org.apache.clerezza.ssl.keygen.bouncy

Class StaticKeygenService

java.lang.Object

org.apache.clerezza.ssl.keygen.bouncy.StaticKeygenService

All Implemented Interfaces:

KeygenService

public class StaticKeygenService
extends Object
implements KeygenService

A static class to deal with keygen requests

The disadvantage of using it is that if it fails, it will probably need restarting the whole container. The advantage is that one can get this going on non osgi frameworks easily.

If this class is never called it will never get loaded.

Author:

Henry Story

Field Summary

Fields inherited from interface org.apache.clerezza.ssl.keygen.KeygenService

issuer

Constructor Summary

Constructors

Constructor and Description
StaticKeygenService()

Method Summary

Methods

Modifier and Type	Method and Description
Certificate	createFromCRMF(String crmfReq) CRMF requests are produced by the javascript generateCRMFRequest() method in Netscape and are documented by RFC 2511.
Certificate	createFromPEM(String pemCsr) Create certificates from PEM requests, coming from Internet Explorer usually
Certificate	createFromSpkac(String spkac) Create Certificates from SPKAC requests coming from the other browsers

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

StaticKeygenService

public StaticKeygenService()

Method Detail

createFromPEM

public Certificate createFromPEM(String pemCsr)

Create certificates from PEM requests, coming from Internet Explorer usually

Specified by:

createFromPEM in interface KeygenService

Parameters:

pemCsr -

Returns:

A yet incomplete certificate

createFromSpkac

public Certificate createFromSpkac(String spkac)

Create Certificates from SPKAC requests coming from the other browsers

Specified by:

createFromSpkac in interface KeygenService

Parameters:

spkac -

Returns:

an as yet incomplete Certificate

Throws:

InvalidParameterException

createFromCRMF

public Certificate createFromCRMF(String crmfReq)

Description copied from interface: KeygenService

CRMF requests are produced by the javascript generateCRMFRequest() method in Netscape and are documented by RFC 2511.

Using this method may be needed when the server has to produce XHTML (should be rare!) as the keygen tag in Netscape browsers is only supported by html. This should be fixed soon, now that html5 supports the keygen element. For progress on this issue check bug report 101019.

A CRMF request can contain more details about the certificate, but those would better be passed using a form, as in the keygen examples, the server then setting those fields directly on the returned request. Currently we extract only the public key to generate the returned Certificate.

Specified by:

createFromCRMF in interface KeygenService

Parameters:

crmfReq - the request

Returns:

a certificate that may be filled in with some extra details in the requests such as webid