org.xipki.ca.api.profile

Class BaseCertprofile

java.lang.Object

org.xipki.ca.api.profile.Certprofile

org.xipki.ca.api.profile.BaseCertprofile

All Implemented Interfaces:

Closeable, AutoCloseable

public abstract class BaseCertprofile
extends Certprofile

TODO.

Since:

2.0.0

Author:

Lijun Liao

Nested Class Summary

Nested classes/interfaces inherited from class org.xipki.ca.api.profile.Certprofile

Certprofile.AuthorityInfoAccessControl, Certprofile.CertLevel, Certprofile.ExtensionControl, Certprofile.ExtKeyUsageControl, Certprofile.GeneralNameMode, Certprofile.GeneralNameTag, Certprofile.KeyUsageControl, Certprofile.RdnControl, Certprofile.StringType, Certprofile.SubjectControl, Certprofile.SubjectInfo, Certprofile.X509CertVersion

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	BaseCertprofile()

Method Summary

Modifier and Type	Method and Description
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	checkPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey) Checks the public key.
static org.bouncycastle.asn1.x509.GeneralName	createGeneralName(org.bouncycastle.asn1.x509.GeneralName requestedName, Set<Certprofile.GeneralNameMode> modes) Creates GeneralName.
protected org.bouncycastle.asn1.x500.RDN	createSubjectRdn(String text, org.bouncycastle.asn1.ASN1ObjectIdentifier type, Certprofile.RdnControl option, int index)
protected void	fixRdnControl(Certprofile.RdnControl rdnControl)
abstract Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,KeyParametersOption>	getKeyAlgorithms()
Date	getNotBefore(Date requestedNotBefore) Checks and gets the granted NotBefore.
Certprofile.SubjectInfo	getSubject(org.bouncycastle.asn1.x500.X500Name requestedSubject) Checks the requested subject.
protected abstract Certprofile.SubjectControl	getSubjectControl() Get the SubjectControl.
boolean	incSerialNumberIfSubjectExists()
protected abstract void	verifySubjectDnOccurence(org.bouncycastle.asn1.x500.X500Name requestedSubject)

Methods inherited from class org.xipki.ca.api.profile.Certprofile

close, getAiaControl, getCertLevel, getExtendedKeyUsages, getExtensionControls, getExtensions, getKeypairGenControl, getKeyUsage, getMaxCertSize, getPathLenBasicConstraint, getSignatureAlgorithms, getSubjectInfoAccessModes, getValidity, getVersion, includesIssuerAndSerialInAki, incSerialNumber, initialize, isOnlyForRa, isSerialNumberInReqPermitted

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BaseCertprofile

protected BaseCertprofile()

Method Detail

getKeyAlgorithms

public abstract Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,KeyParametersOption> getKeyAlgorithms()

getSubjectControl

protected abstract Certprofile.SubjectControl getSubjectControl()

Get the SubjectControl.

Returns:

the SubjectControl, may not be null.

getNotBefore

public Date getNotBefore(Date requestedNotBefore)

Description copied from class: Certprofile

Checks and gets the granted NotBefore.

Specified by:

getNotBefore in class Certprofile

Parameters:

requestedNotBefore - Requested NotBefore. Could be null.

Returns:

the granted NotBefore.

getSubject

public Certprofile.SubjectInfo getSubject(org.bouncycastle.asn1.x500.X500Name requestedSubject)
                                   throws CertprofileException,
                                          BadCertTemplateException

Description copied from class: Certprofile

Checks the requested subject. If the check passes, returns the canonicalized subject.

Specified by:

getSubject in class Certprofile

Parameters:

requestedSubject - Requested subject. Must not be null.

Returns:

the granted subject

Throws:

CertprofileException - if error occurs.

BadCertTemplateException - if the subject is not permitted.

incSerialNumberIfSubjectExists

public boolean incSerialNumberIfSubjectExists()

Specified by:

incSerialNumberIfSubjectExists in class Certprofile

checkPublicKey

public org.bouncycastle.asn1.x509.SubjectPublicKeyInfo checkPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey)
                                                               throws CertprofileException,
                                                                      BadCertTemplateException

Description copied from class: Certprofile

Checks the public key. If the check passes, returns the canonicalized public key.

Specified by:

checkPublicKey in class Certprofile

Parameters:

publicKey - Requested public key. Must not be null.

Returns:

the granted public key.

Throws:

BadCertTemplateException - If the publicKey does not have correct format or is not permitted.

CertprofileException

verifySubjectDnOccurence

protected abstract void verifySubjectDnOccurence(org.bouncycastle.asn1.x500.X500Name requestedSubject)
                                          throws BadCertTemplateException

Throws:

BadCertTemplateException

createSubjectRdn

protected org.bouncycastle.asn1.x500.RDN createSubjectRdn(String text,
                                                          org.bouncycastle.asn1.ASN1ObjectIdentifier type,
                                                          Certprofile.RdnControl option,
                                                          int index)
                                                   throws BadCertTemplateException

Throws:

BadCertTemplateException

fixRdnControl

protected void fixRdnControl(Certprofile.RdnControl rdnControl)
                      throws CertprofileException

Throws:

CertprofileException

createGeneralName

public static org.bouncycastle.asn1.x509.GeneralName createGeneralName(org.bouncycastle.asn1.x509.GeneralName requestedName,
                                                                       Set<Certprofile.GeneralNameMode> modes)
                                                                throws BadCertTemplateException

Creates GeneralName.

Parameters:

requestedName - Requested name. Must not be null.

modes - Modes to be considered. Must not be null.

Returns:

the created GeneralName

Throws:

BadCertTemplateException - If requestedName is invalid or contains entries which are not allowed in the modes.