log.debug("Creating a rejection message");

      myPKIStatusInfo = new PKIStatusInfo(new DERInteger(2)); // 2 = rejection     

      myPKIStatusInfo.setFailInfo(failInfo.getAsBitString());

      if (failText != null) {

      }

    }

    RevRepContent myRevrepMessage = new RevRepContent(myPKIStatusInfo);

    PKIBody myPKIBody = new PKIBody(myRevrepMessage, CmpPKIBodyConstants.REVOCATIONRESPONSE);

        ASN1EncodableVector challpwdattr = new ASN1EncodableVector();

        // Challenge password attribute

        challpwdattr.add(PKCSObjectIdentifiers.pkcs_9_at_challengePassword);

        ASN1EncodableVector pwdvalues = new ASN1EncodableVector();

        challpwdattr.add(new DERSet(pwdvalues));

        ASN1EncodableVector extensionattr = new ASN1EncodableVector();

        extensionattr.add(PKCSObjectIdentifiers.pkcs_9_at_extensionRequest);

        extensionattr.add(new DERSet(exts));

        // Complete the Attribute section of the request, the set (Attributes) contains two sequences (Attribute)

        //      issuer "the certificate authority issuer name"

        //      subject "the requester subject name as given in PKCS#10"

        //  }

        ASN1EncodableVector vec = new ASN1EncodableVector();

        DERSequence seq = new DERSequence(vec);

       

        // The self signed certificate has already been generated when the request message was created

        // Create self signed cert, validity 1 day

        //cert = CertTools.genSelfCert(reqdn,24*60*60*1000,null,keys.getPrivate(),keys.getPublic(),AlgorithmConstants.SIGALG_SHA1_WITH_RSA,false);

 

    }

  }

 

  private DEREncodable parseDERUTF8String(String value)  {   

  }

        av = getReq().getRegInfo(i);

        if (av != null) {

          if (StringUtils.equals(CRMFObjectIdentifiers.regCtrl_regToken.getId(), av.getObjectId().getId())) {

            final DEREncodable enc = av.getParameters();

            if (log.isDebugEnabled()) {

              log.debug("Found a request password in CRMF request regCtrl_regToken");

            }

          }

        }

        i++;

      } while ( (av != null) && (ret == null) );

    }   

    if (ret == null) {

      // If there is "Registration Token Control" in the CertRequest controls containing a password, we can use that

      // Note, this is the correct way to use the regToken according to RFC4211, section "6.1.  Registration Token Control"

      AttributeTypeAndValue av = null;

      int i = 0;

      do {

        av = getReq().getCertReq().getControls(i);

        if (av != null) {

          if (StringUtils.equals(CRMFObjectIdentifiers.regCtrl_regToken.getId(), av.getObjectId().getId())) {

            final DEREncodable enc = av.getParameters();

            if (log.isDebugEnabled()) {

              log.debug("Found a request password in CRMF request regCtrl_regToken");

            }

          }

        }

        // Create a failure message

        PKIStatusInfo myPKIStatusInfo = new PKIStatusInfo(new DERInteger(2)); // 2 = rejection

        myPKIStatusInfo.setFailInfo(failInfo.getAsBitString());

        if (failText != null) {

        }

        PKIBody myPKIBody = CmpMessageHelper.createCertRequestRejectBody(myPKIHeader, myPKIStatusInfo, requestId, requestType);

        PKIMessage myPKIMessage = new PKIMessage(myPKIHeader, myPKIBody);

       

        if ( (pbeKeyId != null) && (pbeKey != null) && (pbeDigestAlg != null) && (pbeMacAlg != null) ) {

          responseMessage = CmpMessageHelper.protectPKIMessageWithPBE(myPKIMessage, pbeKeyId, pbeKey, pbeDigestAlg, pbeMacAlg, pbeIterationCount);

        } else {

          responseMessage = CmpMessageHelper.signPKIMessage(myPKIMessage, (X509Certificate)signCert, signKey, digestAlg, provider);

        }

        ret = true; 

      } else {

          if (log.isDebugEnabled()) {

            log.debug("Creating a 'waiting' message?");

          }

        // Not supported, lets create a PKIError failure instead

        // Create a failure message

        PKIStatusInfo myPKIStatusInfo = new PKIStatusInfo(new DERInteger(2)); // 2 = rejection

        myPKIStatusInfo.setFailInfo(failInfo.getAsBitString());

        if (failText != null) {

        }

        ErrorMsgContent myErrorContent = new ErrorMsgContent(myPKIStatusInfo);

        PKIBody myPKIBody = new PKIBody(myErrorContent, 23); // 23 = error

        PKIMessage myPKIMessage = new PKIMessage(myPKIHeader, myPKIBody);

        if ( (pbeKeyId != null) && (pbeKey != null) && (pbeDigestAlg != null) && (pbeMacAlg != null) ) {

    //

    // YourCustomUTF8String ::= UTF8String

    if (certProfile.getUseQCCustomString() &&

        !StringUtils.isEmpty(certProfile.getQCCustomStringOid()) && !StringUtils.isEmpty(certProfile.getQCCustomStringText())) {

      final DERObjectIdentifier oid = new DERObjectIdentifier(certProfile.getQCCustomStringOid());

      qc = new QCStatement(oid, str);

      qcs.add(qc);                

    }

    if (!qcs.isEmpty()) {

                new DERTaggedObject(0, new DERPrintableString("hello world")),

                new DERUniversalString(data),

                new DERUnknownTag(0xff & (~(DERTags.TAGGED | DERTags.APPLICATION)), data),

                new DERUTCTime(new Date()),

                new DERVisibleString("hello world")

            };

       

        try

        {

         case CONTENT_TYPE_IA5STRING:

            contents = (DERString)new DERIA5String (text);

            break;

         case CONTENT_TYPE_UTF8STRING:

            break;

         case CONTENT_TYPE_VISIBLESTRING:

            contents = (DERString)new DERVisibleString(text);

            break;

         case CONTENT_TYPE_BMPSTRING:

            contents = (DERString)new DERBMPString(text);

            break;

         default:

            break;

      }

   }

     

      if (canBeUTF8(text))

      {

          contentType = CONTENT_TYPE_UTF8STRING;

      }

      else

      {

          contentType = CONTENT_TYPE_BMPSTRING;

          contents = new DERBMPString(text);