org.xipki.scep.client

Class Client

java.lang.Object

org.xipki.scep.client.Client

Direct Known Subclasses:

ScepClient

public abstract class Client
extends Object

SCEP client.

Author:

Lijun Liao

Field Summary

Fields

Modifier and Type	Field and Description
protected CaCaps	caCaps
protected CaIdentifier	caId
static long	DEFAULT_SIGNINGTIME_BIAS
static String	REQ_CONTENT_TYPE

Constructor Summary

Constructors

Constructor and Description
Client(CaIdentifier caId, CaCertValidator caCertValidator)

Method Summary

Modifier and Type	Method and Description
void	destroy()
AuthorityCertStore	getAuthorityCertStore()
CaCaps	getCaCaps()
org.xipki.security.X509Cert	getCaCert()
CaCertValidator	getCaCertValidator()
CaIdentifier	getCaId()
long	getMaxSigningTimeBiasInMs()
protected abstract ScepHttpResponse	httpGet(String url) Send request via HTTP GET.
protected abstract ScepHttpResponse	httpPost(String url, String requestContentType, byte[] request) Send request via HTTP POST.
void	init()
boolean	isHttpGetOnly()
void	refresh()
EnrolmentResponse	scepCertPoll(PrivateKey identityKey, org.xipki.security.X509Cert identityCert, org.bouncycastle.asn1.pkcs.CertificationRequest csr, org.bouncycastle.asn1.x500.X500Name issuer)
EnrolmentResponse	scepCertPoll(PrivateKey identityKey, org.xipki.security.X509Cert identityCert, TransactionId transactionId, org.bouncycastle.asn1.x500.X500Name issuer, org.bouncycastle.asn1.x500.X500Name subject)
EnrolmentResponse	scepEnrol(org.bouncycastle.asn1.pkcs.CertificationRequest csr, PrivateKey identityKey, org.xipki.security.X509Cert identityCert)
List<org.xipki.security.X509Cert>	scepGetCert(PrivateKey identityKey, org.xipki.security.X509Cert identityCert, org.bouncycastle.asn1.x500.X500Name issuer, BigInteger serialNumber)
org.bouncycastle.cert.X509CRLHolder	scepGetCrl(PrivateKey identityKey, org.xipki.security.X509Cert identityCert, org.bouncycastle.asn1.x500.X500Name issuer, BigInteger serialNumber)
AuthorityCertStore	scepNextCaCert()
EnrolmentResponse	scepPkcsReq(org.bouncycastle.asn1.pkcs.CertificationRequest csr, PrivateKey identityKey, org.xipki.security.X509Cert identityCert)
EnrolmentResponse	scepRenewalReq(org.bouncycastle.asn1.pkcs.CertificationRequest csr, PrivateKey identityKey, org.xipki.security.X509Cert identityCert)
void	setHttpGetOnly(boolean httpGetOnly)
void	setMaxSigningTimeBiasInMs(long maxSigningTimeBiasInMs) Set the maximal signing time bias in milliseconds.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

REQ_CONTENT_TYPE

public static final String REQ_CONTENT_TYPE

See Also:

Constant Field Values

DEFAULT_SIGNINGTIME_BIAS

public static final long DEFAULT_SIGNINGTIME_BIAS

See Also:

Constant Field Values

caId

protected final CaIdentifier caId

caCaps

protected CaCaps caCaps

Constructor Detail

Client

public Client(CaIdentifier caId,
              CaCertValidator caCertValidator)

Method Detail

httpPost

protected abstract ScepHttpResponse httpPost(String url,
                                             String requestContentType,
                                             byte[] request)
                                      throws ScepClientException

Send request via HTTP POST.

Parameters:

url - SCEP server URL. Must not be null.

requestContentType - Content type of the HTTP request. Must not be null.

request - HTTP request. Must not be null.

Returns:

the SCEP response

Throws:

ScepClientException - If error happens

httpGet

protected abstract ScepHttpResponse httpGet(String url)
                                     throws ScepClientException

Send request via HTTP GET.

Parameters:

url - URL. Must not be null.

Returns:

the response.

Throws:

ScepClientException - If error occurs.

isHttpGetOnly

public boolean isHttpGetOnly()

setHttpGetOnly

public void setHttpGetOnly(boolean httpGetOnly)

getMaxSigningTimeBiasInMs

public long getMaxSigningTimeBiasInMs()

setMaxSigningTimeBiasInMs

public void setMaxSigningTimeBiasInMs(long maxSigningTimeBiasInMs)

Set the maximal signing time bias in milliseconds.

Parameters:

maxSigningTimeBiasInMs - zero or negative value deactivates the message time check

init

public void init()
          throws ScepClientException

Throws:

ScepClientException

refresh

public void refresh()
             throws ScepClientException

Throws:

ScepClientException

getCaCaps

public CaCaps getCaCaps()
                 throws ScepClientException

Throws:

ScepClientException

getCaCert

public org.xipki.security.X509Cert getCaCert()

getCaId

public CaIdentifier getCaId()
                     throws ScepClientException

Throws:

ScepClientException

getCaCertValidator

public CaCertValidator getCaCertValidator()
                                   throws ScepClientException

Throws:

ScepClientException

getAuthorityCertStore

public AuthorityCertStore getAuthorityCertStore()
                                         throws ScepClientException

Throws:

ScepClientException

scepGetCrl

public org.bouncycastle.cert.X509CRLHolder scepGetCrl(PrivateKey identityKey,
                                                      org.xipki.security.X509Cert identityCert,
                                                      org.bouncycastle.asn1.x500.X500Name issuer,
                                                      BigInteger serialNumber)
                                               throws ScepClientException

Throws:

ScepClientException

scepGetCert

public List<org.xipki.security.X509Cert> scepGetCert(PrivateKey identityKey,
                                                     org.xipki.security.X509Cert identityCert,
                                                     org.bouncycastle.asn1.x500.X500Name issuer,
                                                     BigInteger serialNumber)
                                              throws ScepClientException

Throws:

ScepClientException

scepCertPoll

public EnrolmentResponse scepCertPoll(PrivateKey identityKey,
                                      org.xipki.security.X509Cert identityCert,
                                      org.bouncycastle.asn1.pkcs.CertificationRequest csr,
                                      org.bouncycastle.asn1.x500.X500Name issuer)
                               throws ScepClientException

Throws:

ScepClientException

scepCertPoll

public EnrolmentResponse scepCertPoll(PrivateKey identityKey,
                                      org.xipki.security.X509Cert identityCert,
                                      TransactionId transactionId,
                                      org.bouncycastle.asn1.x500.X500Name issuer,
                                      org.bouncycastle.asn1.x500.X500Name subject)
                               throws ScepClientException

Throws:

ScepClientException

scepEnrol

public EnrolmentResponse scepEnrol(org.bouncycastle.asn1.pkcs.CertificationRequest csr,
                                   PrivateKey identityKey,
                                   org.xipki.security.X509Cert identityCert)
                            throws ScepClientException

Throws:

ScepClientException

scepPkcsReq

public EnrolmentResponse scepPkcsReq(org.bouncycastle.asn1.pkcs.CertificationRequest csr,
                                     PrivateKey identityKey,
                                     org.xipki.security.X509Cert identityCert)
                              throws ScepClientException

Throws:

ScepClientException

scepRenewalReq

public EnrolmentResponse scepRenewalReq(org.bouncycastle.asn1.pkcs.CertificationRequest csr,
                                        PrivateKey identityKey,
                                        org.xipki.security.X509Cert identityCert)
                                 throws ScepClientException

Throws:

ScepClientException

scepNextCaCert

public AuthorityCertStore scepNextCaCert()
                                  throws ScepClientException

Throws:

ScepClientException

destroy

public void destroy()