Package org.mozilla.jss.pkcs11
Class PK11Cert
- java.lang.Object
-
- java.security.cert.Certificate
-
- java.security.cert.X509Certificate
-
- org.mozilla.jss.pkcs11.PK11Cert
-
- All Implemented Interfaces:
java.io.Serializable
,java.security.cert.X509Extension
,X509Certificate
- Direct Known Subclasses:
PK11InternalCert
,PK11TokenCert
public class PK11Cert extends java.security.cert.X509Certificate implements X509Certificate
- See Also:
- Serialized Form
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description protected static class
PK11Cert.StringPrincipal
A class that implements Principal with a String.
-
Field Summary
Fields Modifier and Type Field Description protected org.mozilla.jss.pkcs11.CertProxy
certProxy
static org.slf4j.Logger
logger
protected java.lang.String
nickname
protected TokenProxy
tokenProxy
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
checkValidity()
void
checkValidity(java.util.Date date)
int
getBasicConstraints()
java.util.Set<java.lang.String>
getCriticalExtensionOIDs()
byte[]
getEncoded()
byte[]
getExtensionValue(java.lang.String oid)
java.security.Principal
getIssuerDN()
protected java.lang.String
getIssuerDNString()
boolean[]
getIssuerUniqueID()
boolean[]
getKeyUsage()
java.lang.String
getNickname()
java.util.Set<java.lang.String>
getNonCriticalExtensionOIDs()
java.util.Date
getNotAfter()
java.util.Date
getNotBefore()
protected CryptoToken
getOwningToken()
java.security.PublicKey
getPublicKey()
java.math.BigInteger
getSerialNumber()
protected byte[]
getSerialNumberByteArray()
java.lang.String
getSigAlgName()
java.lang.String
getSigAlgOID()
byte[]
getSigAlgParams()
byte[]
getSignature()
java.security.Principal
getSubjectDN()
protected java.lang.String
getSubjectDNString()
boolean[]
getSubjectUniqueID()
byte[]
getTBSCertificate()
protected int
getTrust(int type)
Gets the trust flags for this cert.protected byte[]
getUniqueID()
int
getVersion()
boolean
hasUnsupportedCriticalExtension()
protected void
setTrust(int type, int trust)
Sets the trust flags for this cert.java.lang.String
toString()
void
verify(java.security.PublicKey key)
void
verify(java.security.PublicKey key, java.lang.String sigProvider)
-
-
-
Field Detail
-
logger
public static org.slf4j.Logger logger
-
certProxy
protected org.mozilla.jss.pkcs11.CertProxy certProxy
-
tokenProxy
protected TokenProxy tokenProxy
-
nickname
protected java.lang.String nickname
-
-
Method Detail
-
getEncoded
public byte[] getEncoded() throws java.security.cert.CertificateEncodingException
- Specified by:
getEncoded
in interfaceX509Certificate
- Specified by:
getEncoded
in classjava.security.cert.Certificate
- Returns:
- The DER encoding of this certificate.
- Throws:
java.security.cert.CertificateEncodingException
- If an error occurred.
-
getNickname
public java.lang.String getNickname()
- Specified by:
getNickname
in interfaceX509Certificate
- Returns:
- The nickname of this certificate (could be null).
-
getSubjectDN
public java.security.Principal getSubjectDN()
- Specified by:
getSubjectDN
in interfaceX509Certificate
- Specified by:
getSubjectDN
in classjava.security.cert.X509Certificate
- Returns:
- The RFC 1485 ASCII encoding of the Subject Name.
-
getIssuerDN
public java.security.Principal getIssuerDN()
- Specified by:
getIssuerDN
in interfaceX509Certificate
- Specified by:
getIssuerDN
in classjava.security.cert.X509Certificate
- Returns:
- The RFC 1485 ASCII encoding of the issuer's Subject Name.
-
getSerialNumber
public java.math.BigInteger getSerialNumber()
- Specified by:
getSerialNumber
in interfaceX509Certificate
- Specified by:
getSerialNumber
in classjava.security.cert.X509Certificate
- Returns:
- The serial number of this certificate.
-
getSerialNumberByteArray
protected byte[] getSerialNumberByteArray()
-
getSubjectDNString
protected java.lang.String getSubjectDNString()
-
getIssuerDNString
protected java.lang.String getIssuerDNString()
-
getPublicKey
public java.security.PublicKey getPublicKey()
- Specified by:
getPublicKey
in interfaceX509Certificate
- Specified by:
getPublicKey
in classjava.security.cert.Certificate
- Returns:
- The Public Key from this certificate.
-
getVersion
public int getVersion()
- Specified by:
getVersion
in interfaceX509Certificate
- Specified by:
getVersion
in classjava.security.cert.X509Certificate
- Returns:
- the version number of this X.509 certificate. 0 means v1, 1 means v2, 2 means v3.
-
getBasicConstraints
public int getBasicConstraints()
- Specified by:
getBasicConstraints
in classjava.security.cert.X509Certificate
-
getKeyUsage
public boolean[] getKeyUsage()
- Specified by:
getKeyUsage
in classjava.security.cert.X509Certificate
-
getSubjectUniqueID
public boolean[] getSubjectUniqueID()
- Specified by:
getSubjectUniqueID
in classjava.security.cert.X509Certificate
-
getIssuerUniqueID
public boolean[] getIssuerUniqueID()
- Specified by:
getIssuerUniqueID
in classjava.security.cert.X509Certificate
-
getSigAlgParams
public byte[] getSigAlgParams()
- Specified by:
getSigAlgParams
in classjava.security.cert.X509Certificate
-
getSigAlgName
public java.lang.String getSigAlgName()
- Specified by:
getSigAlgName
in classjava.security.cert.X509Certificate
-
getSigAlgOID
public java.lang.String getSigAlgOID()
- Specified by:
getSigAlgOID
in classjava.security.cert.X509Certificate
-
getSignature
public byte[] getSignature()
- Specified by:
getSignature
in classjava.security.cert.X509Certificate
-
getTBSCertificate
public byte[] getTBSCertificate() throws java.security.cert.CertificateEncodingException
- Specified by:
getTBSCertificate
in classjava.security.cert.X509Certificate
- Throws:
java.security.cert.CertificateEncodingException
-
getNotAfter
public java.util.Date getNotAfter()
- Specified by:
getNotAfter
in classjava.security.cert.X509Certificate
-
getNotBefore
public java.util.Date getNotBefore()
- Specified by:
getNotBefore
in classjava.security.cert.X509Certificate
-
checkValidity
public void checkValidity() throws java.security.cert.CertificateExpiredException, java.security.cert.CertificateNotYetValidException
- Specified by:
checkValidity
in classjava.security.cert.X509Certificate
- Throws:
java.security.cert.CertificateExpiredException
java.security.cert.CertificateNotYetValidException
-
checkValidity
public void checkValidity(java.util.Date date) throws java.security.cert.CertificateExpiredException, java.security.cert.CertificateNotYetValidException
- Specified by:
checkValidity
in classjava.security.cert.X509Certificate
- Throws:
java.security.cert.CertificateExpiredException
java.security.cert.CertificateNotYetValidException
-
toString
public java.lang.String toString()
- Specified by:
toString
in classjava.security.cert.Certificate
-
verify
public void verify(java.security.PublicKey key) throws java.security.cert.CertificateException, java.security.NoSuchAlgorithmException, java.security.InvalidKeyException, java.security.NoSuchProviderException, java.security.SignatureException
- Specified by:
verify
in classjava.security.cert.Certificate
- Throws:
java.security.cert.CertificateException
java.security.NoSuchAlgorithmException
java.security.InvalidKeyException
java.security.NoSuchProviderException
java.security.SignatureException
-
verify
public void verify(java.security.PublicKey key, java.lang.String sigProvider) throws java.security.cert.CertificateException, java.security.NoSuchAlgorithmException, java.security.InvalidKeyException, java.security.NoSuchProviderException, java.security.SignatureException
- Specified by:
verify
in classjava.security.cert.Certificate
- Throws:
java.security.cert.CertificateException
java.security.NoSuchAlgorithmException
java.security.InvalidKeyException
java.security.NoSuchProviderException
java.security.SignatureException
-
getExtensionValue
public byte[] getExtensionValue(java.lang.String oid)
- Specified by:
getExtensionValue
in interfacejava.security.cert.X509Extension
-
getCriticalExtensionOIDs
public java.util.Set<java.lang.String> getCriticalExtensionOIDs()
- Specified by:
getCriticalExtensionOIDs
in interfacejava.security.cert.X509Extension
-
getNonCriticalExtensionOIDs
public java.util.Set<java.lang.String> getNonCriticalExtensionOIDs()
- Specified by:
getNonCriticalExtensionOIDs
in interfacejava.security.cert.X509Extension
-
hasUnsupportedCriticalExtension
public boolean hasUnsupportedCriticalExtension()
- Specified by:
hasUnsupportedCriticalExtension
in interfacejava.security.cert.X509Extension
-
getUniqueID
protected byte[] getUniqueID()
-
getOwningToken
protected CryptoToken getOwningToken()
-
setTrust
protected void setTrust(int type, int trust)
Sets the trust flags for this cert.- Parameters:
type
- SSL, EMAIL, or OBJECT_SIGNING.trust
- The trust flags for this type of trust.
-
getTrust
protected int getTrust(int type)
Gets the trust flags for this cert.- Parameters:
type
- SSL, EMAIL, or OBJECT_SIGNING.- Returns:
- The trust flags for this type of trust.
-
-