code.ponfee.commons.jce.cert

类 X509CertGenerator

java.lang.Object

code.ponfee.commons.jce.cert.X509CertGenerator

public class X509CertGenerator
extends Object

证书生成工具类

作者:

Ponfee

构造器概要

构造器

构造器和说明
X509CertGenerator()

方法概要

限定符和类型	方法和说明
static sun.security.x509.CertificateExtensions	createExtensions(boolean isCA) 创建默认的扩展信息
static sun.security.pkcs10.PKCS10	createPkcs10(String subject, PrivateKey privateKey, PublicKey publicKey, RSASignAlgorithms sigAlg) 创建pkcs10
static X509Certificate	createRootCert(BigInteger sn, String issuer, RSASignAlgorithms sigAlg, PrivateKey privateKey, PublicKey publicKey, Date notBefore, Date notAfter) 创建CA根证书（自签名）
static X509Certificate	createRootCert(String issuer, RSASignAlgorithms sigAlg, PrivateKey privateKey, PublicKey publicKey, Date notBefore, Date notAfter)
static X509Certificate	createSubjectCert(X509Certificate caCert, PrivateKey caKey, BigInteger sn, sun.security.pkcs10.PKCS10 pkcs10, Date notBefore, Date notAfter) pkcs10请求CA签发证书
static X509Certificate	createSubjectCert(X509Certificate caCert, PrivateKey caKey, BigInteger sn, String subject, RSASignAlgorithms sigAlg, PrivateKey privateKey, PublicKey publicKey, Date notBefore, Date notAfter) 创建证书并用根证签发
static X509Certificate	createSubjectCert(X509Certificate caCert, PrivateKey caKey, sun.security.pkcs10.PKCS10 pkcs10, Date notBefore, Date notAfter)
static X509Certificate	createSubjectCert(X509Certificate caCert, PrivateKey caKey, String subject, RSASignAlgorithms sigAlg, PrivateKey privateKey, PublicKey publicKey, Date notBefore, Date notAfter)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

X509CertGenerator

public X509CertGenerator()

方法详细资料

createRootCert

public static X509Certificate createRootCert(String issuer,
                                             RSASignAlgorithms sigAlg,
                                             PrivateKey privateKey,
                                             PublicKey publicKey,
                                             Date notBefore,
                                             Date notAfter)

createRootCert

public static X509Certificate createRootCert(BigInteger sn,
                                             String issuer,
                                             RSASignAlgorithms sigAlg,
                                             PrivateKey privateKey,
                                             PublicKey publicKey,
                                             Date notBefore,
                                             Date notAfter)

创建CA根证书（自签名）

参数:

sn -

issuer -

sigAlg -

privateKey -

publicKey -

notBefore -

notAfter -

返回:

createSubjectCert

public static X509Certificate createSubjectCert(X509Certificate caCert,
                                                PrivateKey caKey,
                                                String subject,
                                                RSASignAlgorithms sigAlg,
                                                PrivateKey privateKey,
                                                PublicKey publicKey,
                                                Date notBefore,
                                                Date notAfter)

createSubjectCert

public static X509Certificate createSubjectCert(X509Certificate caCert,
                                                PrivateKey caKey,
                                                BigInteger sn,
                                                String subject,
                                                RSASignAlgorithms sigAlg,
                                                PrivateKey privateKey,
                                                PublicKey publicKey,
                                                Date notBefore,
                                                Date notAfter)

创建证书并用根证签发

参数:

caCert -

caKey -

sn -

subject -

sigAlg -

privateKey -

publicKey -

notBefore -

notAfter -

返回:

createSubjectCert

public static X509Certificate createSubjectCert(X509Certificate caCert,
                                                PrivateKey caKey,
                                                sun.security.pkcs10.PKCS10 pkcs10,
                                                Date notBefore,
                                                Date notAfter)

createSubjectCert

public static X509Certificate createSubjectCert(X509Certificate caCert,
                                                PrivateKey caKey,
                                                BigInteger sn,
                                                sun.security.pkcs10.PKCS10 pkcs10,
                                                Date notBefore,
                                                Date notAfter)

pkcs10请求CA签发证书

参数:

caCert -

caKey -

sn -

pkcs10 -

notBefore -

notAfter -

返回:

createPkcs10

public static sun.security.pkcs10.PKCS10 createPkcs10(String subject,
                                                      PrivateKey privateKey,
                                                      PublicKey publicKey,
                                                      RSASignAlgorithms sigAlg)

创建pkcs10

参数:

subject -

privateKey -

publicKey -

sigAlg -

返回:

createExtensions

public static sun.security.x509.CertificateExtensions createExtensions(boolean isCA)

创建默认的扩展信息

参数:

isCA - true is create CA cert false is create subject cert

返回: