com.prosysopc.ua.stack.transport.security

Interface CertificateProvider

All Known Implementing Classes:

BcCertificateProvider

public interface CertificateProvider

Interface for creating certificates. Designed for stack internal use to allow pluggable system of providers.

Method Summary

Modifier and Type	Method and Description
byte[]	base64Decode(String string)
String	base64Encode(byte[] bytes)
X509Certificate	generateCertificate(String domainName, PublicKey publicKey, PrivateKey privateKey, KeyPair issuerKeys, Instant from, Instant to, BigInteger serialNumber, String applicationUri, String... hostNames)
X509Certificate	generateIssuerCert(PublicKey publicKey, PrivateKey privateKey, KeyPair issuerKeys, String domainName, BigInteger serialNumber, Instant startDate, Instant expiryDate)
Collection<List<?>>	getSubjectAlternativeNames(X509Certificate cert)
PrivateKey	readPrivateKey(InputStream stream, String password, String algorithm) Read a private key from a PEM encoded byte array with a password.
void	writePrivateKey(PrivateKey key, OutputStream stream, String password, String algorithm) Write a private key to a PEM file with a password.

Method Detail

base64Decode

byte[] base64Decode(String string)

base64Encode

String base64Encode(byte[] bytes)

generateCertificate

X509Certificate generateCertificate(String domainName,
                                    PublicKey publicKey,
                                    PrivateKey privateKey,
                                    KeyPair issuerKeys,
                                    Instant from,
                                    Instant to,
                                    BigInteger serialNumber,
                                    String applicationUri,
                                    String... hostNames)
                             throws GeneralSecurityException,
                                    IOException

Throws:

GeneralSecurityException

IOException

generateIssuerCert

X509Certificate generateIssuerCert(PublicKey publicKey,
                                   PrivateKey privateKey,
                                   KeyPair issuerKeys,
                                   String domainName,
                                   BigInteger serialNumber,
                                   Instant startDate,
                                   Instant expiryDate)
                            throws GeneralSecurityException,
                                   IOException

Throws:

GeneralSecurityException

IOException

getSubjectAlternativeNames

Collection<List<?>> getSubjectAlternativeNames(X509Certificate cert)
                                        throws CertificateParsingException

Throws:

CertificateParsingException

readPrivateKey

PrivateKey readPrivateKey(InputStream stream,
                          String password,
                          String algorithm)
                   throws IOException

Read a private key from a PEM encoded byte array with a password.

Parameters:

stream - the stream (for example FileInputStream) to read from to

password - the password o use for decrypt the key

algorithm - encryption algorithm to use. For example "AES-128-CBC"

Throws:

IOException - if any.

writePrivateKey

void writePrivateKey(PrivateKey key,
                     OutputStream stream,
                     String password,
                     String algorithm)
              throws IOException

Write a private key to a PEM file with a password.

Parameters:

key - the private key to save

stream - the stream (for example FileOutputStream) to save to

password - the password o use for protecting the key

algorithm - encryption algorithm to use. For example "AES-128-CBC"

Throws:

IOException - if any.