710.3 KiB

CRLNumberExtension.javaH A D12-Dec-20177.7 KiB

CRLReasonCodeExtension.javaH A D12-Dec-20176.2 KiB

DeltaCRLIndicatorExtension.javaH A D12-Dec-20174.1 KiB

DistributionPoint.javaH A D12-Dec-201714.7 KiB

DistributionPointName.javaH A D12-Dec-20177.6 KiB

DNSName.javaH A D12-Dec-20179.5 KiB

EDIPartyName.javaH A D12-Dec-20178.6 KiB

ExtendedKeyUsageExtension.javaH A D12-Dec-201711.6 KiB

Extension.javaH A D12-Dec-20178.9 KiB

FreshestCRLExtension.javaH A D12-Dec-20173.2 KiB

GeneralName.javaH A D12-Dec-20178.8 KiB

GeneralNameInterface.javaH A D12-Dec-20174.2 KiB

GeneralNames.javaH A D12-Dec-20174.1 KiB

GeneralSubtree.javaH A D12-Dec-20176.5 KiB

GeneralSubtrees.javaH A D12-Dec-201719.4 KiB

InhibitAnyPolicyExtension.javaH A D12-Dec-20179 KiB

InvalidityDateExtension.javaH A D12-Dec-20177 KiB

IPAddressName.javaH A D12-Dec-201718.9 KiB

IssuerAlternativeNameExtension.javaH A D12-Dec-20177.5 KiB

IssuingDistributionPointExtension.javaH A D12-Dec-201717.3 KiB

KeyIdentifier.javaH A D12-Dec-20175 KiB

KeyUsageExtension.javaH A D12-Dec-201712.3 KiB

NameConstraintsExtension.javaH A D12-Dec-201722.6 KiB

NetscapeCertTypeExtension.javaH A D12-Dec-201710.3 KiB

OCSPNoCheckExtension.javaH A D12-Dec-20174.4 KiB

OIDMap.javaH A D12-Dec-201713.1 KiB

OIDName.javaH A D12-Dec-20175.6 KiB

OtherName.javaH A D12-Dec-20178.5 KiB

PKIXExtensions.javaH A D12-Dec-201711.3 KiB

PolicyConstraintsExtension.javaH A D12-Dec-20179.7 KiB

PolicyInformation.javaH A D12-Dec-20179.9 KiB

PolicyMappingsExtension.javaH A D12-Dec-20177.3 KiB

PrivateKeyUsageExtension.javaH A D12-Dec-201711.6 KiB

RDN.javaH A D12-Dec-201716.1 KiB

READMEH A D12-Dec-20172 KiB

ReasonFlags.javaH A D12-Dec-20177.7 KiB

RFC822Name.javaH A D12-Dec-20178.9 KiB

SerialNumber.javaH A D12-Dec-20173.8 KiB

SubjectAlternativeNameExtension.javaH A D12-Dec-20177.6 KiB

SubjectInfoAccessExtension.javaH A D12-Dec-20178.6 KiB

SubjectKeyIdentifierExtension.javaH A D12-Dec-20176.5 KiB

UniqueIdentity.javaH A D12-Dec-20173.5 KiB

URIName.javaH A D12-Dec-201713.8 KiB

X400Address.javaH A D12-Dec-201715.5 KiB

X500Name.javaH A D12-Dec-201747.9 KiB

X509AttributeName.javaH A D12-Dec-20172.2 KiB

X509CertImpl.javaH A D12-Dec-201769.8 KiB

X509CertInfo.javaH A D12-Dec-201732.6 KiB

X509CRLEntryImpl.javaH A D12-Dec-201718.1 KiB

X509CRLImpl.javaH A D12-Dec-201747.1 KiB

X509Key.javaH A D12-Dec-201715.9 KiB

README

1
2Quick summary of the main purpose here:  X.509 certs are used in public
3key infrastructure for protocols such as SSL and SET.  These certificates
4involve ISO/CCITT standard technologies such as ASN.1/DER, which control
5the format of the data being transmitted.  X.509 itself describes the
6content of the data (e.g. X.500 user name, public key for that user, more)
7and how to sign it.
8
9+++	+++	+++	+++	+++	+++	+++	+++	+++
10
11The X.509 support in JDK 1.2 builds on the java.security signature and
12key management APIs.  The following packages provide the X.509 support:
13
14    sun.security.util ... holds DER utilities, for parsing and generating
15	streams of DER-encoded data values, including object identifiers.
16
17    sun.security.x509 ... basic X.509 certificate parsing and generation
18	framework, including X.509 keys, X.500 names, algorithm IDs,
19        X.509 v3 extensions, and more.
20
21+++	+++	+++	+++	+++	+++	+++	+++	+++
22
23Information which may be useful when you work with X.509 certificates is
24found in:
25
26    The IETF has a public key infrastructure working group, PKIX.
27    See http://www.ietf.org for more information.
28
29    RFC 1422, which describes the key management infrastructure for
30    the Privacy Enhanced Mail (PEM) system.  It builds on X.509,
31    and is perhaps the most useful overview I've found.
32
33    RFC 1777, which describes the Lightweight Directory Access
34    Protocol (LDAP) that many organizations are expecting will help
35    address online certificate distribution over the Internet.
36
37    RFC 5280, which describes the Internet X.509 Public Key
38    Infrastructure Certificate and CRL Profile.  
39
40    RSA DSI has a bunch of "Public Key Cryptography Standards" (PKCS) which
41    have been relatively well accepted.  They build on top of the X.509
42    infrastructure.  You can FTP them from ftp://ftp.rsa.com/pub/pkcs, in
43    either PostScript or ASCII format.
44
45    RSA DSI has also provided a "Layman's Guide" to ASN.1/DER, with
46    examples from the X.509 and PKCS standards.  This is available from
47    the PKCS FTP area noted above.
48