Package org.bouncycastle.tls.crypto.impl.jcajce

Class JcaTlsCertificate

java.lang.Object

org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRawKeyCertificate

org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsCertificate

All Implemented Interfaces:

TlsCertificate

public class JcaTlsCertificate
extends JcaTlsRawKeyCertificate

Implementation class for a single X.509 certificate based on the JCA. An X.509 certificate is a SubjectPublicKeyInfo plus X.509 metadata, so this extends the raw public key JcaTlsRawKeyCertificate, sharing all of the signature/verifier handling and overriding only the public-key source and the X.509-specific accessors.

Field Summary

Fields

Modifier and Type	Field	Description
protected java.security.cert.X509Certificate	certificate

Fields inherited from class org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRawKeyCertificate

crypto, keyInfo, KU_CRL_SIGN, KU_DATA_ENCIPHERMENT, KU_DECIPHER_ONLY, KU_DIGITAL_SIGNATURE, KU_ENCIPHER_ONLY, KU_KEY_AGREEMENT, KU_KEY_CERT_SIGN, KU_KEY_ENCIPHERMENT, KU_NON_REPUDIATION, pubKeyDH, pubKeyEC, pubKeyRSA

Constructor Summary

Constructors

Constructor	Description
JcaTlsCertificate(JcaTlsCrypto crypto, byte[] encoding)
JcaTlsCertificate(JcaTlsCrypto crypto, java.security.cert.X509Certificate certificate)

Method Summary

Modifier and Type	Method	Description
static JcaTlsCertificate	convert(JcaTlsCrypto crypto, TlsCertificate certificate)
byte[]	getEncoded()
byte[]	getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
protected java.security.PublicKey	getPublicKey()
java.math.BigInteger	getSerialNumber()
java.lang.String	getSigAlgOID()
org.bouncycastle.asn1.ASN1Encodable	getSigAlgParams()
protected org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	getSubjectPublicKeyInfo()
java.security.cert.X509Certificate	getX509Certificate()
static java.security.cert.X509Certificate	parseCertificate(org.bouncycastle.jcajce.util.JcaJceHelper helper, byte[] encoding)
protected boolean	supportsKeyUsageBit(int keyUsageBit)

Methods inherited from class org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRawKeyCertificate

checkUsageInRole, createEncryptor, createVerifier, createVerifier, getLegacySignatureAlgorithm, implSupportsSignatureAlgorithm, supportsMLDSA, supportsRSA_PKCS1, supportsRSA_PSS_PSS, supportsRSA_PSS_RSAE, supportsSignatureAlgorithm, supportsSignatureAlgorithmCA, supportsSLHDSA, validateKeyUsageBit, validateMLDSA, validateRSA_PKCS1, validateRSA_PSS_PSS, validateRSA_PSS_RSAE, validateSLHDSA

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

certificate

protected final java.security.cert.X509Certificate certificate

Constructor Detail

JcaTlsCertificate

public JcaTlsCertificate(JcaTlsCrypto crypto,
                         byte[] encoding)
                  throws java.io.IOException

Throws:

java.io.IOException

JcaTlsCertificate

public JcaTlsCertificate(JcaTlsCrypto crypto,
                         java.security.cert.X509Certificate certificate)

Method Detail

convert

public static JcaTlsCertificate convert(JcaTlsCrypto crypto,
                                        TlsCertificate certificate)
                                 throws java.io.IOException

Throws:

java.io.IOException

parseCertificate

public static java.security.cert.X509Certificate parseCertificate(org.bouncycastle.jcajce.util.JcaJceHelper helper,
                                                                  byte[] encoding)
                                                           throws java.io.IOException

Throws:

java.io.IOException

getEncoded

public byte[] getEncoded()
                  throws java.io.IOException

Specified by:

getEncoded in interface TlsCertificate

Overrides:

getEncoded in class JcaTlsRawKeyCertificate

Throws:

java.io.IOException

getExtension

public byte[] getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
                    throws java.io.IOException

Specified by:

getExtension in interface TlsCertificate

Overrides:

getExtension in class JcaTlsRawKeyCertificate

Throws:

java.io.IOException

getSerialNumber

public java.math.BigInteger getSerialNumber()

Specified by:

getSerialNumber in interface TlsCertificate

Overrides:

getSerialNumber in class JcaTlsRawKeyCertificate

getSigAlgOID

public java.lang.String getSigAlgOID()

Specified by:

getSigAlgOID in interface TlsCertificate

Overrides:

getSigAlgOID in class JcaTlsRawKeyCertificate

Returns:

the OID of this certificate's 'signatureAlgorithm', as a String.

getSigAlgParams

public org.bouncycastle.asn1.ASN1Encodable getSigAlgParams()
                                                    throws java.io.IOException

Specified by:

getSigAlgParams in interface TlsCertificate

Overrides:

getSigAlgParams in class JcaTlsRawKeyCertificate

Throws:

java.io.IOException

getX509Certificate

public java.security.cert.X509Certificate getX509Certificate()

getPublicKey

protected java.security.PublicKey getPublicKey()
                                        throws java.io.IOException

Overrides:

getPublicKey in class JcaTlsRawKeyCertificate

Throws:

java.io.IOException

getSubjectPublicKeyInfo

protected org.bouncycastle.asn1.x509.SubjectPublicKeyInfo getSubjectPublicKeyInfo()
                                                                           throws java.io.IOException

Overrides:

getSubjectPublicKeyInfo in class JcaTlsRawKeyCertificate

Throws:

java.io.IOException

supportsKeyUsageBit

protected boolean supportsKeyUsageBit(int keyUsageBit)

Overrides:

supportsKeyUsageBit in class JcaTlsRawKeyCertificate