Package org.mozilla.jss.pkcs11

Class PK11InternalTokenCert

java.lang.Object

java.security.cert.Certificate

java.security.cert.X509Certificate

org.mozilla.jss.pkcs11.PK11Cert

org.mozilla.jss.pkcs11.PK11InternalCert

org.mozilla.jss.pkcs11.PK11InternalTokenCert

All Implemented Interfaces:

Serializable, AutoCloseable, X509Extension, InternalCertificate, TokenCertificate, X509Certificate

public final class PK11InternalTokenCert
extends PK11InternalCert
implements TokenCertificate

A certificate that lives on the internal token. It has database information (like trust flags) but also PKCS #11 information (like unique ID).

See Also:

• Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from class org.mozilla.jss.pkcs11.PK11Cert

PK11Cert.StringPrincipal

Nested classes/interfaces inherited from class java.security.cert.Certificate

Certificate.CertificateRep

Field Summary

Fields inherited from class org.mozilla.jss.pkcs11.PK11InternalCert

EMAIL, OBJECT_SIGNING, SSL

Fields inherited from class org.mozilla.jss.pkcs11.PK11Cert

certProxy, logger, nickname, tokenProxy

Fields inherited from interface org.mozilla.jss.crypto.InternalCertificate

TRUSTED_CA, TRUSTED_CLIENT_CA, TRUSTED_PEER, USER, VALID_CA, VALID_PEER

Method Summary

Modifier and Type	Method	Description
CryptoToken	getOwningToken()	Returns the CryptoToken that owns this certificate.
byte[]	getUniqueID()	Returns the unique ID of this key.

Methods inherited from class org.mozilla.jss.pkcs11.PK11InternalCert

getEmailTrust, getObjectSigningTrust, getSSLTrust, setEmailTrust, setObjectSigningTrust, setSSLTrust

Methods inherited from class org.mozilla.jss.pkcs11.PK11Cert

checkValidity, checkValidity, close, equals, finalize, getBasicConstraints, getCriticalExtensionOIDs, getEncoded, getExtensionValue, getIssuerDN, getIssuerDNString, getIssuerUniqueID, getKeyUsage, getNickname, getNonCriticalExtensionOIDs, getNotAfter, getNotBefore, getPublicKey, getSerialNumber, getSerialNumberByteArray, getSigAlgName, getSigAlgOID, getSigAlgParams, getSignature, getSubjectDN, getSubjectDNString, getSubjectUniqueID, getTBSCertificate, getTrust, getVersion, hashCode, hasUnsupportedCriticalExtension, setTrust, toString, verify, verify

Methods inherited from class java.security.cert.X509Certificate

getExtendedKeyUsage, getIssuerAlternativeNames, getIssuerX500Principal, getSubjectAlternativeNames, getSubjectX500Principal, verify

Methods inherited from class java.security.cert.Certificate

getType, writeReplace

Methods inherited from class java.lang.Object

clone, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.mozilla.jss.crypto.X509Certificate

getEncoded, getIssuerDN, getNickname, getPublicKey, getSerialNumber, getSubjectDN, getVersion

Method Details

getUniqueID

public byte[] getUniqueID()

Description copied from interface: TokenCertificate

Returns the unique ID of this key. Unique IDs can be used to match certificates to keys.

Specified by:

getUniqueID in interface TokenCertificate

Overrides:

getUniqueID in class PK11Cert

See Also:

• PrivateKey.getUniqueID()

getOwningToken

public CryptoToken getOwningToken()

Description copied from interface: TokenCertificate

Returns the CryptoToken that owns this certificate. Cryptographic operations with this key may only be performed on the token that owns the key.

Specified by:

getOwningToken in interface TokenCertificate

Overrides:

getOwningToken in class PK11Cert