Package de.trustable.ca3s.core.service.cmp

Class CaCmpConnector

java.lang.Object

de.trustable.ca3s.core.service.cmp.CaCmpConnector

@Service
public class CaCmpConnector
extends Object

Constructor Summary

Constructors

Constructor	Description
CaCmpConnector()

Method Summary

Modifier and Type	Method	Description
org.bouncycastle.asn1.cmp.PKIMessage	buildCertRequest(long certReqId, CSR csr, String hmacSecret)
org.bouncycastle.asn1.cmp.GenMsgContent	getGeneralInfo(String hmacSecret, String cmpEndpoint, String alias)
CAStatus	getStatus(CAConnectorConfig caConnConfig)
Certificate	readCertResponse(byte[] responseBytes, org.bouncycastle.asn1.cmp.PKIMessage pkiMessageReq, CSR csr, CAConnectorConfig config)
void	revokeCertificate(Certificate certDao, org.bouncycastle.asn1.x509.CRLReason crlReason, Date revocationDate, CAConnectorConfig caConnConfig)
void	revokeCertificate(X509Certificate x509Cert, org.bouncycastle.asn1.x509.CRLReason crlReason, String hmacSecret, String cmpEndpoint, String alias)
void	revokeCertificate(org.bouncycastle.asn1.x500.X500Name issuerDN, org.bouncycastle.asn1.x500.X500Name subjectDN, BigInteger serial, org.bouncycastle.asn1.x509.CRLReason crlReason, String hmacSecret, String cmpEndpoint, String alias)
Certificate	signCertificateRequest(CSR csr, CAConnectorConfig caConnConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CaCmpConnector

public CaCmpConnector()

Method Detail

signCertificateRequest

public Certificate signCertificateRequest(CSR csr,
                                          CAConnectorConfig caConnConfig)
                                   throws GeneralSecurityException

Parameters:

csr - csr as CSR object

caConnConfig - CAConnectorConfig

Returns:

the created certificate, pem encoded

Throws:

GeneralSecurityException - something went wrong, e.g. no CSM format

revokeCertificate

public void revokeCertificate(X509Certificate x509Cert,
                              org.bouncycastle.asn1.x509.CRLReason crlReason,
                              String hmacSecret,
                              String cmpEndpoint,
                              String alias)
                       throws GeneralSecurityException

Parameters:

x509Cert -

crlReason -

hmacSecret -

cmpEndpoint -

alias -

Throws:

GeneralSecurityException

revokeCertificate

public void revokeCertificate(Certificate certDao,
                              org.bouncycastle.asn1.x509.CRLReason crlReason,
                              Date revocationDate,
                              CAConnectorConfig caConnConfig)
                       throws GeneralSecurityException

Parameters:

certDao -

crlReason -

revocationDate -

caConnConfig -

Throws:

GeneralSecurityException

revokeCertificate

public void revokeCertificate(org.bouncycastle.asn1.x500.X500Name issuerDN,
                              org.bouncycastle.asn1.x500.X500Name subjectDN,
                              BigInteger serial,
                              org.bouncycastle.asn1.x509.CRLReason crlReason,
                              String hmacSecret,
                              String cmpEndpoint,
                              String alias)
                       throws GeneralSecurityException

Parameters:

issuerDN -

subjectDN -

serial -

crlReason -

hmacSecret -

cmpEndpoint -

alias -

Throws:

GeneralSecurityException

buildCertRequest

public org.bouncycastle.asn1.cmp.PKIMessage buildCertRequest(long certReqId,
                                                             CSR csr,
                                                             String hmacSecret)
                                                      throws GeneralSecurityException

Parameters:

certReqId -

csr -

hmacSecret -

Returns:

PKIMessage

Throws:

GeneralSecurityException

getStatus

public CAStatus getStatus(CAConnectorConfig caConnConfig)

Parameters:

caConnConfig -

Returns:

getGeneralInfo

public org.bouncycastle.asn1.cmp.GenMsgContent getGeneralInfo(String hmacSecret,
                                                              String cmpEndpoint,
                                                              String alias)
                                                       throws GeneralSecurityException

Throws:

GeneralSecurityException

readCertResponse

public Certificate readCertResponse(byte[] responseBytes,
                                    org.bouncycastle.asn1.cmp.PKIMessage pkiMessageReq,
                                    CSR csr,
                                    CAConnectorConfig config)
                             throws IOException,
                                    org.bouncycastle.cert.crmf.CRMFException,
                                    org.bouncycastle.cert.cmp.CMPException,
                                    GeneralSecurityException

Parameters:

responseBytes -

pkiMessageReq -

csr -

config -

Throws:

IOException

org.bouncycastle.cert.crmf.CRMFException

org.bouncycastle.cert.cmp.CMPException

GeneralSecurityException