Package org.xipki.ca.server

Class IdentifiedCertprofile

  • All Implemented Interfaces:
    Closeable, AutoCloseable
    public class IdentifiedCertprofile
extends Object
implements Closeable
    CertProfiel with identifier.
    Since:
    2.0.0
    Author:
    Lijun Liao (xipki)

    • Constructor Detail

      • IdentifiedCertprofile

        public IdentifiedCertprofile​(org.xipki.ca.api.mgmt.entry.CertprofileEntry dbEntry,
                             org.xipki.ca.api.profile.Certprofile certprofile)
                      throws org.xipki.ca.api.profile.CertprofileException
        Throws:
        org.xipki.ca.api.profile.CertprofileException

    • Method Detail

      • getIdent

        public org.xipki.ca.api.NameId getIdent()

      • getCertprofile

        public org.xipki.ca.api.profile.Certprofile getCertprofile()

      • getDbEntry

        public org.xipki.ca.api.mgmt.entry.CertprofileEntry getDbEntry()

      • getVersion

        public org.xipki.ca.api.profile.Certprofile.X509CertVersion getVersion()

      • getSignatureAlgorithms

        public List<org.xipki.security.SignAlgo> getSignatureAlgorithms()

      • getValidity

        public org.xipki.util.Validity getValidity()

      • hasNoWellDefinedExpirationDate

        public boolean hasNoWellDefinedExpirationDate()

      • getNotAfterMode

        public org.xipki.ca.api.profile.NotAfterMode getNotAfterMode()

      • getSubject

        public org.xipki.ca.api.profile.Certprofile.SubjectInfo getSubject​(org.bouncycastle.asn1.x500.X500Name requestedSubject,
                                                                   org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo)
                                                            throws org.xipki.ca.api.profile.CertprofileException,
                                                                   org.xipki.util.exception.BadCertTemplateException
        Throws:
        org.xipki.ca.api.profile.CertprofileException
        org.xipki.util.exception.BadCertTemplateException

      • getExtensions

        public org.xipki.ca.api.profile.ExtensionValues getExtensions​(org.bouncycastle.asn1.x500.X500Name requestedSubject,
                                                              org.bouncycastle.asn1.x500.X500Name grantedSubject,
                                                              org.bouncycastle.asn1.x509.Extensions requestedExtensions,
                                                              org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo,
                                                              org.xipki.ca.api.PublicCaInfo publicCaInfo,
                                                              org.xipki.security.X509Cert crlSignerCert,
                                                              Instant notBefore,
                                                              Instant notAfter)
                                                       throws org.xipki.ca.api.profile.CertprofileException,
                                                              org.xipki.util.exception.BadCertTemplateException
        Get the extensions.
        Parameters:
        requestedSubject - Subject requested subject. Must not be null.
        grantedSubject - Granted subject. Must not be null.
        requestedExtensions - Extensions requested by the requestor. Could be null.
        publicKeyInfo - Subject public key. Must not be null.
        publicCaInfo - CA information. Must not be null.
        crlSignerCert - CRL signer certificate. Could be null.
        notBefore - NotBefore. Must not be null.
        notAfter - NotAfter. Must not be null.
        Returns:
        the extensions of the certificate to be issued.
        Throws:
        org.xipki.ca.api.profile.CertprofileException
        org.xipki.util.exception.BadCertTemplateException

      • getCertLevel

        public org.xipki.ca.api.profile.Certprofile.CertLevel getCertLevel()

      • getKeypairGenControl

        public org.xipki.ca.api.profile.KeypairGenControl getKeypairGenControl()

      • getSerialNumberMode

        public String getSerialNumberMode()

      • generateSerialNumber

        public BigInteger generateSerialNumber​(org.bouncycastle.asn1.x500.X500Name caSubject,
                                       org.bouncycastle.asn1.x509.SubjectPublicKeyInfo caPublicKeyInfo,
                                       org.bouncycastle.asn1.x500.X500Name requestSubject,
                                       org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo,
                                       org.xipki.util.ConfPairs caExtraControl)
                                throws org.xipki.ca.api.profile.CertprofileException
        Throws:
        org.xipki.ca.api.profile.CertprofileException

      • checkPublicKey

        public org.bouncycastle.asn1.x509.SubjectPublicKeyInfo checkPublicKey​(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey)
                                                               throws org.xipki.ca.api.profile.CertprofileException,
                                                                      org.xipki.util.exception.BadCertTemplateException
        Throws:
        org.xipki.ca.api.profile.CertprofileException
        org.xipki.util.exception.BadCertTemplateException

      • getSubjectKeyIdentifier

        public org.bouncycastle.asn1.x509.SubjectKeyIdentifier getSubjectKeyIdentifier​(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKey)
                                                                        throws org.xipki.ca.api.profile.CertprofileException
        Throws:
        org.xipki.ca.api.profile.CertprofileException

      • getExtensionControls

        public Map<org.bouncycastle.asn1.ASN1ObjectIdentifier,​org.xipki.ca.api.profile.Certprofile.ExtensionControl> getExtensionControls()

      • getPathLenBasicConstraint

        public Integer getPathLenBasicConstraint()

      • getMaxCertSize

        public int getMaxCertSize()