org.nhindirect.stagent.cert

Class WrappedOnDemandX509CertificateEx

java.lang.Object

java.security.cert.Certificate

java.security.cert.X509Certificate

org.nhindirect.stagent.cert.X509CertificateEx

org.nhindirect.stagent.cert.WrappedOnDemandX509CertificateEx

All Implemented Interfaces:

Serializable, X509Extension

public class WrappedOnDemandX509CertificateEx
extends X509CertificateEx

Implementation of the X509CertificateEx class that utilized wrapped private keys and installs them in the backing PKCS11 token only when first needed. In some cases, the wrapped private key data is retrieved but never used wasting resources in unwrapping the keys.

Since:

2.1

Author:

Greg Meyer

See Also:

Serialized Form

Method Summary

Methods

Modifier and Type	Method and Description
static X509CertificateEx	fromX509Certificate(org.nhindirect.common.crypto.KeyStoreProtectionManager mgr, X509Certificate cert, byte[] wrappedData) Creates an instance by proviing the certificate, the wrapped private key, and KeyStoreProtectionManager that can unwrap the key.
PrivateKey	getPrivateKey() Gets the certificates private key.
boolean	hasPrivateKey() Indicates if the certificate contains its private key.

Methods inherited from class org.nhindirect.stagent.cert.X509CertificateEx

checkValidity, checkValidity, equals, fromX509Certificate, getBasicConstraints, getCriticalExtensionOIDs, getEncoded, getExtendedKeyUsage, getExtensionValue, getIssuerAlternativeNames, getIssuerDN, getIssuerUniqueID, getIssuerX500Principal, getKeyUsage, getNonCriticalExtensionOIDs, getNotAfter, getNotBefore, getPublicKey, getSerialNumber, getSigAlgName, getSigAlgOID, getSigAlgParams, getSignature, getSubjectAlternativeNames, getSubjectDN, getSubjectUniqueID, getSubjectX500Principal, getTBSCertificate, getVersion, hashCode, hasUnsupportedCriticalExtension, toString, verify, verify

Methods inherited from class java.security.cert.Certificate

getType

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Method Detail

fromX509Certificate

public static X509CertificateEx fromX509Certificate(org.nhindirect.common.crypto.KeyStoreProtectionManager mgr,
                                    X509Certificate cert,
                                    byte[] wrappedData)

Creates an instance by proviing the certificate, the wrapped private key, and KeyStoreProtectionManager that can unwrap the key.

Parameters:

mgr - The keystore protection manager used to unwrap the private key

cert - The certificate.

wrappedData - A wrapped representation of the private key

Returns:

An X509CertificateEx instance

hasPrivateKey

public boolean hasPrivateKey()

Indicates if the certificate contains its private key.}

Overrides:

hasPrivateKey in class X509CertificateEx

Returns:

True if the certificate has access to its private key. False otherwise.

getPrivateKey

public PrivateKey getPrivateKey()

Gets the certificates private key.}

Overrides:

getPrivateKey in class X509CertificateEx

Returns:

Gets the certificates private key.