org.xipki.ca.server

Class CaUtil

java.lang.Object

org.xipki.ca.server.CaUtil

public class CaUtil
extends Object

Util class of CA.

Since:

2.0.0

Author:

Lijun Liao

Method Summary

Modifier and Type	Method and Description
static List<org.xipki.security.X509Cert>	buildCertChain(org.xipki.security.X509Cert targetCert, List<org.xipki.security.X509Cert> certs)
static String	canonicalizeSignerConf(String keystoreType, String signerConf, org.xipki.security.X509Cert[] certChain, org.xipki.security.SecurityFactory securityFactory)
static org.bouncycastle.asn1.x509.AuthorityInformationAccess	createAuthorityInformationAccess(List<String> caIssuerUris, List<String> ocspUris)
static org.bouncycastle.asn1.x509.BasicConstraints	createBasicConstraints(org.xipki.ca.api.profile.Certprofile.CertLevel level, Integer pathLen)
static org.bouncycastle.asn1.x509.CRLDistPoint	createCrlDistributionPoints(List<String> crlUris, org.bouncycastle.asn1.x500.X500Name caSubject, org.bouncycastle.asn1.x500.X500Name crlSignerSubject)
static org.xipki.util.FileOrBinary	createFileOrBase64Value(ZipOutputStream zipStream, String b64Content, String fileName)
static org.xipki.util.FileOrBinary	createFileOrBinary(ZipOutputStream zipStream, byte[] content, String fileName)
static org.xipki.util.FileOrValue	createFileOrValue(ZipOutputStream zipStream, String content, String fileName)
static String	encodeCertchain(List<org.xipki.security.X509Cert> certs)
static String	getChallengePassword(org.bouncycastle.asn1.pkcs.CertificationRequestInfo csr)
static org.bouncycastle.asn1.x509.Extensions	getExtensions(org.bouncycastle.asn1.pkcs.CertificationRequestInfo csr)
static List<String>	getPermissions(int permission)
static org.xipki.security.X509Cert	parseCert(byte[] encodedCert)
static org.bouncycastle.asn1.x500.X500Name	removeEmptyRdns(org.bouncycastle.asn1.x500.X500Name name)
static org.bouncycastle.asn1.x500.X500Name	sortX509Name(org.bouncycastle.asn1.x500.X500Name name)
static boolean	verifyCsr(org.bouncycastle.asn1.pkcs.CertificationRequest csr, org.xipki.security.SecurityFactory securityFactory, org.xipki.security.AlgorithmValidator algorithmValidator, DhpocControl dhpocControl)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getExtensions

public static org.bouncycastle.asn1.x509.Extensions getExtensions(org.bouncycastle.asn1.pkcs.CertificationRequestInfo csr)

getChallengePassword

public static String getChallengePassword(org.bouncycastle.asn1.pkcs.CertificationRequestInfo csr)

createBasicConstraints

public static org.bouncycastle.asn1.x509.BasicConstraints createBasicConstraints(org.xipki.ca.api.profile.Certprofile.CertLevel level,
                                                                                 Integer pathLen)

createAuthorityInformationAccess

public static org.bouncycastle.asn1.x509.AuthorityInformationAccess createAuthorityInformationAccess(List<String> caIssuerUris,
                                                                                                     List<String> ocspUris)

createCrlDistributionPoints

public static org.bouncycastle.asn1.x509.CRLDistPoint createCrlDistributionPoints(List<String> crlUris,
                                                                                  org.bouncycastle.asn1.x500.X500Name caSubject,
                                                                                  org.bouncycastle.asn1.x500.X500Name crlSignerSubject)

sortX509Name

public static org.bouncycastle.asn1.x500.X500Name sortX509Name(org.bouncycastle.asn1.x500.X500Name name)

verifyCsr

public static boolean verifyCsr(org.bouncycastle.asn1.pkcs.CertificationRequest csr,
                                org.xipki.security.SecurityFactory securityFactory,
                                org.xipki.security.AlgorithmValidator algorithmValidator,
                                DhpocControl dhpocControl)

canonicalizeSignerConf

public static String canonicalizeSignerConf(String keystoreType,
                                            String signerConf,
                                            org.xipki.security.X509Cert[] certChain,
                                            org.xipki.security.SecurityFactory securityFactory)
                                     throws org.xipki.ca.api.mgmt.CaMgmtException

Throws:

org.xipki.ca.api.mgmt.CaMgmtException

createFileOrValue

public static org.xipki.util.FileOrValue createFileOrValue(ZipOutputStream zipStream,
                                                           String content,
                                                           String fileName)
                                                    throws IOException

Throws:

IOException

createFileOrBase64Value

public static org.xipki.util.FileOrBinary createFileOrBase64Value(ZipOutputStream zipStream,
                                                                  String b64Content,
                                                                  String fileName)
                                                           throws IOException

Throws:

IOException

createFileOrBinary

public static org.xipki.util.FileOrBinary createFileOrBinary(ZipOutputStream zipStream,
                                                             byte[] content,
                                                             String fileName)
                                                      throws IOException

Throws:

IOException

getPermissions

public static List<String> getPermissions(int permission)

encodeCertchain

public static String encodeCertchain(List<org.xipki.security.X509Cert> certs)
                              throws org.xipki.ca.api.mgmt.CaMgmtException

Throws:

org.xipki.ca.api.mgmt.CaMgmtException

buildCertChain

public static List<org.xipki.security.X509Cert> buildCertChain(org.xipki.security.X509Cert targetCert,
                                                               List<org.xipki.security.X509Cert> certs)
                                                        throws org.xipki.ca.api.mgmt.CaMgmtException

Throws:

org.xipki.ca.api.mgmt.CaMgmtException

parseCert

public static org.xipki.security.X509Cert parseCert(byte[] encodedCert)
                                             throws org.xipki.ca.api.mgmt.CaMgmtException

Throws:

org.xipki.ca.api.mgmt.CaMgmtException

removeEmptyRdns

public static org.bouncycastle.asn1.x500.X500Name removeEmptyRdns(org.bouncycastle.asn1.x500.X500Name name)