Package org.bouncycastle.cert.ct

Class TransItem

java.lang.Object
org.bouncycastle.cert.ct.TransItem
public class TransItem extends Object
One TLS-encoded item from an RFC 9162 (CT v2) TransItemList. The structure is a 2-byte VersionedTransType followed by the type-specific data payload; this class retains the payload as opaque bytes and provides a typed decoder for the only payload kind the certificate-side decoder needs to interpret in practice: getSignedCertificateTimestampDataV2(). Other payload kinds (log entries, signed tree heads, consistency / inclusion proofs) are still recoverable through getRawData(); layering structured decoders on top is intentionally left to consumers that need them. 
     enum {
         x509_entry_v2(0x0100), precert_entry_v2(0x0101),
         x509_sct_v2(0x0102),   precert_sct_v2(0x0103),
         signed_tree_head_v2(0x0104),
         consistency_proof_v2(0x0105),
         inclusion_proof_v2(0x0106),
         reserved_rfc6962(0x0000..0x00FF),
         reserved_experimentaluse(0xE000..0xEFFF),
         reserved_privateuse(0xF000..0xFFFF),
         (0xFFFF)
     } VersionedTransType;

     struct {
         VersionedTransType versioned_type;
         select (versioned_type) {
             case x509_sct_v2:    SignedCertificateTimestampDataV2;
             case precert_sct_v2: SignedCertificateTimestampDataV2;
             ...
         } data;
     } TransItem;

  • Field Details

  • Constructor Details

    • TransItem

      public TransItem(int versionedType, byte[] data)

  • Method Details

    • getInstance

      public static TransItem getInstance(byte[] encoded)
      Decode a TransItem from its serialized form (the bytes that appear as one SerializedTransItem entry inside a TransItemList).

    • getVersionedType

      public int getVersionedType()

    • getRawData

      public byte[] getRawData()
      The raw data payload bytes — i.e. the SerializedTransItem minus the 2-byte versioned_type prefix. The caller is responsible for parsing them according to getVersionedType().

    • getSignedCertificateTimestampDataV2

      public SignedCertificateTimestampDataV2 getSignedCertificateTimestampDataV2()
      When this item is a v2 SCT (x509_sct_v2 or precert_sct_v2), return the decoded payload; otherwise return null.

    • getEncoded

      public byte[] getEncoded()
      Serialize this TransItem to its TLS wire form.