org.xipki.ca.api.profile

Class BaseCertprofile

java.lang.Object

org.xipki.ca.api.profile.Certprofile

org.xipki.ca.api.profile.BaseCertprofile

public abstract class BaseCertprofile
extends Certprofile

TODO.

Since:

2.0.0

Author:

Lijun Liao

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	BaseCertprofile()

Method Summary

Modifier and Type	Method and Description
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	checkPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey) Checks the public key.
protected org.bouncycastle.asn1.x500.RDN	createSubjectRdn(String text, org.bouncycastle.asn1.ASN1ObjectIdentifier type, RdnControl option, int index)
abstract Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,KeyParametersOption>	getKeyAlgorithms()
Date	getNotBefore(Date requestedNotBefore) Checks and gets the granted NotBefore.
SubjectInfo	getSubject(org.bouncycastle.asn1.x500.X500Name requestedSubject) Checks the requested subject.
protected abstract SubjectControl	getSubjectControl() Get the SubjectControl.
boolean	incSerialNumberIfSubjectExists()
void	initialize(String data) Initializes this object.
protected void	verifySubjectDnOccurence(org.bouncycastle.asn1.x500.X500Name requestedSubject)

Methods inherited from class org.xipki.ca.api.profile.Certprofile

getAiaControl, getCertLevel, getExtendedKeyUsages, getExtensionControls, getExtensions, getKeypairGenControl, getKeyUsage, getMaxCertSize, getPathLenBasicConstraint, getSignatureAlgorithms, getSubjectInfoAccessModes, getValidity, getVersion, includesIssuerAndSerialInAki, incSerialNumber, isOnlyForRa, isSerialNumberInReqPermitted, shutdown

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BaseCertprofile

protected BaseCertprofile()

Method Detail

getKeyAlgorithms

public abstract Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,KeyParametersOption> getKeyAlgorithms()

getSubjectControl

protected abstract SubjectControl getSubjectControl()

Get the SubjectControl.

Returns:

the SubjectControl, must not be null.

getNotBefore

public Date getNotBefore(Date requestedNotBefore)

Description copied from class: Certprofile

Checks and gets the granted NotBefore.

Specified by:

getNotBefore in class Certprofile

Parameters:

requestedNotBefore - Requested NotBefore. Could be null.

Returns:

the granted NotBefore.

getSubject

public SubjectInfo getSubject(org.bouncycastle.asn1.x500.X500Name requestedSubject)
                       throws CertprofileException,
                              BadCertTemplateException

Description copied from class: Certprofile

Checks the requested subject. If the check passes, returns the canonicalized subject.

Specified by:

getSubject in class Certprofile

Parameters:

requestedSubject - Requested subject. Must not be null.

Returns:

the granted subject

Throws:

CertprofileException - if error occurs.

BadCertTemplateException - if the subject is not permitted.

incSerialNumberIfSubjectExists

public boolean incSerialNumberIfSubjectExists()

Specified by:

incSerialNumberIfSubjectExists in class Certprofile

checkPublicKey

public org.bouncycastle.asn1.x509.SubjectPublicKeyInfo checkPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey)
                                                               throws CertprofileException,
                                                                      BadCertTemplateException

Description copied from class: Certprofile

Checks the public key. If the check passes, returns the canonicalized public key.

Specified by:

checkPublicKey in class Certprofile

Parameters:

publicKey - Requested public key. Must not be null.

Returns:

the granted public key.

Throws:

BadCertTemplateException - If the publicKey does not have correct format or is not permitted.

CertprofileException

initialize

public void initialize(String data)
                throws CertprofileException

Description copied from class: Certprofile

Initializes this object.

Specified by:

initialize in class Certprofile

Parameters:

data - Configuration. Could be null.

Throws:

CertprofileException - if error during the initialization occurs.

verifySubjectDnOccurence

protected void verifySubjectDnOccurence(org.bouncycastle.asn1.x500.X500Name requestedSubject)
                                 throws BadCertTemplateException

Throws:

BadCertTemplateException

createSubjectRdn

protected org.bouncycastle.asn1.x500.RDN createSubjectRdn(String text,
                                                          org.bouncycastle.asn1.ASN1ObjectIdentifier type,
                                                          RdnControl option,
                                                          int index)
                                                   throws BadCertTemplateException

Throws:

BadCertTemplateException