org.apache.clerezza.ssl.keygen.bouncy

Class DefaultCertificate

java.lang.Object

org.apache.clerezza.ssl.keygen.bouncy.DefaultCertificate

All Implemented Interfaces:

Certificate

public class DefaultCertificate
extends Object
implements Certificate

Default implementation of Certificate useful reference: "X.509 Style Guide" by Peter Gutmann http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt

Author:

Henry Story

Field Summary

Fields inherited from interface org.apache.clerezza.ssl.keygen.Certificate

DAY, HOUR, SECOND, YEAR

Constructor Summary

Constructors

Constructor and Description
DefaultCertificate(BouncyKeygenService service)

Method Summary

Methods

Modifier and Type	Method and Description
void	addDurationInDays(String days) set duration of cert in days.
void	addDurationInHours(String hours) set the duration of the certificate in hours Useful for short durations ( for public kiosks for example ) If days is set then this will be added to the days.
void	addSubjectAlternativeName(String urlStr) Set the WebID for the certificate.
void	generate() see: http://www.bouncycastle.org/wiki/display/JA1/X.509+Public+Key+Certificate+and+Certification+Request+Generation
X509Certificate	getCertificate()
Date	getEndDate()
CertSerialisation	getSerialisation() get the encoded version of this certificate in a binary form
Date	getStartDate()
PubKey	getSubjectPublicKey()
void	setDefaultSerialisation(CertSerialisation ser) When we create a certificate we already know the serialisation it is going to require.
void	setEndDate(Date endDate) set the end date of validity of the certificate.
void	setStartDate(Date startDate)
void	setSubjectCommonName(String name)
void	setSubjectPublicKey(PubKey pubkey) Set the Spkac data sent by browser One should set either this or the pemCSR.
void	startEarlier(String hours) in order to avoid synchronization problems it is good to set the start date to be somewhat earlier than the current time.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultCertificate

public DefaultCertificate(BouncyKeygenService service)

Method Detail

getCertificate

public X509Certificate getCertificate()

Specified by:

getCertificate in interface Certificate

Returns:

the X509 Certificate

addSubjectAlternativeName

public void addSubjectAlternativeName(String urlStr)

Description copied from interface: Certificate

Set the WebID for the certificate. The first SAN added will appear in the Distinguished Name

Specified by:

addSubjectAlternativeName in interface Certificate

setSubjectCommonName

public void setSubjectCommonName(String name)

Specified by:

setSubjectCommonName in interface Certificate

Parameters:

name - he user should set a himself a name that will be easily recognised in the browser. Eg: "Henry-public"

setStartDate

public void setStartDate(Date startDate)

Specified by:

setStartDate in interface Certificate

Parameters:

startDate - Set the start date for the validity of the certificate. If unset it will be now.

setEndDate

public void setEndDate(Date endDate)

Description copied from interface: Certificate

set the end date of validity of the certificate. If unset it will be one year from start date, if the duration is not set. Or the duration in days and hours from the start date.

Specified by:

setEndDate in interface Certificate

Parameters:

endDate - end date

addDurationInDays

public void addDurationInDays(String days)

Description copied from interface: Certificate

set duration of cert in days. Easier to set than the end date.

Specified by:

addDurationInDays in interface Certificate

Parameters:

days - the duration of the certificate in days, as a floating point number

startEarlier

public void startEarlier(String hours)

Description copied from interface: Certificate

in order to avoid synchronization problems it is good to set the start date to be somewhat earlier than the current time. This time is then added to the length of time the certificate is meant to last.

Specified by:

startEarlier in interface Certificate

Parameters:

hours - a floating point number

addDurationInHours

public void addDurationInHours(String hours)

Description copied from interface: Certificate

set the duration of the certificate in hours Useful for short durations ( for public kiosks for example ) If days is set then this will be added to the days.

Specified by:

addDurationInHours in interface Certificate

Parameters:

hours - as floats, encoded as strings (it is easier to get a string from velocity). Partial hours are possible

getSubjectPublicKey

public PubKey getSubjectPublicKey()

Specified by:

getSubjectPublicKey in interface Certificate

Returns:

the subject's public key

setSubjectPublicKey

public void setSubjectPublicKey(PubKey pubkey)

Set the Spkac data sent by browser One should set either this or the pemCSR.

Parameters:

pubkey - the public key for the subject

setDefaultSerialisation

public void setDefaultSerialisation(CertSerialisation ser)

Description copied from interface: Certificate

When we create a certificate we already know the serialisation it is going to require. So this method is here to set it.

note: this could perhaps better be done in the constructor. It is not clear that this will be needed by scripts, so perhaps it should not be here

Specified by:

setDefaultSerialisation in interface Certificate

Parameters:

ser - the serialisation implementation

getSerialisation

public CertSerialisation getSerialisation()
                                   throws Exception

Description copied from interface: Certificate

get the encoded version of this certificate in a binary form

Specified by:

getSerialisation in interface Certificate

Returns:

the serialisation object (which sets headers, mime types, length, etc..)

Throws:

Exception - why? //todo: is this really needed

generate

public void generate()
              throws Exception

see: http://www.bouncycastle.org/wiki/display/JA1/X.509+Public+Key+Certificate+and+Certification+Request+Generation

Throws:

Exception

getEndDate

public Date getEndDate()

Specified by:

getEndDate in interface Certificate

Returns:

end validity date for the certificate

getStartDate

public Date getStartDate()

Specified by:

getStartDate in interface Certificate

Returns:

the start validity date for the certificate