All Classes Interface Summary Class Summary Enum Summary Exception Summary
| Class |
Description |
| AADProcessor |
Base interface for extra methods required for handling associated data in AEAD ciphers.
|
| AbstractKeyAgreeRecipient |
|
| AbstractKeyTransRecipient |
|
| AbstractRecipient |
Base class for the CMS recipient implementations, carrying the optional restrictions on which
content-encryption algorithms a recipient is willing to recover content for, and on the minimum
AEAD authentication tag size it will accept.
|
| AlgorithmNameFinder |
General finder for converting OIDs and AlgorithmIdentifiers into strings.
|
| ArchiveTimeStampValidationException |
Exception thrown if an Archive TimeStamp according to RFC4998 fails to containsHashValue.
|
| AsymmetricKeyUnwrapper |
|
| AsymmetricKeyWrapper |
|
| AttributeCertificateHolder |
The Holder object.
|
| AttributeCertificateIssuer |
Carrying class for an attribute certificate issuer.
|
| AuthenticatorControl |
Carrier for an authenticator control.
|
| BasicConstraintsValidation |
|
| BasicOCSPResp |
OCSP RFC 2560, RFC 6960
|
| BasicOCSPRespBuilder |
Generator for basic OCSP response objects.
|
| BcAESSymmetricKeyUnwrapper |
|
| BcAESSymmetricKeyWrapper |
|
| BcAsymmetricKeyUnwrapper |
|
| BcAsymmetricKeyWrapper |
|
| BcCMSContentEncryptorBuilder |
Lightweight builder for the content encryptor used in CMS EnvelopedData,
AuthEnvelopedData and EncryptedData structures — i.e. it
encrypts the actual transmitted (or stored) content.
|
| BcContentSignerBuilder |
|
| BcContentVerifierProviderBuilder |
|
| BcCRMFEncryptorBuilder |
Lightweight CRMFOutputEncryptor builder.
|
| BcDefaultDigestProvider |
|
| BcDigestCalculatorProvider |
|
| BcDigestProvider |
|
| BcDSAContentSignerBuilder |
|
| BcDSAContentVerifierProviderBuilder |
|
| BcECContentSignerBuilder |
|
| BcECContentVerifierProviderBuilder |
|
| BcECSignerInfoVerifierBuilder |
|
| BcEdDSAContentVerifierProviderBuilder |
|
| BcEdDSASignerInfoVerifierBuilder |
|
| BcEdECContentSignerBuilder |
|
| BcEncryptedValueBuilder |
Lightweight convenience class for EncryptedValueBuilder
|
| BcFixedLengthMGF1Padder |
An encrypted value padder that uses MGF1 as the basis of the padding.
|
| BcHssLmsContentSignerBuilder |
Builder for creating content signers that use the HSS/LMS Hash-Based Signature Algorithm.
|
| BcHssLmsContentVerifierProviderBuilder |
Builder for creating content verifier providers that support the HSS/LMS Hash-Based Signature Algorithm.
|
| BcKEKEnvelopedRecipient |
|
| BcKEKRecipient |
|
| BcKEKRecipientInfoGenerator |
|
| BcKeyTransRecipient |
|
| BcKeyTransRecipientInfoGenerator |
|
| BcMTCCosigner |
Lightweight implementation of MTCCosigner for the MTC signature
algorithms enumerated in Section 6.1 of draft-ietf-plants-merkle-tree-certs:
"ECDSA-P256-SHA256", "ECDSA-P384-SHA384", "Ed25519",
"ML-DSA-44", "ML-DSA-65", "ML-DSA-87". |
| BcMTCCosignerVerifierProvider |
|
| BcMTCCosignerVerifierProvider.Builder |
|
| BcMTCSignatureVerifier |
|
| BcPasswordEnvelopedRecipient |
|
| BcPasswordRecipient |
the RecipientInfo class for a recipient who has been sent a message
encrypted using a password.
|
| BcPasswordRecipientInfoGenerator |
|
| BcPEMDecryptorProvider |
|
| BcPKCS10CertificationRequest |
Lightweight extension of PKCS10CertificationRequest that exposes the request's
public key as an AsymmetricKeyParameter (no JCA dependency). |
| BcPKCS10CertificationRequestBuilder |
Extension of the PKCS#10 builder to support AsymmetricKey objects.
|
| BcPKCS12MacCalculatorBuilder |
Lightweight builder for the password-based MAC calculator used to protect the integrity of a
PKCS#12 PFX (RFC 7292).
|
| BcPKCS12MacCalculatorBuilderProvider |
|
| BcPKCS12PBEInputDecryptorProviderBuilder |
Lightweight builder for an InputDecryptorProvider that handles the PKCS#12 password-based
encryption schemes from RFC 7292 Appendix C (e.g. |
| BcPKCS12PBEOutputEncryptorBuilder |
Lightweight builder for an OutputEncryptor that applies one of the PKCS#12
password-based encryption schemes from RFC 7292 Appendix C. |
| BcPKCS12PBMac1CalculatorBuilder |
Lightweight PKCS12MacCalculatorBuilder that produces a PBMAC1 calculator
(RFC 8018 §7.1) for use as PKCS#12 PFX integrity protection per RFC 9579. |
| BcPKCS12PBMac1CalculatorBuilderProvider |
|
| BcRSAAsymmetricKeyUnwrapper |
Lightweight unwrapper for RSA PKCS#1 v1.5 (rsaEncryption) key transport, used by the
BC CMS / PKIX recipient implementations.
|
| BcRSAAsymmetricKeyWrapper |
|
| BcRSAContentSignerBuilder |
|
| BcRSAContentVerifierProviderBuilder |
|
| BcRSAKeyTransEnvelopedRecipient |
|
| BcRSAKeyTransRecipientInfoGenerator |
|
| BcRSASignerInfoVerifierBuilder |
|
| BcSha256MerkleTreeHash |
|
| BcSignerOutputStream |
|
| BcSymmetricKeyUnwrapper |
|
| BcSymmetricKeyWrapper |
|
| BcX509ExtensionUtils |
|
| BcX509v1CertificateBuilder |
JCA helper class to allow BC lightweight objects to be used in the construction of a Version 1 certificate.
|
| BcX509v3CertificateBuilder |
JCA helper class to allow BC lightweight objects to be used in the construction of a Version 3 certificate.
|
| BinaryTreeRootCalculator |
Calculator based on the use of a left weighted binary Merkle tree created
on top of the partial hash tree objects provided.
|
| BufferingContentSigner |
A class that explicitly buffers the data to be signed, sending it in one
block when ready for signing.
|
| CACertsResponse |
Holder class for a SimplePKIResponse containing the details making up /cacerts response.
|
| CCPDRequestBuilder |
Builder of CCPD requests (Certify Claim of Possession of Data).
|
| CCPDRequestData |
Data piece of DVCRequest for CCPD service (Certify Claim of Possession of Data).
|
| CertException |
General checked Exception thrown in the cert package and its sub-packages.
|
| CertificateConfirmationContent |
Carrier class for a CertConfirmContent message.
|
| CertificateConfirmationContentBuilder |
Builder class for a CertConfirmContent message.
|
| CertificateID |
|
| CertificatePoliciesValidation |
|
| CertificatePoliciesValidationBuilder |
|
| CertificateRepMessage |
|
| CertificateRepMessageBuilder |
Builder for a CertificateRepMessage.
|
| CertificateReqMessages |
|
| CertificateReqMessagesBuilder |
|
| CertificateRequestMessage |
Carrier for a CRMF CertReqMsg.
|
| CertificateRequestMessageBuilder |
Builder for high-level objects built on CertReqMsg.
|
| CertificateResponse |
High level wrapper for the CertResponse CRMF structure.
|
| CertificateResponseBuilder |
Builder for CertificateResponse objects (the CertResponse CRMF equivalent).
|
| CertificateStatus |
|
| CertificateStatus |
|
| CertificateTrustBlock |
|
| CertIOException |
General IOException thrown in the cert package and its sub-packages.
|
| CertPath |
|
| CertPathReviewerException |
|
| CertPathValidation |
|
| CertPathValidationContext |
|
| CertPathValidationException |
|
| CertPathValidationResult |
|
| CertRuntimeException |
|
| ChallengeContent |
|
| ChannelBindingProvider |
Channel Binding Provider provides a method of extracting the
ChannelBinding that can be customised specifically for the provider.
|
| CMPChallengeFailedException |
|
| CMPException |
|
| CMPRuntimeException |
|
| CMSAbsentContent |
a class representing null or absent content.
|
| CMSAlgorithm |
|
| CMSAlgorithmNotAllowedException |
Exception thrown when a recipient is asked to recover content protected under a content-encryption
algorithm that is not in the recipient's configured allowed set (see
Jce*Recipient.setAllowedContentAlgorithms).
|
| CMSAttributeTableGenerationException |
|
| CMSAttributeTableGenerator |
Note: The SIGNATURE parameter is only available when generating unsigned attributes.
|
| CMSAuthenticatedData |
containing class for an CMS Authenticated Data object
|
| CMSAuthenticatedDataGenerator |
General class for generating a CMS authenticated-data message.
|
| CMSAuthenticatedDataParser |
Parsing class for an CMS Authenticated Data object from an input stream.
|
| CMSAuthenticatedDataStreamGenerator |
General class for generating a CMS authenticated-data message stream.
|
| CMSAuthenticatedGenerator |
|
| CMSAuthEnvelopedData |
containing class for an CMS AuthEnveloped Data object
|
| CMSAuthEnvelopedDataGenerator |
|
| CMSAuthEnvelopedDataParser |
Parser for authenticated enveloped CMS data structures.
|
| CMSAuthEnvelopedDataStreamGenerator |
Generate authenticated enveloped CMS data with streaming support.
|
| CMSAuthEnvelopedGenerator |
General class for generating a CMS enveloped-data message.
|
| CMSCompressedData |
containing class for an CMS Compressed Data object
|
| CMSCompressedDataGenerator |
General class for generating a compressed CMS message.
|
| CMSCompressedDataParser |
Class for reading a CMS Compressed Data stream.
|
| CMSCompressedDataStreamGenerator |
General class for generating a compressed CMS message stream.
|
| CMSConfig |
|
| CMSContentInfoParser |
|
| CMSDigestedData |
containing class for an CMS Digested Data object
|
| CMSEncryptedData |
|
| CMSEncryptedDataGenerator |
General class for generating a CMS encrypted-data message.
|
| CMSEncryptedGenerator |
General class for generating a CMS encrypted-data message.
|
| CMSEnvelopedData |
containing class for an CMS Enveloped Data object
|
| CMSEnvelopedDataGenerator |
General class for generating a CMS enveloped-data message.
|
| CMSEnvelopedDataParser |
Parsing class for an CMS Enveloped Data object from an input stream.
|
| CMSEnvelopedDataStreamGenerator |
General class for generating a CMS enveloped-data message stream.
|
| CMSEnvelopedGenerator |
General class for generating a CMS enveloped-data message.
|
| CMSException |
|
| CMSPatchKit |
Toolkit methods for dealing with common errors in CMS
classes.
|
| CMSProcessable |
Use CMSTypedData instead of this.
|
| CMSProcessableByteArray |
a holding class for a byte array of data to be processed.
|
| CMSProcessableCMPCertificate |
Carrier class for a CMPCertificate over CMS.
|
| CMSProcessableFile |
a holding class for a file of data to be processed.
|
| CMSRuntimeException |
|
| CMSSignatureAlgorithmNameGenerator |
|
| CMSSignatureEncryptionAlgorithmFinder |
Finder which is used to look up the algorithm identifiers representing the encryption algorithms that
are associated with a particular signature algorithm.
|
| CMSSignedData |
general class for handling a pkcs7-signature message.
|
| CMSSignedDataGenerator |
general class for generating a pkcs7-signature message.
|
| CMSSignedDataParser |
Parsing class for an CMS Signed Data object from an input stream.
|
| CMSSignedDataStreamEditor |
|
| CMSSignedDataStreamGenerator |
General class for generating a pkcs7-signature message stream.
|
| CMSSignedGenerator |
|
| CMSSignerDigestMismatchException |
|
| CMSStreamException |
|
| CMSTagLengthException |
Exception thrown when a recipient is asked to recover AEAD-protected content whose authentication
tag is shorter than the recipient's configured minimum tag size (see
Jce*Recipient.setMinimumTagSize).
|
| CMSTimeStampedData |
|
| CMSTimeStampedDataGenerator |
|
| CMSTimeStampedDataParser |
|
| CMSTimeStampedGenerator |
|
| CMSTypedData |
|
| CMSTypedStream |
|
| CMSVerifierCertificateNotValidException |
|
| ContentSigner |
General interface for an operator that is able to create a signature from
a stream of output.
|
| ContentVerifier |
General interface for an operator that is able to verify a signature based
on data in a stream of output.
|
| ContentVerifierProvider |
General interface for providers of ContentVerifier objects.
|
| Control |
Generic interface for a CertificateRequestMessage control value.
|
| CPDRequestBuilder |
Builder of DVCSRequests to CPD service (Certify Possession of Data).
|
| CPDRequestData |
Data piece of DVCRequest for CPD service (Certify Possession of Data).
|
| CRLValidation |
|
| CRMFException |
|
| CRMFRuntimeException |
|
| CSRAttributesResponse |
Wrapper class around a CsrAttrs structure.
|
| CSRRequestResponse |
Holder class for a response containing the details making up /csrattrs response.
|
| CTEChunkedInputStream |
|
| DANECertificateFetcher |
A single shot fetcher for a certificate which will only request the specific DNS record if the
DANEEntryFetcher used on construction supports it.
|
| DANEEntry |
Carrier class for a DANE entry.
|
| DANEEntryFactory |
Factory class for creating DANEEntry objects.
|
| DANEEntryFetcher |
|
| DANEEntryFetcherFactory |
Factories for DANEEntryFetcher objects should implement this.
|
| DANEEntrySelector |
|
| DANEEntrySelectorFactory |
Factory for creating selector objects to use with the DANECertificateStore.
|
| DANEEntryStore |
Class storing DANEEntry objects.
|
| DANEEntryStoreBuilder |
Builder for the DANECertificateStore.
|
| DANEException |
General checked Exception thrown in the DANE package.
|
| DefaultAlgorithmNameFinder |
|
| DefaultAuthenticatedAttributeTableGenerator |
Default authenticated attributes generator.
|
| DefaultCMSSignatureAlgorithmNameGenerator |
|
| DefaultCMSSignatureEncryptionAlgorithmFinder |
|
| DefaultDigestAlgorithmIdentifierFinder |
Default implementation of DigestAlgorithmIdentifierFinder, returning
the AlgorithmIdentifier that names a digest in the contexts where
this finder is used by CMS / S/MIME / PKIX operator builders. |
| DefaultKemEncapsulationLengthProvider |
Look up provider for encapsulation lengths produced be KEM algorithms
|
| DefaultMacAlgorithmIdentifierFinder |
|
| DefaultSecretKeySizeProvider |
|
| DefaultSignatureAlgorithmIdentifierFinder |
Default implementation of SignatureAlgorithmIdentifierFinder,
returning the AlgorithmIdentifier (algorithm OID plus any
algorithm-specific parameters) used to name a signature scheme in
X.509 certificates, CMS SignedData, OCSP responses and related PKIX
structures. |
| DefaultSignatureNameFinder |
Class for return signature names from OIDs or AlgorithmIdentifiers
|
| DefaultSignedAttributeTableGenerator |
Default signed attributes generator.
|
| DeltaCertAttributeUtils |
|
| DeltaCertificateRequestAttributeValue |
|
| DeltaCertificateRequestAttributeValueBuilder |
Builder for the delta certificate request attribute defined in
draft-bonnell-lamps-chameleon-certs §5.
|
| DeltaCertificateTool |
General tool for handling the extension described in: https://datatracker.ietf.org/doc/draft-bonnell-lamps-chameleon-certs/
|
| DigestAlgorithmIdentifierFinder |
|
| DigestCalculator |
General interface for an operator that is able to calculate a digest from
a stream of output.
|
| DigestCalculatorProvider |
The base interface for a provider of DigestCalculator implementations.
|
| DVCSConstructionException |
Exception thrown when failed to initialize some DVCS-related staff.
|
| DVCSException |
General DVCSException.
|
| DVCSMessage |
|
| DVCSParsingException |
DVCS parsing exception - thrown when failed to parse DVCS message.
|
| DVCSRequest |
DVCRequest is general request to DVCS (RFC 3029).
|
| DVCSRequestBuilder |
Common base class for client DVCRequest builders.
|
| DVCSRequestData |
Data piece of DVCRequest object (DVCS Data structure).
|
| DVCSRequestInfo |
Information piece of DVCS requests.
|
| DVCSResponse |
DVCResponse is general response to DVCS (RFC 3029).
|
| EACCertificateBuilder |
|
| EACCertificateHolder |
|
| EACCertificateRequestHolder |
|
| EACException |
General checked Exception thrown in the cert package and its sub-packages.
|
| EACIOException |
General IOException thrown in the cert package and its sub-packages.
|
| EACSignatureVerifier |
|
| EACSigner |
|
| EncryptedValueBuilder |
Builder for EncryptedValue structures.
|
| EncryptedValuePadder |
An encrypted value padder is used to make sure that prior to a value been
encrypted the data is padded to a standard length.
|
| EncryptedValueParser |
Parser for EncryptedValue structures.
|
| EncryptionException |
|
| EnrollmentResponse |
Holder class for a response containing the details making up a /simpleenroll response.
|
| EnvelopedDataHelper |
|
| ErrorBundle |
|
| ERSArchiveTimeStamp |
RFC 4998 ArchiveTimeStamp.
|
| ERSArchiveTimeStampGenerator |
Generator for RFC 4998 Archive Time Stamps.
|
| ERSByteData |
Generic class for holding byte[] data for RFC 4998 ERS.
|
| ERSCachingData |
An ERSData object that caches hash calculations.
|
| ERSData |
General interface for an ERSData data group object.
|
| ERSDataGroup |
Representation of data groups with more than 1 members according to the description provided in RFC4998.
|
| ERSDirectoryDataGroup |
Representation of a data group based on a directory.
|
| ERSEvidenceRecord |
RFC 4998 Evidence Record.
|
| ERSEvidenceRecordGenerator |
|
| ERSEvidenceRecordSelector |
|
| ERSEvidenceRecordStore |
|
| ERSException |
Exception thrown if an Archive TimeStamp according to RFC4998 fails to containsHashValue.
|
| ERSFileData |
Generic class for holding a File of data for RFC 4998 ERS.
|
| ERSInputStreamData |
Generic class for processing an InputStream of data RFC 4998 ERS.
|
| ERSRootNodeCalculator |
Base interface for an implementation that calculates the root hash
contained in the time-stamp from the Merkle tree based on the partial
hash-tree nodes.
|
| ESTAuth |
Base interface for an object with adds HTTP Auth attributes to an ESTRequest
|
| ESTClient |
ESTClient implement connection to the server.
|
| ESTClientProvider |
A client provider is responsible for creating an ESTClient instance.
|
| ESTClientSourceProvider |
ESTClientSourceProvider, implementations of this are expected to return a source.
|
| ESTException |
Exception emitted by EST classes.
|
| ESTHijacker |
ESTHijacker can take control of the source after the initial http request
has been sent and a response received.
|
| ESTRequest |
Implements a basic http request.
|
| ESTRequestBuilder |
Builder for basic EST requests
|
| ESTResponse |
A basic http response.
|
| ESTService |
ESTService provides unified access to an EST server which is defined as implementing
RFC7030.
|
| ESTServiceBuilder |
Build an RFC7030 (EST) service.
|
| ESTSourceConnectionListener<T,I> |
ESTSourceConnectionListener is called when the source is
is connected to the remote end point but no application
data has been sent.
|
| ExtendedContentSigner |
A Content Signer which also provides details of the digest algorithm used internally.
|
| Filter |
|
| FixedLengthContentSigner |
Extension of ContentSigner for signers whose signature encoding has
a fixed, predictable length — RSA (PKCS#1 v1.5 and PSS: the modulus size),
Ed25519/Ed448 and ML-DSA qualify; DER-encoded ECDSA/DSA do not (the
INTEGER components vary in length). |
| GeneralPKIMessage |
General wrapper for a generic PKIMessage
|
| GenericKey |
|
| GenTimeAccuracy |
|
| HTMLFilter |
HTML Filter
|
| HttpAuth |
Provides stock implementations for basic auth and digest auth.
|
| ImprintDigestInvalidException |
|
| InputAEADDecryptor |
Base interface for an input consuming AEAD Decryptor supporting associated text.
|
| InputDecryptor |
General interface for an operator that is able to produce
an InputStream that will decrypt a stream of encrypted data.
|
| InputDecryptorProvider |
|
| InputExpander |
General interface for an operator that is able to produce
an InputStream that will produce uncompressed data.
|
| InputExpanderProvider |
|
| InputStreamWithMAC |
|
| InvalidProofException |
Thrown when a Merkle tree inclusion or consistency proof fails validation.
|
| JcaAlgorithmParametersConverter |
|
| JcaAttributeCertificateIssuer |
|
| JcaBasicOCSPRespBuilder |
|
| JcaCertificateID |
|
| JcaCertificateRepMessageBuilder |
|
| JcaCertificateRequestMessage |
|
| JcaCertificateRequestMessageBuilder |
|
| JcaCertStore |
Class for storing Certificates for later lookup.
|
| JcaCertStoreBuilder |
Builder to create a CertStore from certificate and CRL stores.
|
| JcaContentSignerBuilder |
General builder class for ContentSigner operators based on the JCA.
|
| JcaContentVerifierProviderBuilder |
|
| JcaCRLStore |
Class for storing CRLs for later lookup.
|
| JcaDigestCalculatorProviderBuilder |
|
| JcaEACSignatureVerifierBuilder |
|
| JcaEACSignerBuilder |
|
| JcaEncryptedValueBuilder |
JCA convenience class for EncryptedValueBuilder
|
| JcaHttpAuthBuilder |
Builder for HttpAuth operator that handles digest auth using a JCA provider.
|
| JcaJceUtils |
General utility methods for building common objects for supporting the JCA/JCE/JSSE.
|
| JcaMiscPEMGenerator |
PEM generator for the original set of PEM objects used in Open SSL.
|
| JcaMTCCosigner |
JCA-side implementation of MTCCosigner for the MTC signature
algorithms enumerated in Section 6.1 of draft-ietf-plants-merkle-tree-certs:
"ECDSA-P256-SHA256", "ECDSA-P384-SHA384", "Ed25519",
"ML-DSA-44", "ML-DSA-65", "ML-DSA-87". |
| JcaMTCCosigner.Builder |
|
| JcaMTCCosignerVerifierProvider |
|
| JcaMTCCosignerVerifierProvider.Builder |
|
| JcaMTCSignatureVerifier |
|
| JcaMTCSignatureVerifier.Builder |
|
| JcaPEMKeyConverter |
|
| JcaPEMWriter |
General purpose writer for OpenSSL PEM objects based on JCA/JCE classes.
|
| JcaPKCS10CertificationRequest |
|
| JcaPKCS10CertificationRequestBuilder |
Extension of the PKCS#10 builder to support PublicKey and X500Principal objects.
|
| JcaPKCS12SafeBagBuilder |
JCA-aware extension of PKCS12SafeBagBuilder that accepts standard JCA
X509Certificate and PrivateKey inputs. |
| JcaPKCS8EncryptedPrivateKeyInfoBuilder |
|
| JcaPKCS8Generator |
|
| JcaPKIArchiveControlBuilder |
|
| JcaPKIXIdentity |
Holder class for public/private key based identity information.
|
| JcaPKIXIdentityBuilder |
Builder for a private/public identity object representing a "user".
|
| JcaPrivateKeyReader |
Reads a private key in any of the common OpenSSL on-disk forms and converts it
to a JCA PrivateKey, transparently decrypting the password-protected variants.
|
| JcaPublicKeyConverter |
|
| JcaRespID |
|
| JcaSelectorConverter |
|
| JcaSelectorConverter |
|
| JcaSha256MerkleTreeHash |
JCA-side SHA-256 implementation of MerkleTreeHash, obtained via
MessageDigest.getInstance("SHA-256") through a JcaJceHelper. |
| JcaSignedPublicKeyAndChallenge |
This is designed to parse the SignedPublicKeyAndChallenge created by the
KEYGEN tag included by Mozilla based browsers.
|
| JcaSignerId |
|
| JcaSignerInfoGeneratorBuilder |
|
| JcaSignerInfoVerifierBuilder |
|
| JcaSimpleSignerInfoGeneratorBuilder |
Use this class if you are using a provider that has all the facilities you
need.
|
| JcaSimpleSignerInfoVerifierBuilder |
|
| JcaX500NameUtil |
|
| JcaX509CertificateConverter |
Converter for producing X509Certificate objects tied to a specific provider from X509CertificateHolder objects.
|
| JcaX509CertificateHolder |
JCA helper class for converting an X509Certificate into a X509CertificateHolder object.
|
| JcaX509CertificateHolderSelector |
|
| JcaX509CertSelectorConverter |
|
| JcaX509CertSelectorConverter |
|
| JcaX509ContentVerifierProviderBuilder |
|
| JcaX509CRLConverter |
Class for converting an X509CRLHolder into a corresponding X509CRL object tied to a
particular JCA provider.
|
| JcaX509CRLHolder |
JCA helper class for converting an X509CRL into a X509CRLHolder object.
|
| JcaX509ExtensionUtils |
|
| JcaX509v1CertificateBuilder |
JCA helper class to allow JCA objects to be used in the construction of a Version 1 certificate.
|
| JcaX509v2CRLBuilder |
|
| JcaX509v3CertificateBuilder |
JCA helper class to allow JCA objects to be used in the construction of a Version 3 certificate.
|
| JceAlgorithmIdentifierConverter |
|
| JceAsymmetricKeyUnwrapper |
|
| JceAsymmetricKeyWrapper |
|
| JceAsymmetricValueDecryptorGenerator |
|
| JceCMSContentEncryptorBuilder |
Builder for the content encryptor used in CMS EnvelopedData,
AuthEnvelopedData and EncryptedData structures — i.e. it
encrypts the actual transmitted (or stored) content.
|
| JceCMSMacCalculatorBuilder |
|
| JceCRMFEncryptorBuilder |
|
| JceGenericKey |
|
| JceInputDecryptorProviderBuilder |
A generic decryptor provider for IETF style algorithms.
|
| JceKEKAuthenticatedRecipient |
the KeyTransRecipientInformation class for a recipient who has been sent a secret
key encrypted using their public key that needs to be used to
extract the message.
|
| JceKEKAuthEnvelopedRecipient |
A recipient for CMS authenticated enveloped data encrypted with a KEK (Key Encryption Key).
|
| JceKEKEnvelopedRecipient |
|
| JceKEKRecipient |
|
| JceKEKRecipientInfoGenerator |
|
| JceKEMEnvelopedRecipient |
|
| JceKEMRecipient |
|
| JceKEMRecipientId |
|
| JceKEMRecipientInfoGenerator |
|
| JceKeyAgreeAuthenticatedRecipient |
|
| JceKeyAgreeAuthEnvelopedRecipient |
A recipient class for CMS authenticated enveloped data using key agreement (Key Agreement Recipient).
|
| JceKeyAgreeEnvelopedRecipient |
|
| JceKeyAgreeRecipient |
|
| JceKeyAgreeRecipientId |
|
| JceKeyAgreeRecipientInfoGenerator |
|
| JceKeyTransAuthenticatedRecipient |
the KeyTransRecipientInformation class for a recipient who has been sent a secret
key encrypted using their public key that needs to be used to
extract the message.
|
| JceKeyTransAuthEnvelopedRecipient |
|
| JceKeyTransEnvelopedRecipient |
|
| JceKeyTransRecipient |
|
| JceKeyTransRecipientId |
|
| JceKeyTransRecipientInfoGenerator |
|
| JceKTSKeyTransAuthenticatedRecipient |
the KeyTransRecipient class for a recipient who has been sent secret
key material encrypted using their public key that needs to be used to
derive a key and authenticate a message.
|
| JceKTSKeyTransEnvelopedRecipient |
the KeyTransRecipient class for a recipient who has been sent secret
key material encrypted using their public key that needs to be used to
derive a key and extract a message.
|
| JceKTSKeyTransRecipient |
|
| JceKTSKeyTransRecipientInfoGenerator |
|
| JceKTSKeyUnwrapper |
|
| JceKTSKeyWrapper |
|
| JceOpenSSLPKCS8DecryptorProviderBuilder |
DecryptorProviderBuilder for producing DecryptorProvider for use with PKCS8EncryptedPrivateKeyInfo.
|
| JceOpenSSLPKCS8EncryptorBuilder |
|
| JcePasswordAuthenticatedRecipient |
|
| JcePasswordAuthEnvelopedRecipient |
|
| JcePasswordEnvelopedRecipient |
|
| JcePasswordRecipient |
the RecipientInfo class for a recipient who has been sent a message
encrypted using a password.
|
| JcePasswordRecipientInfoGenerator |
|
| JcePBMac1CalculatorBuilder |
A builder for RFC 8018 PBE based MAC calculators.
|
| JcePBMac1CalculatorProviderBuilder |
|
| JcePEMDecryptorProviderBuilder |
|
| JcePEMEncryptorBuilder |
|
| JcePKCS12MacCalculatorBuilder |
JCA-based builder for the password-based MAC calculator used to protect the integrity of a
PKCS#12 PFX (RFC 7292).
|
| JcePKCS12MacCalculatorBuilderProvider |
|
| JcePKCSPBEInputDecryptorProviderBuilder |
JCA-based builder for an InputDecryptorProvider that handles the password-based
decryption schemes encountered in PKCS#12 / PKCS#8: the legacy pkcs-12PbeIds family
(RFC 7292 Appendix C), PBES2 / PBKDF2 and PBES2 / scrypt (RFC 8018, RFC 7914), and the older
PBE1 schemes ( pbeWithMD5AndDES-CBC, pbeWithSHA1AndDES-CBC). |
| JcePKCSPBEOutputEncryptorBuilder |
JCA-based builder for an OutputEncryptor that applies one of the password-based
encryption schemes used to protect PKCS#8 / PKCS#12 payloads:
the legacy PKCS#12 pkcs-12PbeIds family (RFC 7292 Appendix C) — selected when
the constructor is passed one of those OIDs,
PBES2 (RFC 8018) — selected for any other key-encryption algorithm; the embedded
key-derivation function may be PBKDF2 or scrypt (RFC 7914) via an explicit
PBKDFConfig.
|
| JcePKMACValuesCalculator |
|
| JceSymmetricKeyUnwrapper |
|
| JceSymmetricKeyWrapper |
|
| JndiDANEFetcherFactory |
A DANE entry fetcher implemented using JNDI.
|
| JsseDefaultHostnameAuthorizer |
A typical hostname authorizer for verifying a hostname against the available certificates.
|
| JsseESTServiceBuilder |
Build an RFC7030 (EST) service based on the JSSE.
|
| JsseHostnameAuthorizer |
Verify the host name is as expected after the SSL Handshake has been completed.
|
| KEKRecipient |
|
| KEKRecipientId |
|
| KEKRecipientInfoGenerator |
|
| KEKRecipientInformation |
the RecipientInfo class for a recipient who has been sent a message
encrypted using a secret key known to the other side.
|
| KemEncapsulationLengthProvider |
|
| KEMKeyWrapper |
|
| KEMRecipient |
|
| KEMRecipientId |
|
| KEMRecipientInfoGenerator |
|
| KEMRecipientInformation |
|
| KeyAgreeRecipient |
|
| KeyAgreeRecipientId |
|
| KeyAgreeRecipientInfoGenerator |
|
| KeyAgreeRecipientInformation |
the RecipientInfo class for a recipient who has been sent a message
encrypted using key agreement.
|
| KeyTransRecipient |
|
| KeyTransRecipientId |
|
| KeyTransRecipientInfoGenerator |
|
| KeyTransRecipientInformation |
the KeyTransRecipientInformation class for a recipient who has been sent a secret
key encrypted using their public key that needs to be used to
extract the message.
|
| KeyUnwrapper |
|
| KeyUsageValidation |
|
| KeyWrapper |
|
| KnownLengthOutputEncryptor |
Extension of OutputEncryptor for encryptors that can predict the
exact ciphertext length produced for a given plaintext length. |
| LandmarkCertificateManager |
Issuance- and relying-party-side helpers for landmark subtrees, per
Sections 6.3 and 7.4 of draft-ietf-plants-merkle-tree-certs.
|
| LandmarkCertificateManager.TrustedSubtreeEntry |
A trusted subtree along with the reference checkpoint that proved its
consistency, per Section 7.4.
|
| LandmarkCertificateManager.TrustedSubtreeManager |
Maintains a relying-party-side list of trusted subtrees by accepting new
landmarks that come with a cosigned reference checkpoint and a subtree
consistency proof.
|
| LandmarkCertificateManager.TrustedSubtreeManager.Checkpoint |
A snapshot of the log: tree size and root hash.
|
| LandmarkSequence |
The published landmark sequence for a single issuance log, as defined by
Section 6.3 of draft-ietf-plants-merkle-tree-certs.
|
| LimitedSource |
Interface for a Source which can only produce up to a certain number of bytes.
|
| LocaleString |
|
| LocalizedException |
Base class for all Exceptions with localized messages.
|
| LocalizedMessage |
|
| LocalizedMessage.FilteredArguments |
|
| MacAlgorithmIdentifierFinder |
|
| MacCalculator |
General interface for a key initialized operator that is able to calculate a MAC from
a stream of output.
|
| MacCalculatorProvider |
|
| MacCaptureStream |
A generic class for capturing the mac data at the end of a encrypted data stream.
|
| MerkleTreeCertEntry |
Parses (and encodes) a single log entry per Section 5.2.1 of
draft-ietf-plants-merkle-tree-certs:
|
| MerkleTreeCertEntryExtension |
A single Merkle Tree certificate log-entry extension, per Section 5.2.1 of
draft-ietf-plants-merkle-tree-certs:
|
| MerkleTreeCertEntryType |
Constants for the MerkleTreeCertEntryType enum defined in
Section 5.2.1 of draft-ietf-plants-merkle-tree-certs:
|
| MerkleTreeCertificateValidator |
|
| MerkleTreeCertificateValidator.RevokedRange |
A half-open range [start, end) of revoked certificate serial
numbers, per Section 7.5 of the draft.
|
| MerkleTreeCertificateValidator.TrustedSubtree |
Represents a trusted subtree (typically a landmark subtree predistributed
to the relying party).
|
| MerkleTreeCertificateValidator.ValidationParams |
Parameters supplied by the relying party for certificate validation.
|
| MerkleTreeHash |
Operator interface for the hash function used in the Merkle tree, as defined
by Section 4 of draft-ietf-plants-merkle-tree-certs.
|
| MerkleTreePrimitives |
Merkle Tree primitives for Merkle Tree Certificates (PLANTS).
|
| MerkleTreePrimitives.SubtreeInfo |
Simple container for a subtree interval (start inclusive, end exclusive).
|
| MessageBundle |
|
| MessageImprint |
|
| MessageImprintBuilder |
|
| MiscPEMGenerator |
PEM generator for the original set of PEM objects used in Open SSL.
|
| MissingEntryException |
|
| MTCCertAuth |
Identity-side helper for an MTC Certification Authority, per Section 5 of
draft-ietf-plants-merkle-tree-certs.
|
| MTCCertificationAuthorityCertificate |
Helpers for the CA certificate representation defined by Section 5.5 of
draft-ietf-plants-merkle-tree-certs.
|
| MTCContentSigner |
Issuer-side ContentSigner that emits an MTC signatureValue
(an encoded MTCProof) for an EE Merkle Tree certificate per
Section 6.1 of draft-ietf-plants-merkle-tree-certs. |
| MTCCosignedMessage |
|
| MTCCosigner |
Operator interface for producing a cosigner signature over the subtree
[start, end) of an MTC issuance log, per Section 5.3 of
draft-ietf-plants-merkle-tree-certs.
|
| MTCCosignerVerifier |
|
| MTCCosignerVerifierProvider |
|
| MTCLog |
Immutable identifier for an MTC issuance-log subtree window: the CA that
operates the log, the log number (the upper 16 bits of the cert serial per
Section 6.1 of draft-ietf-plants-merkle-tree-certs) and the subtree's
[start, end) index range (uint48).
|
| MTCProof |
|
| MTCSignature |
|
| MTCSignatureAlgorithm |
String constants for the cosigner signature algorithms defined by Section
5.3.2 of draft-ietf-plants-merkle-tree-certs.
|
| MTCSignatureVerifier |
Operator interface for verifying a single cosigner signature over a
pre-encoded CosignedMessage, per Section 5.3.1 of
draft-ietf-plants-merkle-tree-certs.
|
| MTCSignatureVerifierProvider |
|
| NoSignatureContentSigner |
ContentSigner for "Unsigned X.509 Certificates"
|
| OCSPException |
|
| OCSPReq |
OCSPRequest ::= SEQUENCE {
tbsRequest TBSRequest,
optionalSignature [0] EXPLICIT Signature OPTIONAL }
TBSRequest ::= SEQUENCE {
version [0] EXPLICIT Version DEFAULT v1,
requestorName [1] EXPLICIT GeneralName OPTIONAL,
requestList SEQUENCE OF Request,
requestExtensions [2] EXPLICIT Extensions OPTIONAL }
Signature ::= SEQUENCE {
signatureAlgorithm AlgorithmIdentifier,
signature BIT STRING,
certs [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL}
Version ::= INTEGER { v1(0) }
Request ::= SEQUENCE {
reqCert CertID,
singleRequestExtensions [0] EXPLICIT Extensions OPTIONAL }
CertID ::= SEQUENCE {
hashAlgorithm AlgorithmIdentifier,
issuerNameHash OCTET STRING, -- Hash of Issuer's DN
issuerKeyHash OCTET STRING, -- Hash of Issuers public key
serialNumber CertificateSerialNumber }
|
| OCSPReqBuilder |
|
| OCSPResp |
|
| OCSPRespBuilder |
base generator for an OCSP response - at the moment this only supports the
generation of responses containing BasicOCSP responses.
|
| OidCatalogue |
Catalogue of content-encryption algorithm OIDs used where code only needs to
identify the parameter form or block size family for an algorithm.
|
| OperatorCreationException |
Thrown by an operator builder when it cannot produce the requested operator.
|
| OperatorException |
Base checked exception for failures originating in the org.bouncycastle.operator
abstraction layer — the bridge between BC's JCA-free high-level packages
(org.bouncycastle.cms, org.bouncycastle.cert, org.bouncycastle.pkcs,
etc.) and their underlying JCA / lightweight implementations
(org.bouncycastle.operator.jcajce / org.bouncycastle.operator.bc).
|
| OperatorStreamException |
Thrown from inside an operator's streaming method when an underlying cryptographic
failure occurs and the surrounding signature only permits an IOException.
|
| OriginatorInfoGenerator |
|
| OriginatorInformation |
|
| OutputAEADEncryptor |
|
| OutputCompressor |
General interface for an operator that is able to produce
an OutputStream that will output compressed data.
|
| OutputEncryptor |
General interface for an operator that is able to produce
an OutputStream that will output encrypted data.
|
| ParentCertIssuedValidation |
|
| PartialHashTreeVerificationException |
|
| PasswordException |
|
| PasswordFinder |
Deprecated.
|
| PasswordRecipient |
|
| PasswordRecipient.PRF |
|
| PasswordRecipientId |
|
| PasswordRecipientInfoGenerator |
|
| PasswordRecipientInformation |
the RecipientInfo class for a recipient who has been sent a message
encrypted using a password.
|
| PBEMacCalculatorProvider |
|
| PEMDecryptor |
Base interface for decryption operations.
|
| PEMDecryptorProvider |
|
| PEMEncryptedKeyPair |
|
| PEMEncryptor |
|
| PEMException |
|
| PEMKeyPair |
|
| PEMParser |
Class for parsing OpenSSL PEM encoded streams containing
X509 certificates, PKCS8 encoded keys and PKCS7 objects.
|
| PEMWriter |
Deprecated.
|
| PKCS10CertificationRequest |
Holding class for a PKCS#10 certification request (RFC 2986).
|
| PKCS10CertificationRequestBuilder |
A class for creating PKCS#10 Certification requests.
|
| PKCS12MacCalculatorBuilder |
|
| PKCS12MacCalculatorBuilderProvider |
|
| PKCS12PfxPdu |
Holding class for a PKCS#12 PFX structure (RFC 7292).
|
| PKCS12PfxPduBuilder |
A builder for the PKCS#12 Pfx key and certificate store.
|
| PKCS12SafeBag |
Holding class for a PKCS#12 SafeBag (RFC 7292).
|
| PKCS12SafeBagBuilder |
|
| PKCS12SafeBagFactory |
Factory that materialises the PKCS12SafeBags carried in one ContentInfo of a
PFX's AuthenticatedSafe. |
| PKCS12SecretBag |
Wrapper around the RFC 7292 SecretBag ASN.1 structure used by the
PKCS#12 secretBag bag type.
|
| PKCS12SecretBagBuilder |
Builder for a PKCS12SecretBag carrying an arbitrary secret value
identified by the supplied bag-type OID. |
| PKCS12Util |
Utility class for re-encoding PKCS#12 files to definite length.
|
| PKCS7ProcessableObject |
|
| PKCS7TypedStream |
|
| PKCS8EncryptedPrivateKeyInfo |
Holding class for a PKCS#8 EncryptedPrivateKeyInfo structure (RFC 5958, originally RFC 5208).
|
| PKCS8EncryptedPrivateKeyInfoBuilder |
A class for creating EncryptedPrivateKeyInfo structures.
|
| PKCS8Generator |
|
| PKCSException |
|
| PKCSIOException |
Specialised IOException thrown by classes in org.bouncycastle.pkcs and its
sub-packages to signal malformed or corrupted PKCS encodings. |
| PKIArchiveControl |
Carrier for a PKIArchiveOptions structure.
|
| PKIArchiveControlBuilder |
Builder for a PKIArchiveControl structure.
|
| PKIXCertPathReviewer |
PKIXCertPathReviewer
Validation of X.509 Certificate Paths.
|
| PKIXIdentity |
Holder class for public/private key based identity information.
|
| PKIXNameConstraintValidator |
|
| PKIXNameConstraintValidatorException |
|
| PKIXPolicyNode |
|
| PKIXRecipientId |
|
| PKMACBuilder |
|
| PKMACValuesCalculator |
|
| POPODecryptionKeyChallengeContent |
POPODecKeyChallContent ::= SEQUENCE OF Challenge
-- One Challenge per encryption key certification request (in the
-- same order as these requests appear in CertReqMessages).
|
| POPODecryptionKeyChallengeContentBuilder |
POPODecKeyChallContent ::= SEQUENCE OF Challenge
-- One Challenge per encryption key certification request (in the
-- same order as these requests appear in CertReqMessages).
|
| POPODecryptionKeyResponseContent |
|
| POPODecryptionKeyResponseContentBuilder |
|
| ProofOfPossessionSigningKeyBuilder |
|
| ProtectedPKIMessage |
Wrapper for a PKIMessage with protection attached to it.
|
| ProtectedPKIMessageBuilder |
Builder for creating a protected PKI message.
|
| RawContentVerifier |
Interface for ContentVerifiers that also support raw signatures that can be
verified using the digest of the calculated data.
|
| Recipient |
|
| RecipientId |
|
| RecipientInfoGenerator |
|
| RecipientInformation |
|
| RecipientInformationStore |
|
| RecipientOperator |
|
| RegTokenControl |
Carrier for a registration token control.
|
| RelatedCertificateDescriptorBuilder |
Fluent builder for the RelatedCertificateDescriptor structure
defined by draft-ietf-lamps-certdiscovery, plus the wrapping required to
place it in a SubjectInfoAccess extension.
|
| RelatedCertificateTool |
Operator-style helpers for building and verifying the two wire-format
pieces defined by RFC 9763 ("Related Certificates for Use in Multiple
Authentications within a Protocol"):
the RelatedCertificate certificate extension carried on an
end-entity certificate (OID
X509ObjectIdentifiers.id_pe_relatedCert
/ Extension.relatedCertificate), and
the RequesterCertificate CSR attribute value the requester
includes in the CSR to prove they hold the private key of the related
certificate (attribute OID
PKCSObjectIdentifiers.id_aa_relatedCertRequest).
|
| Req |
|
| RespData |
OCSP RFC 2560, RFC 6960
|
| RespID |
Carrier for a ResponderID.
|
| RevocationDetails |
|
| RevocationDetailsBuilder |
|
| RevokedStatus |
wrapper for the RevokedInfo object
|
| RuntimeOperatorException |
Unchecked variant of OperatorException used when an operator method has no
throws clause to declare a checked exception on. |
| SctExtension |
|
| SecretKeySizeProvider |
|
| SignatureAlgorithmIdentifierFinder |
|
| SignedCertificateTimestamp |
A single Signed Certificate Timestamp (SCT) in the RFC 6962 (CT v1) wire
format.
|
| SignedCertificateTimestampDataV2 |
The SCT body carried inside an RFC 9162 (CT v2) TransItem whose
versioned_type is x509_sct_v2 (0x0102) or precert_sct_v2
(0x0103). |
| SignedCertificateTimestampList |
RFC 6962 (CT v1) SignedCertificateTimestampList: the TLS-encoded
structure carried inside the embedded-SCT certificate extension and the
OCSP SCT-list extension.
|
| SignedDVCSMessageGenerator |
|
| SignedPublicKeyAndChallenge |
This is designed to parse the SignedPublicKeyAndChallenge created by the
KEYGEN tag included by Mozilla based browsers.
|
| SignerId |
a basic index for a signer.
|
| SignerInfoGenerator |
|
| SignerInfoGeneratorBuilder |
Builder for SignerInfo generator objects.
|
| SignerInformation |
an expanded SignerInfo block from a CMS Signed message
|
| SignerInformationStore |
|
| SignerInformationVerifier |
|
| SignerInformationVerifierProvider |
|
| SimpleAttributeTableGenerator |
Basic generator that just returns a preconstructed attribute table
|
| SingleResp |
|
| SortedHashList |
A sorting list - byte[] are sorted in ascending order.
|
| SortedIndexedHashList |
A sorting list - byte[] are sorted in ascending order.
|
| Source<T> |
Used to Wrap a socket and to provide access to the underlying session.
|
| SQLFilter |
Filter for strings to store in a SQL table.
|
| SSLSocketFactoryCreator |
Implementations provide SSL socket factories.
|
| SubjectPublicKeyInfoChecker |
A checker for vetting subject public keys based on the direct checking of the ASN.1
|
| SymmetricKeyUnwrapper |
|
| SymmetricKeyWrapper |
|
| TargetChain |
|
| TextBundle |
|
| TimeStampRequest |
Base class for an RFC 3161 Time Stamp Request.
|
| TimeStampRequestGenerator |
Generator for RFC 3161 Time Stamp Request objects.
|
| TimeStampResponse |
Base class for an RFC 3161 Time Stamp Response object.
|
| TimeStampResponseGenerator |
Generator for RFC 3161 Time Stamp Responses.
|
| TimeStampToken |
Carrier class for a TimeStampToken.
|
| TimeStampTokenGenerator |
Currently the class supports ESSCertID by if a digest calculator based on SHA1 is passed in, otherwise it uses
ESSCertIDv2.
|
| TimeStampTokenInfo |
|
| TlsUniqueAttributeUtil |
Helper for emitting the EST transport-identity-linking attribute (RFC 7030 §3.5)
into a PKCS#10 certification request, with RFC 7894-aware selection of the
attribute type.
|
| TLSUniqueProvider |
TLSUniqueProvider implementation of this can provide the TLS unique value.
|
| TransItem |
|
| TransItemList |
RFC 9162 (CT v2) TransItemList: the TLS-encoded structure carried
inside the Transparency Information X.509v3 extension
(X509ObjectIdentifiers.id_ce_ct_transparencyInformation).
|
| TruncatingDigestCalculator |
A calculator which produces a truncated digest from a regular one, with the truncation
achieved by dropping off the right most octets.
|
| TrustAnchorIDs |
Utilities for constructing and parsing the binary trust anchor IDs reserved
by Section 5.1 of draft-ietf-plants-merkle-tree-certs under each CA ID:
{caID 0 N} — issuance log N (Section 5.2)
{caID 1 N L} — landmark L of log N (Section 8.2)
{caID 2 N L} — landmark group containing landmark L
and earlier (Section 8.2.1)
|
| TrustedInput |
|
| TSPAlgorithms |
Recognised hash algorithms for the time stamp protocol.
|
| TSPException |
|
| TSPIOException |
|
| TSPUtil |
|
| TSPValidationException |
Exception thrown if a TSP request or response fails to validate.
|
| UnknownStatus |
wrapper for the UnknownInfo object
|
| UntrustedInput |
Wrapper class to mark untrusted input.
|
| UntrustedUrlInput |
Wrapper class to mark an untrusted Url
|
| ValueDecryptorGenerator |
|
| VPKCRequestBuilder |
Builder of DVC requests to VPKC service (Verify Public Key Certificates).
|
| VPKCRequestData |
Data piece of DVCS request to VPKC service (Verify Public Key Certificates).
|
| VSDRequestBuilder |
Builder of DVCS requests to VSD service (Verify Signed Document).
|
| VSDRequestData |
Data piece of DVCS request to VSD service (Verify Signed Document).
|
| X509AttributeCertificateHolder |
Holding class for an X.509 AttributeCertificate structure.
|
| X509AttributeCertificateHolderSelector |
This class is an Selector like implementation to select
attribute certificates from a given set of criteria.
|
| X509AttributeCertificateHolderSelectorBuilder |
This class builds selectors according to the set criteria.
|
| X509CertificateFormatter |
A general class for X.509 certificate "pretty printing".
|
| X509CertificateHolder |
Holding class for an X.509 Certificate structure.
|
| X509CertificateHolderSelector |
a basic index for a X509CertificateHolder class
|
| X509CertificateReviewer |
Collects the problems found while decoding an X.509 certificate, instead of throwing
on the first one, for diagnostic and reporting use (github #1508).
|
| X509CertificateReviewer.Finding |
A single problem found during review.
|
| X509CertificateReviewer.Review |
The outcome of a review: the list of findings, plus the recovered certificate when
the structure decoded cleanly.
|
| X509CertificateReviewer.Severity |
|
| X509ContentVerifierProviderBuilder |
|
| X509CRLEntryHolder |
Holding class for an X.509 CRL Entry structure.
|
| X509CRLHolder |
Holding class for an X.509 CRL structure.
|
| X509ExtensionUtils |
General utility class for creating calculated extensions using the standard methods.
|
| X509RevocationChecker |
X.509 Certificate Revocation Checker - still lacks OCSP support and support for delta CRLs.
|
| X509RevocationChecker.Builder |
|
| X509TrustedCertificateBlock |
Holder for an OpenSSL trusted certificate block.
|
| X509v1CertificateBuilder |
class to produce an X.509 Version 1 certificate.
|
| X509v2AttributeCertificateBuilder |
class to produce an X.509 Version 2 AttributeCertificate.
|
| X509v2CRLBuilder |
class to produce an X.509 Version 2 CRL.
|
| X509v3CertificateBuilder |
class to produce an X.509 Version 3 certificate.
|
| ZlibCompressor |
|
| ZlibExpanderProvider |
|