Package org.bouncycastle.tls.crypto.impl.jcajce

Class JcaTlsRawKeyCertificate

java.lang.Object

org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRawKeyCertificate

All Implemented Interfaces:

TlsCertificate

Direct Known Subclasses:

JcaTlsCertificate

public class JcaTlsRawKeyCertificate
extends java.lang.Object
implements TlsCertificate

Implementation class for a raw public key (RFC 7250) based on the JCA. The certificate is just a DER-encoded SubjectPublicKeyInfo, with no X.509 metadata: it has no serial number, signature algorithm, extensions or KeyUsage, so all signature/encryption uses are permitted by the key itself.

This is the base class for JcaTlsCertificate (an X.509 certificate is a SubjectPublicKeyInfo plus X.509 metadata); subclasses override getPublicKey(), getSubjectPublicKeyInfo(), supportsKeyUsageBit(int) and the X.509 accessors (getEncoded(), getExtension(ASN1ObjectIdentifier), getSerialNumber(), getSigAlgOID(), getSigAlgParams()) to source them from the certificate. This mirrors the lightweight BcTlsCertificate extends BcTlsRawKeyCertificate structure.

Field Summary

Fields

Modifier and Type	Field	Description
protected JcaTlsCrypto	crypto
protected org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	keyInfo
protected static int	KU_CRL_SIGN
protected static int	KU_DATA_ENCIPHERMENT
protected static int	KU_DECIPHER_ONLY
protected static int	KU_DIGITAL_SIGNATURE
protected static int	KU_ENCIPHER_ONLY
protected static int	KU_KEY_AGREEMENT
protected static int	KU_KEY_CERT_SIGN
protected static int	KU_KEY_ENCIPHERMENT
protected static int	KU_NON_REPUDIATION
protected javax.crypto.interfaces.DHPublicKey	pubKeyDH
protected java.security.interfaces.ECPublicKey	pubKeyEC
protected java.security.PublicKey	pubKeyRSA

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	JcaTlsRawKeyCertificate(JcaTlsCrypto crypto)	For subclasses (e.g.
	JcaTlsRawKeyCertificate(JcaTlsCrypto crypto, byte[] keyInfo)
	JcaTlsRawKeyCertificate(JcaTlsCrypto crypto, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo keyInfo)

Method Summary

Modifier and Type	Method	Description
TlsCertificate	checkUsageInRole(int tlsCertificateRole)
TlsEncryptor	createEncryptor(int tlsCertificateRole)	Return an encryptor based on the public key in this certificate.
Tls13Verifier	createVerifier(int signatureScheme)
TlsVerifier	createVerifier(short signatureAlgorithm)
byte[]	getEncoded()
byte[]	getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
short	getLegacySignatureAlgorithm()
protected java.security.PublicKey	getPublicKey()
java.math.BigInteger	getSerialNumber()
java.lang.String	getSigAlgOID()
org.bouncycastle.asn1.ASN1Encodable	getSigAlgParams()
protected org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	getSubjectPublicKeyInfo()
protected boolean	implSupportsSignatureAlgorithm(short signatureAlgorithm)
protected boolean	supportsKeyUsageBit(int keyUsageBit)
protected boolean	supportsMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)
protected boolean	supportsRSA_PKCS1()
protected boolean	supportsRSA_PSS_PSS(short signatureAlgorithm)
protected boolean	supportsRSA_PSS_RSAE()
boolean	supportsSignatureAlgorithm(short signatureAlgorithm)
boolean	supportsSignatureAlgorithmCA(short signatureAlgorithm)
protected boolean	supportsSLHDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier slhDsaAlgOid)
protected void	validateKeyUsageBit(int keyUsageBit)
protected void	validateMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)
protected void	validateRSA_PKCS1()
protected void	validateRSA_PSS_PSS(short signatureAlgorithm)
protected void	validateRSA_PSS_RSAE()
protected void	validateSLHDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier slhDsaAlgOid)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

KU_DIGITAL_SIGNATURE

protected static final int KU_DIGITAL_SIGNATURE

See Also:

Constant Field Values

KU_NON_REPUDIATION

protected static final int KU_NON_REPUDIATION

See Also:

Constant Field Values

KU_KEY_ENCIPHERMENT

protected static final int KU_KEY_ENCIPHERMENT

See Also:

Constant Field Values

KU_DATA_ENCIPHERMENT

protected static final int KU_DATA_ENCIPHERMENT

See Also:

Constant Field Values

KU_KEY_AGREEMENT

protected static final int KU_KEY_AGREEMENT

See Also:

Constant Field Values

KU_KEY_CERT_SIGN

protected static final int KU_KEY_CERT_SIGN

See Also:

Constant Field Values

KU_CRL_SIGN

protected static final int KU_CRL_SIGN

See Also:

Constant Field Values

KU_ENCIPHER_ONLY

protected static final int KU_ENCIPHER_ONLY

See Also:

Constant Field Values

KU_DECIPHER_ONLY

protected static final int KU_DECIPHER_ONLY

See Also:

Constant Field Values

crypto

protected final JcaTlsCrypto crypto

keyInfo

protected final org.bouncycastle.asn1.x509.SubjectPublicKeyInfo keyInfo

pubKeyDH

protected javax.crypto.interfaces.DHPublicKey pubKeyDH

pubKeyEC

protected java.security.interfaces.ECPublicKey pubKeyEC

pubKeyRSA

protected java.security.PublicKey pubKeyRSA

Constructor Detail

JcaTlsRawKeyCertificate

public JcaTlsRawKeyCertificate(JcaTlsCrypto crypto,
                               byte[] keyInfo)

JcaTlsRawKeyCertificate

public JcaTlsRawKeyCertificate(JcaTlsCrypto crypto,
                               org.bouncycastle.asn1.x509.SubjectPublicKeyInfo keyInfo)

JcaTlsRawKeyCertificate

protected JcaTlsRawKeyCertificate(JcaTlsCrypto crypto)

For subclasses (e.g. JcaTlsCertificate) that source the public key from elsewhere and override getPublicKey() / getSubjectPublicKeyInfo().

Method Detail

createEncryptor

public TlsEncryptor createEncryptor(int tlsCertificateRole)
                             throws java.io.IOException

Description copied from interface: TlsCertificate

Return an encryptor based on the public key in this certificate.

Specified by:

createEncryptor in interface TlsCertificate

Parameters:

tlsCertificateRole - TlsCertificateRole

Returns:

a TlsEncryptor based on this certificate's public key.

Throws:

java.io.IOException

createVerifier

public TlsVerifier createVerifier(short signatureAlgorithm)
                           throws java.io.IOException

Specified by:

createVerifier in interface TlsCertificate

Parameters:

signatureAlgorithm - SignatureAlgorithm

Throws:

java.io.IOException

createVerifier

public Tls13Verifier createVerifier(int signatureScheme)
                             throws java.io.IOException

Specified by:

createVerifier in interface TlsCertificate

Parameters:

signatureScheme - SignatureScheme

Throws:

java.io.IOException

getEncoded

public byte[] getEncoded()
                  throws java.io.IOException

Specified by:

getEncoded in interface TlsCertificate

Throws:

java.io.IOException

getExtension

public byte[] getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
                    throws java.io.IOException

Specified by:

getExtension in interface TlsCertificate

Throws:

java.io.IOException

getSerialNumber

public java.math.BigInteger getSerialNumber()

Specified by:

getSerialNumber in interface TlsCertificate

getSigAlgOID

public java.lang.String getSigAlgOID()

Specified by:

getSigAlgOID in interface TlsCertificate

Returns:

the OID of this certificate's 'signatureAlgorithm', as a String.

getSigAlgParams

public org.bouncycastle.asn1.ASN1Encodable getSigAlgParams()
                                                    throws java.io.IOException

Specified by:

getSigAlgParams in interface TlsCertificate

Throws:

java.io.IOException

getLegacySignatureAlgorithm

public short getLegacySignatureAlgorithm()
                                  throws java.io.IOException

Specified by:

getLegacySignatureAlgorithm in interface TlsCertificate

Returns:

SignatureAlgorithm

Throws:

java.io.IOException

supportsSignatureAlgorithm

public boolean supportsSignatureAlgorithm(short signatureAlgorithm)
                                   throws java.io.IOException

Specified by:

supportsSignatureAlgorithm in interface TlsCertificate

Parameters:

signatureAlgorithm - SignatureAlgorithm

Returns:

true if (and only if) this certificate can be used to verify the given signature algorithm.

Throws:

java.io.IOException

supportsSignatureAlgorithmCA

public boolean supportsSignatureAlgorithmCA(short signatureAlgorithm)
                                     throws java.io.IOException

Specified by:

supportsSignatureAlgorithmCA in interface TlsCertificate

Throws:

java.io.IOException

checkUsageInRole

public TlsCertificate checkUsageInRole(int tlsCertificateRole)
                                throws java.io.IOException

Specified by:

checkUsageInRole in interface TlsCertificate

Parameters:

tlsCertificateRole - TlsCertificateRole

Throws:

java.io.IOException

implSupportsSignatureAlgorithm

protected boolean implSupportsSignatureAlgorithm(short signatureAlgorithm)
                                          throws java.io.IOException

Throws:

java.io.IOException

getPublicKey

protected java.security.PublicKey getPublicKey()
                                        throws java.io.IOException

Throws:

java.io.IOException

getSubjectPublicKeyInfo

protected org.bouncycastle.asn1.x509.SubjectPublicKeyInfo getSubjectPublicKeyInfo()
                                                                           throws java.io.IOException

Throws:

java.io.IOException

supportsKeyUsageBit

protected boolean supportsKeyUsageBit(int keyUsageBit)

supportsMLDSA

protected boolean supportsMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)
                         throws java.io.IOException

Throws:

java.io.IOException

supportsRSA_PKCS1

protected boolean supportsRSA_PKCS1()
                             throws java.io.IOException

Throws:

java.io.IOException

supportsRSA_PSS_PSS

protected boolean supportsRSA_PSS_PSS(short signatureAlgorithm)
                               throws java.io.IOException

Throws:

java.io.IOException

supportsRSA_PSS_RSAE

protected boolean supportsRSA_PSS_RSAE()
                                throws java.io.IOException

Throws:

java.io.IOException

supportsSLHDSA

protected boolean supportsSLHDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier slhDsaAlgOid)
                          throws java.io.IOException

Throws:

java.io.IOException

validateKeyUsageBit

protected void validateKeyUsageBit(int keyUsageBit)
                            throws java.io.IOException

Throws:

java.io.IOException

validateMLDSA

protected void validateMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)
                      throws java.io.IOException

Throws:

java.io.IOException

validateRSA_PKCS1

protected void validateRSA_PKCS1()
                          throws java.io.IOException

Throws:

java.io.IOException

validateRSA_PSS_PSS

protected void validateRSA_PSS_PSS(short signatureAlgorithm)
                            throws java.io.IOException

Throws:

java.io.IOException

validateRSA_PSS_RSAE

protected void validateRSA_PSS_RSAE()
                             throws java.io.IOException

Throws:

java.io.IOException

validateSLHDSA

protected void validateSLHDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier slhDsaAlgOid)
                       throws java.io.IOException

Throws:

java.io.IOException