org.bouncycastle.cert.jcajce

Class JcaX509ExtensionUtils

java.lang.Object

org.bouncycastle.cert.X509ExtensionUtils

org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils

public class JcaX509ExtensionUtils
extends X509ExtensionUtils

Constructor Summary

Constructors

Constructor and Description
JcaX509ExtensionUtils() Create a utility class pre-configured with a SHA-1 digest calculator based on the default implementation.
JcaX509ExtensionUtils(DigestCalculator calculator)

Method Summary

Modifier and Type	Method and Description
AuthorityKeyIdentifier	createAuthorityKeyIdentifier(PublicKey pubKey)
AuthorityKeyIdentifier	createAuthorityKeyIdentifier(PublicKey pubKey, GeneralNames generalNames, BigInteger serial)
AuthorityKeyIdentifier	createAuthorityKeyIdentifier(PublicKey pubKey, X500Principal name, BigInteger serial)
AuthorityKeyIdentifier	createAuthorityKeyIdentifier(X509Certificate cert)
SubjectKeyIdentifier	createSubjectKeyIdentifier(PublicKey publicKey) Return a RFC 3280 type 1 key identifier.
SubjectKeyIdentifier	createTruncatedSubjectKeyIdentifier(PublicKey publicKey) Return a RFC 3280 type 2 key identifier.
static Collection	getIssuerAlternativeNames(X509Certificate cert)
static Collection	getSubjectAlternativeNames(X509Certificate cert)
static ASN1Primitive	parseExtensionValue(byte[] encExtValue) Return the ASN.1 object contained in a byte[] returned by a getExtensionValue() call.

Methods inherited from class org.bouncycastle.cert.X509ExtensionUtils

createAuthorityKeyIdentifier, createAuthorityKeyIdentifier, createAuthorityKeyIdentifier, createSubjectKeyIdentifier, createTruncatedSubjectKeyIdentifier

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JcaX509ExtensionUtils

public JcaX509ExtensionUtils()
                      throws NoSuchAlgorithmException

Create a utility class pre-configured with a SHA-1 digest calculator based on the default implementation.

Throws:

NoSuchAlgorithmException

JcaX509ExtensionUtils

public JcaX509ExtensionUtils(DigestCalculator calculator)

Method Detail

createAuthorityKeyIdentifier

public AuthorityKeyIdentifier createAuthorityKeyIdentifier(X509Certificate cert)
                                                    throws CertificateEncodingException

Throws:

CertificateEncodingException

createAuthorityKeyIdentifier

public AuthorityKeyIdentifier createAuthorityKeyIdentifier(PublicKey pubKey)

createAuthorityKeyIdentifier

public AuthorityKeyIdentifier createAuthorityKeyIdentifier(PublicKey pubKey,
                                                           X500Principal name,
                                                           BigInteger serial)

createAuthorityKeyIdentifier

public AuthorityKeyIdentifier createAuthorityKeyIdentifier(PublicKey pubKey,
                                                           GeneralNames generalNames,
                                                           BigInteger serial)

createSubjectKeyIdentifier

public SubjectKeyIdentifier createSubjectKeyIdentifier(PublicKey publicKey)

Return a RFC 3280 type 1 key identifier. As in:

 (1) The keyIdentifier is composed of the 160-bit SHA-1 hash of the
 value of the BIT STRING subjectPublicKey (excluding the tag,
 length, and number of unused bits).
 

Parameters:

publicKey - the key object containing the key identifier is to be based on.

Returns:

the key identifier.

createTruncatedSubjectKeyIdentifier

public SubjectKeyIdentifier createTruncatedSubjectKeyIdentifier(PublicKey publicKey)

Return a RFC 3280 type 2 key identifier. As in:

 (2) The keyIdentifier is composed of a four bit type field with
 the value 0100 followed by the least significant 60 bits of the
 SHA-1 hash of the value of the BIT STRING subjectPublicKey.
 

Parameters:

publicKey - the key object of interest.

Returns:

the key identifier.

parseExtensionValue

public static ASN1Primitive parseExtensionValue(byte[] encExtValue)
                                         throws IOException

Return the ASN.1 object contained in a byte[] returned by a getExtensionValue() call.

Parameters:

encExtValue - DER encoded OCTET STRING containing the DER encoded extension object.

Returns:

an ASN.1 object

Throws:

IOException - on a parsing error.

getIssuerAlternativeNames

public static Collection getIssuerAlternativeNames(X509Certificate cert)
                                            throws CertificateParsingException

Throws:

CertificateParsingException

getSubjectAlternativeNames

public static Collection getSubjectAlternativeNames(X509Certificate cert)
                                             throws CertificateParsingException

Throws:

CertificateParsingException