Class JcaPKCS10CertificationRequestBuilder


  • public class JcaPKCS10CertificationRequestBuilder
    extends PKCS10CertificationRequestBuilder
    Extension of the PKCS#10 builder to support PublicKey and X500Principal objects.
    • Constructor Detail

      • JcaPKCS10CertificationRequestBuilder

        public JcaPKCS10CertificationRequestBuilder​(org.bouncycastle.asn1.x500.X500Name subject,
                                                    java.security.PublicKey publicKey)
        Create a PKCS#10 builder for the passed in subject and JCA public key.
        Parameters:
        subject - an X500Name containing the subject associated with the request we are building.
        publicKey - a JCA public key that is to be associated with the request we are building.
      • JcaPKCS10CertificationRequestBuilder

        public JcaPKCS10CertificationRequestBuilder​(javax.security.auth.x500.X500Principal subject,
                                                    java.security.PublicKey publicKey)
        Create a PKCS#10 builder for the passed in subject and JCA public key.
        Parameters:
        subject - an X500Principal containing the subject associated with the request we are building.
        publicKey - a JCA public key that is to be associated with the request we are building.
    • Method Detail

      • build

        public PKCS10CertificationRequest build​(ContentSigner signer,
                                                java.security.PublicKey altPublicKey,
                                                ContentSigner altSigner)
        Generate a PKCS#10 certification request carrying the alternate public key / alternate signature attributes used by paired ("chameleon") certificates.
        Parameters:
        signer - the content signer used to produce the primary signature.
        altPublicKey - the alternate public key as a JCA PublicKey.
        altSigner - the content signer used to produce the alternate signature value.
        Returns:
        the resulting PKCS#10 certification request with both signatures.