org.ejbca.cvc

Class CertificateGenerator

java.lang.Object

org.ejbca.cvc.CertificateGenerator

public final class CertificateGenerator
extends Object

Generates CV-certificates and CVC-requests

Version:

$Id: CertificateGenerator.java 23378 2016-05-09 12:55:41Z netmackan $

Author:

Keijo Kurkinen, Swedish National Police Board

Method Summary

Modifier and Type	Method and Description
static CVCAuthenticatedRequest	createAuthenticatedRequest(CVCertificate cvcRequest, KeyPair keyPair, String algorithmName, CAReferenceField caRef) Generates a CVCAuthenticatedRequest using BouncyCastle as signature provider
static CVCAuthenticatedRequest	createAuthenticatedRequest(CVCertificate cvcRequest, KeyPair keyPair, String algorithmName, CAReferenceField caRef, String signProvider) Same as above except that signature provider is an argument
static CVCertificate	createCertificate(PublicKey publicKey, PrivateKey signerKey, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, AuthorizationRole authRole, AccessRights rights, Date validFrom, Date validTo, String provider) Generates a CVCertificate
static CVCertificate	createCertificate(PublicKey publicKey, PrivateKey signerKey, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, AuthorizationRoleEnum authRole, AccessRightEnum rights, Date validFrom, Date validTo, String provider) Generates a CVCertificate.
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef) Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, CAReferenceField caRef, HolderReferenceField holderRef, String signProvicer) Same as above except that signature provider is also an argument
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, HolderReferenceField holderRef) Generates a CVC-request without an outer signature using BouncyCastle as signature provider
static CVCertificate	createRequest(KeyPair keyPair, String algorithmName, HolderReferenceField holderRef, String signProvicer) Same as above except that signature provider is an argument
static CVCertificate	createTestCertificate(PublicKey publicKey, PrivateKey privateKey, CAReferenceField caRef, HolderReferenceField holderRef, String algorithm, AuthorizationRoleEnum role) Generates a CVCertificate for testing with the following characteristics: - expires 3 months from today - hash-algorithm is 'SHA1withRSA' - AuthorizationRoleEnum = IS.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

createTestCertificate

public static CVCertificate createTestCertificate(PublicKey publicKey,
                                                  PrivateKey privateKey,
                                                  CAReferenceField caRef,
                                                  HolderReferenceField holderRef,
                                                  String algorithm,
                                                  AuthorizationRoleEnum role)
                                           throws IOException,
                                                  NoSuchAlgorithmException,
                                                  NoSuchProviderException,
                                                  InvalidKeyException,
                                                  SignatureException,
                                                  ConstructionException

Generates a CVCertificate for testing with the following characteristics: - expires 3 months from today - hash-algorithm is 'SHA1withRSA' - AuthorizationRoleEnum = IS. TODO: Move this method to the test cases!

Parameters:

publicKey -

privateKey -

caRef -

holderRef -

algorithm - SHA1WithRSA, SHA256WithECDSA etc

role -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createCertificate

public static CVCertificate createCertificate(PublicKey publicKey,
                                              PrivateKey signerKey,
                                              String algorithmName,
                                              CAReferenceField caRef,
                                              HolderReferenceField holderRef,
                                              AuthorizationRole authRole,
                                              AccessRights rights,
                                              Date validFrom,
                                              Date validTo,
                                              String provider)
                                       throws IOException,
                                              NoSuchAlgorithmException,
                                              NoSuchProviderException,
                                              InvalidKeyException,
                                              SignatureException,
                                              ConstructionException

Generates a CVCertificate

Parameters:

publicKey -

signerKey -

algorithmName -

caRef -

holderRef -

authRole -

validFrom -

validTo -

provider -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createCertificate

public static CVCertificate createCertificate(PublicKey publicKey,
                                              PrivateKey signerKey,
                                              String algorithmName,
                                              CAReferenceField caRef,
                                              HolderReferenceField holderRef,
                                              AuthorizationRoleEnum authRole,
                                              AccessRightEnum rights,
                                              Date validFrom,
                                              Date validTo,
                                              String provider)
                                       throws IOException,
                                              NoSuchAlgorithmException,
                                              NoSuchProviderException,
                                              InvalidKeyException,
                                              SignatureException,
                                              ConstructionException

Generates a CVCertificate. This seemingly redundant overloaded method is for binary (.class file) backwards compatibility. It is NOT deprecated to use these argument types.

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          HolderReferenceField holderRef)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Generates a CVC-request without an outer signature using BouncyCastle as signature provider

Parameters:

keyPair -

algorithmName -

holderRef -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          HolderReferenceField holderRef,
                                          String signProvicer)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Same as above except that signature provider is an argument

Parameters:

keyPair -

algorithmName -

holderRef -

signProvicer -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          CAReferenceField caRef,
                                          HolderReferenceField holderRef)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Generates a CVC-request without an outer signature using BouncyCastle as signature provider, taking Certificate Authority Reference as argument.

Parameters:

keyPair -

algorithmName -

holderRef -

caRef -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createRequest

public static CVCertificate createRequest(KeyPair keyPair,
                                          String algorithmName,
                                          CAReferenceField caRef,
                                          HolderReferenceField holderRef,
                                          String signProvicer)
                                   throws IOException,
                                          NoSuchAlgorithmException,
                                          NoSuchProviderException,
                                          InvalidKeyException,
                                          SignatureException,
                                          ConstructionException

Same as above except that signature provider is also an argument

Parameters:

keyPair -

algorithmName -

caRef -

holderRef -

signProvicer -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createAuthenticatedRequest

public static CVCAuthenticatedRequest createAuthenticatedRequest(CVCertificate cvcRequest,
                                                                 KeyPair keyPair,
                                                                 String algorithmName,
                                                                 CAReferenceField caRef)
                                                          throws IOException,
                                                                 NoSuchAlgorithmException,
                                                                 NoSuchProviderException,
                                                                 InvalidKeyException,
                                                                 SignatureException,
                                                                 ConstructionException

Generates a CVCAuthenticatedRequest using BouncyCastle as signature provider

Parameters:

cvcRequest -

keyPair -

algorithmName -

caRef - Should be the same as caRef in the supplied cvcRequest but with an incremented sequence number

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException

createAuthenticatedRequest

public static CVCAuthenticatedRequest createAuthenticatedRequest(CVCertificate cvcRequest,
                                                                 KeyPair keyPair,
                                                                 String algorithmName,
                                                                 CAReferenceField caRef,
                                                                 String signProvider)
                                                          throws IOException,
                                                                 NoSuchAlgorithmException,
                                                                 NoSuchProviderException,
                                                                 InvalidKeyException,
                                                                 SignatureException,
                                                                 ConstructionException

Same as above except that signature provider is an argument

Parameters:

cvcRequest -

keyPair -

algorithmName -

caRef -

signProvider -

Returns:

Throws:

IOException

NoSuchAlgorithmException

NoSuchProviderException

InvalidKeyException

SignatureException

ConstructionException