com.cleo.lexicom.certmgr.external

Interface ICertManagerRunTime

public interface ICertManagerRunTime

Establishes an interface to Certificate Manager. Refer to ILexiCom.getCertManager().

Methods provided concentrate primarily on user certificates. This is because trusted CA certificates can be manipulated simply by copying and removing files in the certs/ directory.

Method Summary

Modifier and Type	Method and Description
void	checkPKCS12Password(java.io.InputStream pkcs12, java.lang.String password) Check a PKCS12 password
void	checkRevoked(java.security.cert.X509Certificate[] cert) Checks whether any certificate in the chain is revoked
void	checkVerificationError(java.security.cert.X509Certificate[] cert) Checks whether any certificate in the chain has a verification error
java.security.cert.X509Certificate	convertCert(byte[] encoded) Convert a byte array to X509 certificate
iaik.x509.X509Certificate	convertToIAIKCert(byte[] encoded) Convert a byte array to IAIK-style X509 certificate
iaik.x509.X509Certificate	convertToIAIKCert(byte[] encoded, boolean pkiPath) Convert a byte array to IAIK-style X509 certificate
iaik.x509.X509Certificate	convertToIAIKCert(java.security.cert.X509Certificate jCert) Convert an RSA-style certificate to IAIK-style
iaik.x509.X509Certificate[]	convertToIAIKCert(java.security.cert.X509Certificate[] jCert) Convert an array of RSA-style certificates to IAIK-style
java.lang.String	displayCertificate(boolean user, java.lang.String alias, boolean includeHeader) Returns the display description of certificate
java.lang.String	displayCertificate(boolean user, java.lang.String alias, boolean includeHeader, java.security.cert.X509Certificate cert) Returns the display description of certificate
void	exportCaCert(java.lang.String alias, java.io.File cert, boolean exportChain, boolean base64) Export CA certificate(s) chained to a user certificate
void	exportUserCert(java.lang.String alias, java.io.File cert, boolean exportChain, boolean base64) Export a user certificate file
void	exportUserKey(java.lang.String alias, java.io.File key, java.lang.String password, boolean base64) Export a user private key file
void	exportUserKeyOpenSSH(java.lang.String alias, java.io.File key, java.lang.String password) Export a user private key file in OpenSSL/OpenSSH format
void	exportUserPKCS12(java.lang.String alias, java.io.File pkcs12, java.lang.String password, java.lang.String friendlyName, boolean exportChain) Export a PKCS12 user certificate and private key file
void	exportUserPKCS12(java.lang.String alias, java.io.OutputStream out, java.lang.String password, java.lang.String friendlyName, boolean exportChain) Export a PKCS12 user certificate and private key file
void	exportUserPublicKeyOpenSSH(java.lang.String alias, java.lang.String filename, boolean openSshFormat) Export a user public key in either OpenSSH FTP or SSH FTP format
void	generateCaStoreCert(java.lang.String alias, CertificateInfo certinfo, java.lang.String filename, boolean pgp) Generate a CA store certificate from an OpenPGP or SSH FTP key
void	generateCaStoreCert(java.lang.String alias, java.lang.String filename, boolean pgp) Generate a CA store certificate from an OpenPGP or SSH FTP key
void	generateUserCertKey(java.lang.String alias, CertificateInfo certinfo, java.lang.String password, boolean replace) Generate a self-signed user certificate and private key
java.lang.String	generateUserCSR(java.lang.String alias, java.lang.String password) Generate a user certificate signing request (CSR)
java.security.cert.X509Certificate	getCACertificate(java.lang.String caAlias) Returns the CA certificate
byte[][]	getCACertificates() Get the trusted CA certificates - RSA-style
java.security.cert.X509Certificate[]	getCACertificatesX509() Get the trusted CA certificates - IAIK-style
java.util.Enumeration	getCAFiles() Returns the current CA certificate file list
java.util.Enumeration	getCaStoreAliases() Returns the current ca store alias list
byte[][]	getCertificateChain(java.lang.String alias) Get the certificate chain for a user certificate - RSA-style
byte[][]	getCertificateChain(java.security.cert.X509Certificate cert) Get the certificate chain for a CA certificate - RSA-style
java.security.cert.X509Certificate[]	getCertificateChainX509(java.lang.String alias) Get the certificate chain for a user certificate - IAIK-style
java.security.cert.X509Certificate[]	getCertificateChainX509(java.security.cert.X509Certificate cert) Get the certificate chain for a CA certificate - IAIK-style
java.lang.String	getFriendlyName(java.security.cert.X509Certificate cert) Returns a portion of the Subject DN
java.lang.String	getFriendlyNameIssuer(java.security.cert.X509Certificate cert) Returns a portion of the Issuer DN
java.util.Vector	getIssuer(java.security.cert.X509Certificate cert) Returns the Issuer DN
byte[]	getPrivateKey(java.lang.String alias, char[] keyPswd) Get the private key for a user certificate - RSA-style
java.security.PrivateKey	getPrivateKeyPK(java.lang.String alias, char[] keyPswd) Get the private key for a user certificate - IAIK-style
java.security.PrivateKey	getPrivateKeyPK(java.lang.String alias, char[] keyPswd, boolean throwException) Get the private key for a user certificate - IAIK-style
java.util.Vector	getSubject(java.security.cert.X509Certificate cert) Returns the Subject DN
java.util.Enumeration	getUserAliases() Returns the current user certificate alias list
void	importCaStoreCert(java.lang.String alias, java.security.cert.X509Certificate cert, boolean replace) Import a CA store certificate
void	importUserCertKey(java.lang.String alias, java.io.File cert, java.io.File key, java.lang.String password, boolean replace) Import a user certificate file and corresponding private key file
void	importUserCertKey(java.lang.String alias, java.io.File cert, java.io.File key, java.lang.String password, boolean replace, boolean addPassword) Import a user certificate file and corresponding private key file
void	importUserCertKey(java.lang.String alias, java.security.cert.X509Certificate[] cert, byte[] key, boolean replace) Import a user certificate and corresponding private key
void	importUserPKCS12(java.lang.String alias, java.io.File pkcs12, java.lang.String password, boolean replace) Import a PKCS12 file (user certificate and private key)
void	importUserPKCS12(java.lang.String alias, java.io.File pkcs12, java.lang.String password, boolean replace, boolean addPassword) Import a PKCS12 file (user certificate and private key)
void	importUserPKCS12(java.lang.String alias, java.io.InputStream pkcs12, java.lang.String password, boolean replace) Import a PKCS12 stream (user certificate and private key)
void	importUserPKCS12(java.lang.String alias, java.io.InputStream pkcs12, java.lang.String password, boolean replace, boolean addPassword) Import a PKCS12 stream (user certificate and private key)
boolean	isRevoked(java.security.cert.X509Certificate cert) Checks whether any certificate in the chain is revoked
boolean	isRevoked(java.security.cert.X509Certificate[] cert) Checks whether any certificate in the chain is revoked
boolean	isVerificationError(java.security.cert.X509Certificate cert) Checks whether the certificate has a verification error
boolean	isVerificationError(java.security.cert.X509Certificate[] cert) Checks whether any certificate in the chain has a verification error
java.util.Collection	readCert(java.io.File cert) Read a certificate file
java.util.Collection	readCert(java.lang.String path) Read a certificate file
void	reinitialize() Reinitialize the certs
void	removeCACert(java.lang.String alias) Remove a CA certificate
void	removeCert(boolean trusted, java.lang.String alias, boolean fileToo) Remove certificate
void	removeUserCertKey(java.lang.String alias) Remove a user certificate/private key
void	setCheckRevoked(boolean checkRevoked) Sets whether the get...() and readCert() methods should check whether the cert has been revoked
void	trustCACert(java.security.cert.X509Certificate[] cert) Adds trust for CA certificate(s)
void	trustCACert(java.security.cert.X509Certificate[] cert, java.lang.String username) Adds trust for CA certificate(s)
java.io.File	trustCACertFile(java.security.cert.X509Certificate[] cert) Adds trust for CA certificate(s)
java.io.File	trustCACertFile(java.security.cert.X509Certificate[] cert, java.lang.String username) Adds trust for CA certificate(s)

Method Detail

reinitialize

void reinitialize()
           throws java.lang.Exception

Reinitialize the certs

Throws:

java.lang.Exception

getCACertificates

byte[][] getCACertificates()
                    throws java.lang.Exception

Get the trusted CA certificates - RSA-style

Returns:

the byte array of DER-encoded X.509 trusted CA certificates

Throws:

java.lang.Exception

getCACertificatesX509

java.security.cert.X509Certificate[] getCACertificatesX509()
                                                    throws java.lang.Exception

Get the trusted CA certificates - IAIK-style

Returns:

the array of X.509 trusted CA certificates

Throws:

java.lang.Exception

getCertificateChain

byte[][] getCertificateChain(java.lang.String alias)
                      throws java.lang.Exception

Get the certificate chain for a user certificate - RSA-style

Parameters:

alias - user certificate alias

Returns:

the byte array of DER-encoded X.509 chained certificates

Throws:

java.lang.Exception

getCertificateChain

byte[][] getCertificateChain(java.security.cert.X509Certificate cert)
                      throws java.lang.Exception

Get the certificate chain for a CA certificate - RSA-style

Parameters:

cert - CA certificate

Returns:

the byte array of DER-encoded X.509 chained certificates

Throws:

java.lang.Exception

getCertificateChainX509

java.security.cert.X509Certificate[] getCertificateChainX509(java.lang.String alias)
                                                      throws java.lang.Exception

Get the certificate chain for a user certificate - IAIK-style

Parameters:

alias - user certificate alias

Returns:

the array of X.509 chained certificates

Throws:

java.lang.Exception

getCertificateChainX509

java.security.cert.X509Certificate[] getCertificateChainX509(java.security.cert.X509Certificate cert)
                                                      throws java.lang.Exception

Get the certificate chain for a CA certificate - IAIK-style

Parameters:

cert - CA certificate

Returns:

the array of X.509 chained certificates

Throws:

java.lang.Exception

getPrivateKey

byte[] getPrivateKey(java.lang.String alias,
                     char[] keyPswd)
              throws java.lang.Exception

Get the private key for a user certificate - RSA-style

Parameters:

alias - user certificate alias

keyPswd - private key password (a.k.a. passphrase)

Returns:

the byte array of PKCS8-encrypted private key

Throws:

java.lang.Exception

getPrivateKeyPK

java.security.PrivateKey getPrivateKeyPK(java.lang.String alias,
                                         char[] keyPswd,
                                         boolean throwException)
                                  throws java.lang.Exception

Get the private key for a user certificate - IAIK-style

Parameters:

alias - user certificate alias

keyPswd - private key password (a.k.a. passphrase)

throwException - indicates to throw an exception when cannot decrypt/decode the private key (rather than null)

Returns:

the PKCS8-encrypted private key

Throws:

java.lang.Exception

getPrivateKeyPK

java.security.PrivateKey getPrivateKeyPK(java.lang.String alias,
                                         char[] keyPswd)
                                  throws java.lang.Exception

Get the private key for a user certificate - IAIK-style

Parameters:

alias - user certificate alias

keyPswd - private key password (a.k.a. passphrase)

Returns:

the PKCS8-encrypted private key

Throws:

java.lang.Exception

convertToIAIKCert

iaik.x509.X509Certificate convertToIAIKCert(byte[] encoded)
                                     throws java.lang.Exception

Convert a byte array to IAIK-style X509 certificate

Parameters:

encoded - the encoded byte array

Returns:

the IAIK-style X.509 certificate

Throws:

java.lang.Exception

convertToIAIKCert

iaik.x509.X509Certificate convertToIAIKCert(byte[] encoded,
                                            boolean pkiPath)
                                     throws java.lang.Exception

Convert a byte array to IAIK-style X509 certificate

Parameters:

encoded - the encoded byte array

pkiPath - true if encoded is a PKI Path; false if it is an X509 certificate

Returns:

the IAIK-style X.509 certificate

Throws:

java.lang.Exception

convertCert

java.security.cert.X509Certificate convertCert(byte[] encoded)
                                        throws java.lang.Exception

Convert a byte array to X509 certificate

Parameters:

encoded - the encoded byte array

Returns:

the X.509 certificate

Throws:

java.lang.Exception

convertToIAIKCert

iaik.x509.X509Certificate convertToIAIKCert(java.security.cert.X509Certificate jCert)
                                     throws java.lang.Exception

Convert an RSA-style certificate to IAIK-style

Parameters:

jCert - RSA-style X.509 certificate

Returns:

the IAIK-style X.509 certificate

Throws:

java.lang.Exception

convertToIAIKCert

iaik.x509.X509Certificate[] convertToIAIKCert(java.security.cert.X509Certificate[] jCert)
                                       throws java.lang.Exception

Convert an array of RSA-style certificates to IAIK-style

Parameters:

jCert - array of RSA-style X.509 certificates

Returns:

the array of IAIK-style X.509 certificates

Throws:

java.lang.Exception

checkPKCS12Password

void checkPKCS12Password(java.io.InputStream pkcs12,
                         java.lang.String password)
                  throws java.lang.Exception

Check a PKCS12 password

Parameters:

pkcs12 - input PKCS12-formatted stream

password - private key password (a.k.a. passphrase)

Throws:

java.lang.Exception

importUserPKCS12

void importUserPKCS12(java.lang.String alias,
                      java.io.InputStream pkcs12,
                      java.lang.String password,
                      boolean replace)
               throws java.lang.Exception

Import a PKCS12 stream (user certificate and private key)

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

pkcs12 - input PKCS12-formatted stream

password - private key password (a.k.a. passphrase)

replace - true if alias should be replaced if it already exists

Throws:

java.lang.Exception

importUserPKCS12

void importUserPKCS12(java.lang.String alias,
                      java.io.InputStream pkcs12,
                      java.lang.String password,
                      boolean replace,
                      boolean addPassword)
               throws java.lang.Exception

Import a PKCS12 stream (user certificate and private key)

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

pkcs12 - input PKCS12-formatted stream

password - private key password (a.k.a. passphrase)

replace - true if alias should be replaced if it already exists

addPassword - true if original PKCS12-formatted stream is unprotected

Throws:

java.lang.Exception

importUserPKCS12

void importUserPKCS12(java.lang.String alias,
                      java.io.File pkcs12,
                      java.lang.String password,
                      boolean replace)
               throws java.lang.Exception

Import a PKCS12 file (user certificate and private key)

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

pkcs12 - input PKCS12-formatted file

password - private key password (a.k.a. passphrase)

replace - true if alias should be replaced if it already exists

Throws:

java.lang.Exception

importUserPKCS12

void importUserPKCS12(java.lang.String alias,
                      java.io.File pkcs12,
                      java.lang.String password,
                      boolean replace,
                      boolean addPassword)
               throws java.lang.Exception

Import a PKCS12 file (user certificate and private key)

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

pkcs12 - input PKCS12-formatted file

password - private key password (a.k.a. passphrase)

replace - true if alias should be replaced if it already exists

addPassword - true if original PKCS12-formatted file is unprotected

Throws:

java.lang.Exception

importUserCertKey

void importUserCertKey(java.lang.String alias,
                       java.io.File cert,
                       java.io.File key,
                       java.lang.String password,
                       boolean replace)
                throws java.lang.Exception

Import a user certificate file and corresponding private key file

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

cert - input X.509 certificate file (either DER or CER)

key - input PKCS8-encrypted file (either DER or PEM); can be null if replacing user certificate

password - private key password (a.k.a. passphrase)

replace - true if alias should be replaced if it already exists

Throws:

java.lang.Exception

importUserCertKey

void importUserCertKey(java.lang.String alias,
                       java.io.File cert,
                       java.io.File key,
                       java.lang.String password,
                       boolean replace,
                       boolean addPassword)
                throws java.lang.Exception

Import a user certificate file and corresponding private key file

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

cert - input X.509 certificate file (either DER or CER)

key - input PKCS8-encrypted file (either DER or PEM); can be null if replacing user certificate

password - private key password (a.k.a. passphrase)

replace - true if alias should be replaced if it already exists

addPassword - true if original PKCS8-encrypted file is unprotected

Throws:

java.lang.Exception

importUserCertKey

void importUserCertKey(java.lang.String alias,
                       java.security.cert.X509Certificate[] cert,
                       byte[] key,
                       boolean replace)
                throws java.lang.Exception

Import a user certificate and corresponding private key

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

cert - input X.509 certificate array

key - input PKCS8-encrypted byte array; can be null if replacing user certificate

replace - true if alias should be replaced if it already exists

Throws:

java.lang.Exception

importCaStoreCert

void importCaStoreCert(java.lang.String alias,
                       java.security.cert.X509Certificate cert,
                       boolean replace)
                throws java.lang.Exception

Import a CA store certificate

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

cert - input X.509 certificate

replace - true if alias should be replaced if it already exists

Throws:

java.lang.Exception

generateCaStoreCert

void generateCaStoreCert(java.lang.String alias,
                         java.lang.String filename,
                         boolean pgp)
                  throws java.lang.Exception

Generate a CA store certificate from an OpenPGP or SSH FTP key

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

filename - path to the file to import

pgp - true if OpenPGP import or false if SSH FTP import

Throws:

java.lang.Exception

generateCaStoreCert

void generateCaStoreCert(java.lang.String alias,
                         CertificateInfo certinfo,
                         java.lang.String filename,
                         boolean pgp)
                  throws java.lang.Exception

Generate a CA store certificate from an OpenPGP or SSH FTP key

Parameters:

alias - user alias to be assigned to imported certificate; must be uppercase

certinfo - CertificateInfo container holding the certificate info

filename - path to the file to import

pgp - true if OpenPGP import or false if SSH FTP import

Throws:

java.lang.Exception

exportUserPKCS12

void exportUserPKCS12(java.lang.String alias,
                      java.io.File pkcs12,
                      java.lang.String password,
                      java.lang.String friendlyName,
                      boolean exportChain)
               throws java.lang.Exception

Export a PKCS12 user certificate and private key file

Parameters:

alias - user alias of certificate/private key to be exported; must be uppercase

pkcs12 - output PKCS12-formatted file

password - private key password (a.k.a. passphrase)

friendlyName - optional name that will display in other Certificate systems, such as MSIE

exportChain - true if certificate chain should be exported

Throws:

java.lang.Exception

exportUserPKCS12

void exportUserPKCS12(java.lang.String alias,
                      java.io.OutputStream out,
                      java.lang.String password,
                      java.lang.String friendlyName,
                      boolean exportChain)
               throws java.lang.Exception

Export a PKCS12 user certificate and private key file

Parameters:

alias - user alias of certificate/private key to be exported; must be uppercase

out - write PKCS12 to outputstream

password - private key password (a.k.a. passphrase)

friendlyName - optional name that will display in other Certificate systems, such as MSIE

exportChain - true if certificate chain should be exported

Throws:

java.lang.Exception

exportCaCert

void exportCaCert(java.lang.String alias,
                  java.io.File cert,
                  boolean exportChain,
                  boolean base64)
           throws java.lang.Exception

Export CA certificate(s) chained to a user certificate

Parameters:

alias - user alias of certificate to be exported; must be uppercase

cert - output X.509 certificate file (either DER or CER or PKCS7 depending on next two params)

exportChain - true if certificate chain should be exported

base64 - true if CER format should be us

Throws:

java.lang.Exception

exportUserCert

void exportUserCert(java.lang.String alias,
                    java.io.File cert,
                    boolean exportChain,
                    boolean base64)
             throws java.lang.Exception

Export a user certificate file

Parameters:

alias - user alias of certificate to be exported; must be uppercase

cert - output X.509 certificate file (either DER or CER or PKCS7 depending on next two params)

exportChain - true if certificate chain should be exported

base64 - true if CER format should be used

Throws:

java.lang.Exception

exportUserKey

void exportUserKey(java.lang.String alias,
                   java.io.File key,
                   java.lang.String password,
                   boolean base64)
            throws java.lang.Exception

Export a user private key file

Parameters:

alias - user alias of private key to be exported; must be uppercase

key - output PKCS8-encrypted certificate file (either DER or PEM depending on next param)

password - private key password (a.k.a. passphrase)

base64 - true if PEM format should be used

Throws:

java.lang.Exception

exportUserKeyOpenSSH

void exportUserKeyOpenSSH(java.lang.String alias,
                          java.io.File key,
                          java.lang.String password)
                   throws java.lang.Exception

Export a user private key file in OpenSSL/OpenSSH format

Parameters:

alias - user alias of private key to be exported; must be uppercase

key - OpenSSL/OpenSSH key output file

password - private key password (a.k.a. passphrase)

Throws:

java.lang.Exception

exportUserPublicKeyOpenSSH

void exportUserPublicKeyOpenSSH(java.lang.String alias,
                                java.lang.String filename,
                                boolean openSshFormat)
                         throws java.lang.Exception

Export a user public key in either OpenSSH FTP or SSH FTP format

Parameters:

alias - user alias of public key to be exported; must be uppercase

filename - OpenSSH FTP or SSH FTP public key output file name

openSshFormat - true if output format is OpenSSH FTP; false if format is SSH FTP

Throws:

java.lang.Exception

generateUserCertKey

void generateUserCertKey(java.lang.String alias,
                         CertificateInfo certinfo,
                         java.lang.String password,
                         boolean replace)
                  throws java.lang.Exception

Generate a self-signed user certificate and private key

Parameters:

alias - user alias of certificate; must be uppercase

certinfo - certificate subject and usage information

password - private key password (a.k.a. passphrase)

replace - true if alias should be replaced if it already exists

Throws:

java.lang.Exception

generateUserCSR

java.lang.String generateUserCSR(java.lang.String alias,
                                 java.lang.String password)
                          throws java.lang.Exception

Generate a user certificate signing request (CSR)

Parameters:

alias - user alias of certificate for CSR; must be uppercase

password - private key password (a.k.a. passphrase)

Throws:

java.lang.Exception

removeUserCertKey

void removeUserCertKey(java.lang.String alias)
                throws java.lang.Exception

Remove a user certificate/private key

Parameters:

alias - user alias of certificate/private key to be removed; must be uppercase

Throws:

java.lang.Exception

removeCACert

void removeCACert(java.lang.String alias)
           throws java.lang.Exception

Remove a CA certificate

Parameters:

alias - user alias of CA certificate to be removed; must be uppercase

Throws:

java.lang.Exception

removeCert

void removeCert(boolean trusted,
                java.lang.String alias,
                boolean fileToo)
         throws java.lang.Exception

Remove certificate

Parameters:

trusted - if CA cert

alias - alias of certificate to be removed

fileToo - also remove corresponding file, if it exists

Throws:

java.lang.Exception

readCert

java.util.Collection readCert(java.io.File cert)
                       throws java.lang.Exception

Read a certificate file

Parameters:

cert - input X.509 certificate file (either DER or CER or PKCS7)

Returns:

collection of X.509 certificates

Throws:

java.lang.Exception

readCert

java.util.Collection readCert(java.lang.String path)
                       throws java.lang.Exception

Read a certificate file

Parameters:

path - input X.509 certificate file (either DER or CER or PKCS7)

Returns:

collection of X.509 certificates

Throws:

java.lang.Exception

trustCACert

void trustCACert(java.security.cert.X509Certificate[] cert)
          throws java.lang.Exception

Adds trust for CA certificate(s)

Parameters:

cert - array of RSA-style X.509 certificates

Throws:

java.lang.Exception

trustCACert

void trustCACert(java.security.cert.X509Certificate[] cert,
                 java.lang.String username)
          throws java.lang.Exception

Adds trust for CA certificate(s)

Parameters:

cert - array of RSA-style X.509 certificates

username - name of user adding trust

Throws:

java.lang.Exception

trustCACertFile

java.io.File trustCACertFile(java.security.cert.X509Certificate[] cert)
                      throws java.lang.Exception

Adds trust for CA certificate(s)

Parameters:

cert - array of RSA-style X.509 certificates

Returns:

File trusted certificate file

Throws:

java.lang.Exception

trustCACertFile

java.io.File trustCACertFile(java.security.cert.X509Certificate[] cert,
                             java.lang.String username)
                      throws java.lang.Exception

Adds trust for CA certificate(s)

Parameters:

cert - array of RSA-style X.509 certificates

username - name of user adding trust

Returns:

File trusted certificate file

Throws:

java.lang.Exception

getFriendlyName

java.lang.String getFriendlyName(java.security.cert.X509Certificate cert)
                          throws java.lang.Exception

Returns a portion of the Subject DN

Parameters:

cert - RSA-style X.509 certificate

Throws:

java.lang.Exception

getFriendlyNameIssuer

java.lang.String getFriendlyNameIssuer(java.security.cert.X509Certificate cert)
                                throws java.lang.Exception

Returns a portion of the Issuer DN

Parameters:

cert - RSA-style X.509 certificate

Throws:

java.lang.Exception

getSubject

java.util.Vector getSubject(java.security.cert.X509Certificate cert)
                     throws java.lang.Exception

Returns the Subject DN

Parameters:

cert - RSA-style X.509 certificate

Throws:

java.lang.Exception

getIssuer

java.util.Vector getIssuer(java.security.cert.X509Certificate cert)
                    throws java.lang.Exception

Returns the Issuer DN

Parameters:

cert - RSA-style X.509 certificate

Throws:

java.lang.Exception

getCAFiles

java.util.Enumeration getCAFiles()
                          throws java.lang.Exception

Returns the current CA certificate file list

Throws:

java.lang.Exception

getCACertificate

java.security.cert.X509Certificate getCACertificate(java.lang.String caAlias)
                                             throws java.lang.Exception

Returns the CA certificate

Throws:

java.lang.Exception

getUserAliases

java.util.Enumeration getUserAliases()
                              throws java.lang.Exception

Returns the current user certificate alias list

Throws:

java.lang.Exception

getCaStoreAliases

java.util.Enumeration getCaStoreAliases()
                                 throws java.lang.Exception

Returns the current ca store alias list

Throws:

java.lang.Exception

displayCertificate

java.lang.String displayCertificate(boolean user,
                                    java.lang.String alias,
                                    boolean includeHeader)

Returns the display description of certificate

Parameters:

user - true if user certificate; false if ca certificate

alias - alias of user or CA certificate

includeHeader - true if certificate alias and filename should be included

displayCertificate

java.lang.String displayCertificate(boolean user,
                                    java.lang.String alias,
                                    boolean includeHeader,
                                    java.security.cert.X509Certificate cert)

Returns the display description of certificate

Parameters:

user - true if user certificate; false if ca certificate

alias - alias of user or CA certificate

includeHeader - true if certificate alias and filename should be included

cert - certificate to be displayed

setCheckRevoked

void setCheckRevoked(boolean checkRevoked)

Sets whether the get...() and readCert() methods should check whether the cert has been revoked

Parameters:

checkRevoked - true if should check cert revocation; defaults to false

isRevoked

boolean isRevoked(java.security.cert.X509Certificate cert)
           throws java.lang.Exception

Checks whether any certificate in the chain is revoked

Parameters:

cert - RSA-style X.509 certificate

Throws:

java.lang.Exception

isRevoked

boolean isRevoked(java.security.cert.X509Certificate[] cert)
           throws java.security.cert.CertificateException

Checks whether any certificate in the chain is revoked

Parameters:

cert - array of RSA-style X.509 certificates

Throws:

java.security.cert.CertificateException

checkRevoked

void checkRevoked(java.security.cert.X509Certificate[] cert)
           throws java.security.cert.CertificateException

Checks whether any certificate in the chain is revoked

Parameters:

cert - array of RSA-style X.509 certificates

Throws:

java.security.cert.CertificateException

isVerificationError

boolean isVerificationError(java.security.cert.X509Certificate cert)

Checks whether the certificate has a verification error

Parameters:

cert - RSA-style X.509 certificate

isVerificationError

boolean isVerificationError(java.security.cert.X509Certificate[] cert)

Checks whether any certificate in the chain has a verification error

Parameters:

cert - array of RSA-style X.509 certificates

checkVerificationError

void checkVerificationError(java.security.cert.X509Certificate[] cert)
                     throws java.security.cert.CertificateException

Checks whether any certificate in the chain has a verification error

Parameters:

cert - array of RSA-style X.509 certificates

Throws:

java.security.cert.CertificateException