org.mozilla.jss.pkcs11.PK11Cert

All Implemented Interfaces:: Serializable, AutoCloseable, X509Extension, X509Certificate

Direct Known Subclasses:: PK11InternalCert, PK11TokenCert

public class PK11Cert extends X509Certificate implements X509Certificate, AutoCloseable

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type

Class

Description

protected static class

PK11Cert.StringPrincipal

A class that implements Principal with a String.

Nested classes/interfaces inherited from class java.security.cert.Certificate
Certificate.CertificateRep
Field Summary

Fields

Modifier and Type

Field

Description

protected org.mozilla.jss.pkcs11.CertProxy

certProxy

static org.slf4j.Logger

logger

protected String

nickname

protected TokenProxy

tokenProxy
Method Summary

Modifier and Type

Method

Description

void

checkValidity()

void

checkValidity(Date date)

void

close()

boolean

equals(Object other)

void

finalize()

int

getBasicConstraints()

Set<String>

getCriticalExtensionOIDs()

byte[]

getEncoded()

byte[]

getExtensionValue(String oid)

Principal

getIssuerDN()

protected String

getIssuerDNString()

boolean[]

getIssuerUniqueID()

boolean[]

getKeyUsage()

String

getNickname()

Set<String>

getNonCriticalExtensionOIDs()

Date

getNotAfter()

Date

getNotBefore()

protected CryptoToken

getOwningToken()

PublicKey

getPublicKey()

BigInteger

getSerialNumber()

protected byte[]

getSerialNumberByteArray()

String

getSigAlgName()

String

getSigAlgOID()

byte[]

getSigAlgParams()

byte[]

getSignature()

Principal

getSubjectDN()

protected String

getSubjectDNString()

boolean[]

getSubjectUniqueID()

byte[]

getTBSCertificate()

protected int

getTrust(int type)

Gets the trust flags for this cert.

protected byte[]

getUniqueID()

int

getVersion()

int

hashCode()

boolean

hasUnsupportedCriticalExtension()

protected void

setTrust(int type, int trust)

Sets the trust flags for this cert.

String

toString()

void

verify(PublicKey key)

void

verify(PublicKey key, String sigProvider)

Methods inherited from class java.security.cert.X509Certificate
getExtendedKeyUsage, getIssuerAlternativeNames, getIssuerX500Principal, getSubjectAlternativeNames, getSubjectX500Principal, verify

Methods inherited from class java.security.cert.Certificate
getType, writeReplace

Methods inherited from class java.lang.Object
clone, getClass, notify, notifyAll, wait, wait, wait

Field Details
- logger
  
  public static org.slf4j.Logger logger
- certProxy
  
  protected org.mozilla.jss.pkcs11.CertProxy certProxy
- tokenProxy
  
  protected TokenProxy tokenProxy
- nickname
  
  protected String nickname
Method Details
- getEncoded
  
  public byte[] getEncoded() throws CertificateEncodingException
  
  Specified by:
  
  getEncoded in interface X509Certificate
  
  Specified by:
  
  getEncoded in class Certificate
  
  Returns:
  
  The DER encoding of this certificate.
  
  Throws:
  
  CertificateEncodingException - If an error occurred.
- getNickname
  
  public String getNickname()
  
  Specified by:
  
  getNickname in interface X509Certificate
  
  Returns:
  
  The nickname of this certificate (could be null).
- hashCode
  
  public int hashCode()
  
  Overrides:
  
  hashCode in class Certificate
- equals
  
  public boolean equals(Object other)
  
  Overrides:
  
  equals in class Certificate
- getSubjectDN
  
  public Principal getSubjectDN()
  
  Specified by:
  
  getSubjectDN in interface X509Certificate
  
  Specified by:
  
  getSubjectDN in class X509Certificate
  
  Returns:
  
  The RFC 1485 ASCII encoding of the Subject Name.
- getIssuerDN
  
  public Principal getIssuerDN()
  
  Specified by:
  
  getIssuerDN in interface X509Certificate
  
  Specified by:
  
  getIssuerDN in class X509Certificate
  
  Returns:
  
  The RFC 1485 ASCII encoding of the issuer's Subject Name.
- getSerialNumber
  
  public BigInteger getSerialNumber()
  
  Specified by:
  
  getSerialNumber in interface X509Certificate
  
  Specified by:
  
  getSerialNumber in class X509Certificate
  
  Returns:
  
  The serial number of this certificate.
- getSerialNumberByteArray
  
  protected byte[] getSerialNumberByteArray()
- getSubjectDNString
  
  protected String getSubjectDNString()
- getIssuerDNString
  
  protected String getIssuerDNString()
- getPublicKey
  
  public PublicKey getPublicKey()
  
  Specified by:
  
  getPublicKey in interface X509Certificate
  
  Specified by:
  
  getPublicKey in class Certificate
  
  Returns:
  
  The Public Key from this certificate.
- getVersion
  
  public int getVersion()
  
  Specified by:
  
  getVersion in interface X509Certificate
  
  Specified by:
  
  getVersion in class X509Certificate
  
  Returns:
  
  the version number of this X.509 certificate. 0 means v1, 1 means v2, 2 means v3.
- getBasicConstraints
  
  public int getBasicConstraints()
  
  Specified by:
  
  getBasicConstraints in class X509Certificate
- getKeyUsage
  
  public boolean[] getKeyUsage()
  
  Specified by:
  
  getKeyUsage in class X509Certificate
- getSubjectUniqueID
  
  public boolean[] getSubjectUniqueID()
  
  Specified by:
  
  getSubjectUniqueID in class X509Certificate
- getIssuerUniqueID
  
  public boolean[] getIssuerUniqueID()
  
  Specified by:
  
  getIssuerUniqueID in class X509Certificate
- getSigAlgParams
  
  public byte[] getSigAlgParams()
  
  Specified by:
  
  getSigAlgParams in class X509Certificate
- getSigAlgName
  
  public String getSigAlgName()
  
  Specified by:
  
  getSigAlgName in class X509Certificate
- getSigAlgOID
  
  public String getSigAlgOID()
  
  Specified by:
  
  getSigAlgOID in class X509Certificate
- getSignature
  
  public byte[] getSignature()
  
  Specified by:
  
  getSignature in class X509Certificate
- getTBSCertificate
  
  public byte[] getTBSCertificate() throws CertificateEncodingException
  
  Specified by:
  
  getTBSCertificate in class X509Certificate
  
  Throws:
  
  CertificateEncodingException
- getNotAfter
  
  public Date getNotAfter()
  
  Specified by:
  
  getNotAfter in class X509Certificate
- getNotBefore
  
  public Date getNotBefore()
  
  Specified by:
  
  getNotBefore in class X509Certificate
- checkValidity
  
  public void checkValidity() throws CertificateExpiredException, CertificateNotYetValidException
  
  Specified by:
  
  checkValidity in class X509Certificate
  
  Throws:
  
  CertificateExpiredException
  
  CertificateNotYetValidException
- checkValidity
  
  public void checkValidity(Date date) throws CertificateExpiredException, CertificateNotYetValidException
  
  Specified by:
  
  checkValidity in class X509Certificate
  
  Throws:
  
  CertificateExpiredException
  
  CertificateNotYetValidException
- toString
  
  public String toString()
  
  Specified by:
  
  toString in class Certificate
- verify
  
  public void verify(PublicKey key) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException
  
  Specified by:
  
  verify in class Certificate
  
  Throws:
  
  CertificateException
  
  NoSuchAlgorithmException
  
  InvalidKeyException
  
  NoSuchProviderException
  
  SignatureException
- verify
  
  public void verify(PublicKey key, String sigProvider) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException
  
  Specified by:
  
  verify in class Certificate
  
  Throws:
  
  CertificateException
  
  NoSuchAlgorithmException
  
  InvalidKeyException
  
  NoSuchProviderException
  
  SignatureException
- getExtensionValue
  
  public byte[] getExtensionValue(String oid)
  
  Specified by:
  
  getExtensionValue in interface X509Extension
- getCriticalExtensionOIDs
  
  public Set<String> getCriticalExtensionOIDs()
  
  Specified by:
  
  getCriticalExtensionOIDs in interface X509Extension
- getNonCriticalExtensionOIDs
  
  public Set<String> getNonCriticalExtensionOIDs()
  
  Specified by:
  
  getNonCriticalExtensionOIDs in interface X509Extension
- hasUnsupportedCriticalExtension
  
  public boolean hasUnsupportedCriticalExtension()
  
  Specified by:
  
  hasUnsupportedCriticalExtension in interface X509Extension
- finalize
  
  public void finalize() throws Throwable
  
  Overrides:
  
  finalize in class Object
  
  Throws:
  
  Throwable
- close
  
  public void close() throws Exception
  
  Specified by:
  
  close in interface AutoCloseable
  
  Throws:
  
  Exception
- getUniqueID
  
  protected byte[] getUniqueID()
- getOwningToken
  
  protected CryptoToken getOwningToken()
- setTrust
  
  protected void setTrust(int type, int trust)
  
  Sets the trust flags for this cert.
  
  Parameters:
  
  type - SSL, EMAIL, or OBJECT_SIGNING.
  
  trust - The trust flags for this type of trust.
- getTrust
  
  protected int getTrust(int type)
  
  Gets the trust flags for this cert.
  
  Parameters:
  
  type - SSL, EMAIL, or OBJECT_SIGNING.
  
  Returns:
  
  The trust flags for this type of trust.

Class PK11Cert

Nested Class Summary

Nested classes/interfaces inherited from class java.security.cert.Certificate

Field Summary

Method Summary

Methods inherited from class java.security.cert.X509Certificate

Methods inherited from class java.security.cert.Certificate

Methods inherited from class java.lang.Object

Field Details

logger

certProxy

tokenProxy

nickname

Method Details

getEncoded

getNickname

hashCode

equals

getSubjectDN

getIssuerDN

getSerialNumber

getSerialNumberByteArray

getSubjectDNString

getIssuerDNString

getPublicKey

getVersion

getBasicConstraints

getKeyUsage

getSubjectUniqueID

getIssuerUniqueID

getSigAlgParams

getSigAlgName

getSigAlgOID

getSignature

getTBSCertificate

getNotAfter

getNotBefore

checkValidity

checkValidity

toString

verify

verify

getExtensionValue

getCriticalExtensionOIDs

getNonCriticalExtensionOIDs

hasUnsupportedCriticalExtension

finalize

close

getUniqueID

getOwningToken

setTrust

getTrust