org.xipki.ca.server

Class IdentifiedCertprofile

java.lang.Object

org.xipki.ca.server.IdentifiedCertprofile

All Implemented Interfaces:

Closeable, AutoCloseable

public class IdentifiedCertprofile
extends Object
implements Closeable

CertProfiel with identifier.

Since:

2.0.0

Author:

Lijun Liao

Constructor Summary

Constructors

Constructor and Description
IdentifiedCertprofile(org.xipki.ca.api.mgmt.entry.CertprofileEntry dbEntry, org.xipki.ca.api.profile.Certprofile certprofile)

Method Summary

Modifier and Type	Method and Description
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	checkPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey)
void	close()
BigInteger	generateSerialNumber(org.bouncycastle.asn1.x500.X500Name caSubject, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo caPublicKeyInfo, org.bouncycastle.asn1.x500.X500Name requestSubject, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo, org.xipki.util.ConfPairs caExtraControl)
org.xipki.ca.api.profile.Certprofile.CertLevel	getCertLevel()
org.xipki.ca.api.mgmt.entry.CertprofileEntry	getDbEntry()
Set<org.xipki.ca.api.profile.Certprofile.ExtKeyUsageControl>	getExtendedKeyUsages()
Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,org.xipki.ca.api.profile.Certprofile.ExtensionControl>	getExtensionControls()
org.xipki.ca.api.profile.ExtensionValues	getExtensions(org.bouncycastle.asn1.x500.X500Name requestedSubject, org.bouncycastle.asn1.x500.X500Name grantedSubject, org.bouncycastle.asn1.x509.Extensions requestedExtensions, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo, org.xipki.ca.api.PublicCaInfo publicCaInfo, org.xipki.security.X509Cert crlSignerCert, Date notBefore, Date notAfter) Get the extensions.
org.xipki.ca.api.NameId	getIdent()
org.xipki.ca.api.profile.KeypairGenControl	getKeypairGenControl()
Set<org.xipki.ca.api.profile.Certprofile.KeyUsageControl>	getKeyUsage()
int	getMaxCertSize()
Date	getNotBefore(Date notBefore)
Integer	getPathLenBasicConstraint()
String	getSerialNumberMode()
List<org.xipki.security.SignAlgo>	getSignatureAlgorithms()
org.xipki.ca.api.profile.Certprofile.SubjectInfo	getSubject(org.bouncycastle.asn1.x500.X500Name requestedSubject, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo)
org.xipki.util.Validity	getValidity()
org.xipki.ca.api.profile.Certprofile.X509CertVersion	getVersion()
String	incSerialNumber(String currentSerialNumber)
boolean	isOnlyForRa()
boolean	isSerialNumberInReqPermitted()
boolean	useIssuerAndSerialInAki()
void	validate()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IdentifiedCertprofile

public IdentifiedCertprofile(org.xipki.ca.api.mgmt.entry.CertprofileEntry dbEntry,
                             org.xipki.ca.api.profile.Certprofile certprofile)
                      throws org.xipki.ca.api.profile.CertprofileException

Throws:

org.xipki.ca.api.profile.CertprofileException

Method Detail

getIdent

public org.xipki.ca.api.NameId getIdent()

getDbEntry

public org.xipki.ca.api.mgmt.entry.CertprofileEntry getDbEntry()

getVersion

public org.xipki.ca.api.profile.Certprofile.X509CertVersion getVersion()

getSignatureAlgorithms

public List<org.xipki.security.SignAlgo> getSignatureAlgorithms()

getNotBefore

public Date getNotBefore(Date notBefore)

getValidity

public org.xipki.util.Validity getValidity()

getSubject

public org.xipki.ca.api.profile.Certprofile.SubjectInfo getSubject(org.bouncycastle.asn1.x500.X500Name requestedSubject,
                                                                   org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo)
                                                            throws org.xipki.ca.api.profile.CertprofileException,
                                                                   org.xipki.ca.api.BadCertTemplateException

Throws:

org.xipki.ca.api.profile.CertprofileException

org.xipki.ca.api.BadCertTemplateException

getExtensions

public org.xipki.ca.api.profile.ExtensionValues getExtensions(org.bouncycastle.asn1.x500.X500Name requestedSubject,
                                                              org.bouncycastle.asn1.x500.X500Name grantedSubject,
                                                              org.bouncycastle.asn1.x509.Extensions requestedExtensions,
                                                              org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo,
                                                              org.xipki.ca.api.PublicCaInfo publicCaInfo,
                                                              org.xipki.security.X509Cert crlSignerCert,
                                                              Date notBefore,
                                                              Date notAfter)
                                                       throws org.xipki.ca.api.profile.CertprofileException,
                                                              org.xipki.ca.api.BadCertTemplateException

Get the extensions.

Parameters:

requestedSubject - Subject requested subject. Must not be null.

grantedSubject - Granted subject. Must not be null.

requestedExtensions - Extensions requested by the requestor. Could be null.

publicKeyInfo - Subject public key. Must not be null.

publicCaInfo - CA information. Must not be null.

crlSignerCert - CRL signer certificate. Could be null.

notBefore - NotBefore. Must not be null.

notAfter - NotAfter. Must not be null.

Returns:

the extensions of the certificate to be issued.

Throws:

org.xipki.ca.api.profile.CertprofileException

org.xipki.ca.api.BadCertTemplateException

getCertLevel

public org.xipki.ca.api.profile.Certprofile.CertLevel getCertLevel()

getKeypairGenControl

public org.xipki.ca.api.profile.KeypairGenControl getKeypairGenControl()

getSerialNumberMode

public String getSerialNumberMode()

generateSerialNumber

public BigInteger generateSerialNumber(org.bouncycastle.asn1.x500.X500Name caSubject,
                                       org.bouncycastle.asn1.x509.SubjectPublicKeyInfo caPublicKeyInfo,
                                       org.bouncycastle.asn1.x500.X500Name requestSubject,
                                       org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo,
                                       org.xipki.util.ConfPairs caExtraControl)
                                throws org.xipki.ca.api.profile.CertprofileException

Throws:

org.xipki.ca.api.profile.CertprofileException

isOnlyForRa

public boolean isOnlyForRa()

checkPublicKey

public org.bouncycastle.asn1.x509.SubjectPublicKeyInfo checkPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey)
                                                               throws org.xipki.ca.api.profile.CertprofileException,
                                                                      org.xipki.ca.api.BadCertTemplateException

Throws:

org.xipki.ca.api.profile.CertprofileException

org.xipki.ca.api.BadCertTemplateException

close

public void close()

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

useIssuerAndSerialInAki

public boolean useIssuerAndSerialInAki()

incSerialNumber

public String incSerialNumber(String currentSerialNumber)
                       throws org.xipki.ca.api.BadFormatException

Throws:

org.xipki.ca.api.BadFormatException

isSerialNumberInReqPermitted

public boolean isSerialNumberInReqPermitted()

getExtensionControls

public Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,org.xipki.ca.api.profile.Certprofile.ExtensionControl> getExtensionControls()

getKeyUsage

public Set<org.xipki.ca.api.profile.Certprofile.KeyUsageControl> getKeyUsage()

getPathLenBasicConstraint

public Integer getPathLenBasicConstraint()

getExtendedKeyUsages

public Set<org.xipki.ca.api.profile.Certprofile.ExtKeyUsageControl> getExtendedKeyUsages()

getMaxCertSize

public int getMaxCertSize()

validate

public void validate()
              throws org.xipki.ca.api.profile.CertprofileException

Throws:

org.xipki.ca.api.profile.CertprofileException