org.ejbca.cvc

Class CertificateGenerator

java.lang.Object

org.ejbca.cvc.CertificateGenerator

public final class CertificateGenerator
extends Object

Generates CV-certificates and CVC-requests

Version:

$Id$

Author:

Keijo Kurkinen, Swedish National Police Board

Method Summary

Modifier and Type	Method and Description
static CVCAuthenticatedRequest	createAuthenticatedRequest(CVCertificate cvcRequest, KeyPair keyPair, String algorithmName, CAReferenceField caRef) Generates a CVCAuthenticatedRequest using BouncyCastle as signature provider
static CVCAuthenticatedRequest	createAuthenticatedRequest(CVCertificate cvcRequest, KeyPair keyPair, String algorithmName, CAReferenceField caRef, String signProvider) Same as above except that signature provider is an argument
static CVCertificate	createCertificate(PrivateKey signerKey, String algorithmName, CVCertificateBody body, String provider) Generates a CVCertificate
static CVCertificate	createCertificate(PublicKey publicKey, PrivateKey signerKey, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, AuthorizationRole authRole, AccessRights rights, Date validFrom, Date validTo, Collection<CVCDiscretionaryDataTemplate> extensions, String provider) Generates a CVCertificate
static CVCertificate	createCertificate(PublicKey publicKey, PrivateKey signerKey, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, AuthorizationRole authRole, AccessRights rights, Date validFrom, Date validTo, String provider) Generates a CVCertificate
static CVCertificate	createCertificate(PublicKey publicKey, PrivateKey signerKey, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, AuthorizationRoleEnum authRole, AccessRightEnum rights, Date validFrom, Date validTo, String provider) Generates a CVCertificate.
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef) Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, Collection<CVCDiscretionaryDataTemplate> extensions, String signProvider) Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, String signProvider) Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, HolderReferenceField holderRef) Generates a CVC-request without an outer signature using BouncyCastle as signature provider
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, HolderReferenceField holderRef, String signProvicer) Same as above except that signature provider is an argument
static CVCertificate	createTestCertificate(PublicKey publicKey, PrivateKey privateKey, CAReferenceField caRef, HolderReferenceField holderRef, String algorithm, AuthorizationRoleEnum role) Generates a CVCertificate for testing with the following characteristics: - expires 3 months from today - hash-algorithm is 'SHA1withRSA' - AuthorizationRoleEnum = IS.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

createTestCertificate

public static CVCertificate createTestCertificate(PublicKey publicKey,
                                                  PrivateKey privateKey,
                                                  CAReferenceField caRef,
                                                  HolderReferenceField holderRef,
                                                  String algorithm,
                                                  AuthorizationRoleEnum role)
                                           throws IOException,
                                                  NoSuchAlgorithmException,
                                                  NoSuchProviderException,
                                                  InvalidKeyException,
                                                  SignatureException,
                                                  ConstructionException

Generates a CVCertificate for testing with the following characteristics: - expires 3 months from today - hash-algorithm is 'SHA1withRSA' - AuthorizationRoleEnum = IS. TODO: Move this method to the test cases!

Parameters:

publicKey -

privateKey -

caRef -

holderRef -

algorithm - SHA1WithRSA, SHA256WithECDSA etc

role -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createCertificate

public static CVCertificate createCertificate(PrivateKey signerKey,
                                              String algorithmName,
                                              CVCertificateBody body,
                                              String provider)
                                       throws IOException,
                                              NoSuchAlgorithmException,
                                              NoSuchProviderException,
                                              InvalidKeyException,
                                              SignatureException,
                                              ConstructionException

Generates a CVCertificate

Parameters:

publicKey -

signerKey -

algorithmName -

caRef -

holderRef -

authRole -

validFrom -

validTo -

extensions - Certificate extensions, or null to not add a "Certificate Extensions" object to the certificate.

provider -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createCertificate

public static CVCertificate createCertificate(PublicKey publicKey,
                                              PrivateKey signerKey,
                                              String algorithmName,
                                              CAReferenceField caRef,
                                              HolderReferenceField holderRef,
                                              AuthorizationRole authRole,
                                              AccessRights rights,
                                              Date validFrom,
                                              Date validTo,
                                              Collection<CVCDiscretionaryDataTemplate> extensions,
                                              String provider)
                                       throws IOException,
                                              NoSuchAlgorithmException,
                                              NoSuchProviderException,
                                              InvalidKeyException,
                                              SignatureException,
                                              ConstructionException

Generates a CVCertificate

Parameters:

publicKey -

signerKey -

algorithmName -

caRef -

holderRef -

authRole -

validFrom -

validTo -

extensions - Certificate extensions, or null to not add a "Certificate Extensions" object to the certificate.

provider -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createCertificate

public static CVCertificate createCertificate(PublicKey publicKey,
                                              PrivateKey signerKey,
                                              String algorithmName,
                                              CAReferenceField caRef,
                                              HolderReferenceField holderRef,
                                              AuthorizationRole authRole,
                                              AccessRights rights,
                                              Date validFrom,
                                              Date validTo,
                                              String provider)
                                       throws IOException,
                                              NoSuchAlgorithmException,
                                              NoSuchProviderException,
                                              InvalidKeyException,
                                              SignatureException,
                                              ConstructionException

Generates a CVCertificate

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createCertificate

public static CVCertificate createCertificate(PublicKey publicKey,
                                              PrivateKey signerKey,
                                              String algorithmName,
                                              CAReferenceField caRef,
                                              HolderReferenceField holderRef,
                                              AuthorizationRoleEnum authRole,
                                              AccessRightEnum rights,
                                              Date validFrom,
                                              Date validTo,
                                              String provider)
                                       throws IOException,
                                              NoSuchAlgorithmException,
                                              NoSuchProviderException,
                                              InvalidKeyException,
                                              SignatureException,
                                              ConstructionException

Generates a CVCertificate. This seemingly redundant overloaded method is for binary (.class file) backwards compatibility. It is NOT deprecated to use these argument types.

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          HolderReferenceField holderRef)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Generates a CVC-request without an outer signature using BouncyCastle as signature provider

Parameters:

keyPair -

algorithmName -

holderRef -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          HolderReferenceField holderRef,
                                          String signProvicer)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Same as above except that signature provider is an argument

Parameters:

keyPair -

algorithmName -

holderRef -

signProvicer -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          CAReferenceField caRef,
                                          HolderReferenceField holderRef)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

See Also:

createRequest(KeyPair, String, CAReferenceField, HolderReferenceField, Collection, String)

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          CAReferenceField caRef,
                                          HolderReferenceField holderRef,
                                          String signProvider)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

See Also:

createRequest(KeyPair, String, CAReferenceField, HolderReferenceField, Collection, String)

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          CAReferenceField caRef,
                                          HolderReferenceField holderRef,
                                          Collection<CVCDiscretionaryDataTemplate> extensions,
                                          String signProvider)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.

Parameters:

keyPair - Key pair

algorithmName - Algorithm

holderRef - Holder Reference

caRef - CA Reference

extensions - List of certificate extensions, or null to exclude.

signProvider - Crypto provider to use for proof of possession signature.

Returns:

A certificate request

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createAuthenticatedRequest

public static CVCAuthenticatedRequest createAuthenticatedRequest(CVCertificate cvcRequest,
                                                                 KeyPair keyPair,
                                                                 String algorithmName,
                                                                 CAReferenceField caRef)
                                                          throws IOException,
                                                                 NoSuchAlgorithmException,
                                                                 NoSuchProviderException,
                                                                 InvalidKeyException,
                                                                 SignatureException,
                                                                 ConstructionException

Generates a CVCAuthenticatedRequest using BouncyCastle as signature provider

Parameters:

cvcRequest -

keyPair -

algorithmName -

caRef - Should be the same as caRef in the supplied cvcRequest but with an incremented sequence number

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createAuthenticatedRequest

public static CVCAuthenticatedRequest createAuthenticatedRequest(CVCertificate cvcRequest,
                                                                 KeyPair keyPair,
                                                                 String algorithmName,
                                                                 CAReferenceField caRef,
                                                                 String signProvider)
                                                          throws IOException,
                                                                 NoSuchAlgorithmException,
                                                                 NoSuchProviderException,
                                                                 InvalidKeyException,
                                                                 SignatureException,
                                                                 ConstructionException

Same as above except that signature provider is an argument

Parameters:

cvcRequest -

keyPair -

algorithmName -

caRef -

signProvider -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException