Class JcaTlsCertificate

java.lang.Object

org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsRawKeyCertificate

org.bouncycastle.tls.crypto.impl.jcajce.JcaTlsCertificate

All Implemented Interfaces:

TlsCertificate

public class JcaTlsCertificate
extends JcaTlsRawKeyCertificate

Implementation class for a single X.509 certificate based on the JCA. An X.509 certificate is a SubjectPublicKeyInfo plus X.509 metadata, so this extends the raw public key JcaTlsRawKeyCertificate, sharing all of the signature/verifier handling and overriding only the public-key source and the X.509-specific accessors.

Field Summary

Fields

Modifier and Type	Field	Description
protected final X509Certificate	certificate

Fields inherited from class JcaTlsRawKeyCertificate

crypto, keyInfo, KU_CRL_SIGN, KU_DATA_ENCIPHERMENT, KU_DECIPHER_ONLY, KU_DIGITAL_SIGNATURE, KU_ENCIPHER_ONLY, KU_KEY_AGREEMENT, KU_KEY_CERT_SIGN, KU_KEY_ENCIPHERMENT, KU_NON_REPUDIATION, pubKeyDH, pubKeyEC, pubKeyRSA

Constructor Summary

Constructors

Constructor	Description
JcaTlsCertificate(JcaTlsCrypto crypto, byte[] encoding)
JcaTlsCertificate(JcaTlsCrypto crypto, X509Certificate certificate)

Method Summary

Modifier and Type	Method	Description
static JcaTlsCertificate	convert(JcaTlsCrypto crypto, TlsCertificate certificate)
byte[]	getEncoded()
byte[]	getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
protected PublicKey	getPublicKey()
BigInteger	getSerialNumber()
String	getSigAlgOID()
org.bouncycastle.asn1.ASN1Encodable	getSigAlgParams()
protected org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	getSubjectPublicKeyInfo()
X509Certificate	getX509Certificate()
static X509Certificate	parseCertificate(org.bouncycastle.jcajce.util.JcaJceHelper helper, byte[] encoding)
protected boolean	supportsKeyUsageBit(int keyUsageBit)

Methods inherited from class JcaTlsRawKeyCertificate

checkUsageInRole, createEncryptor, createVerifier, createVerifier, getLegacySignatureAlgorithm, implSupportsSignatureAlgorithm, supportsMLDSA, supportsRSA_PKCS1, supportsRSA_PSS_PSS, supportsRSA_PSS_RSAE, supportsSignatureAlgorithm, supportsSignatureAlgorithmCA, supportsSLHDSA, validateKeyUsageBit, validateMLDSA, validateRSA_PKCS1, validateRSA_PSS_PSS, validateRSA_PSS_RSAE, validateSLHDSA

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

certificate

protected final X509Certificate certificate

Constructor Details

JcaTlsCertificate

public JcaTlsCertificate(JcaTlsCrypto crypto,
 byte[] encoding)
                  throws IOException

Throws:

IOException

JcaTlsCertificate

public JcaTlsCertificate(JcaTlsCrypto crypto,
 X509Certificate certificate)

Method Details

convert

public static JcaTlsCertificate convert(JcaTlsCrypto crypto,
 TlsCertificate certificate)
                                 throws IOException

Throws:

IOException

parseCertificate

public static X509Certificate parseCertificate(org.bouncycastle.jcajce.util.JcaJceHelper helper,
 byte[] encoding)
                                        throws IOException

Throws:

IOException

getEncoded

public byte[] getEncoded()
                  throws IOException

Specified by:

getEncoded in interface TlsCertificate

Overrides:

getEncoded in class JcaTlsRawKeyCertificate

Throws:

IOException

getExtension

public byte[] getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
                    throws IOException

Specified by:

getExtension in interface TlsCertificate

Overrides:

getExtension in class JcaTlsRawKeyCertificate

Throws:

IOException

getSerialNumber

public BigInteger getSerialNumber()

Specified by:

getSerialNumber in interface TlsCertificate

Overrides:

getSerialNumber in class JcaTlsRawKeyCertificate

getSigAlgOID

public String getSigAlgOID()

Specified by:

getSigAlgOID in interface TlsCertificate

Overrides:

getSigAlgOID in class JcaTlsRawKeyCertificate

Returns:

the OID of this certificate's 'signatureAlgorithm', as a String.

getSigAlgParams

public org.bouncycastle.asn1.ASN1Encodable getSigAlgParams()
                                                    throws IOException

Specified by:

getSigAlgParams in interface TlsCertificate

Overrides:

getSigAlgParams in class JcaTlsRawKeyCertificate

Throws:

IOException

getX509Certificate

public X509Certificate getX509Certificate()

getPublicKey

protected PublicKey getPublicKey()
                          throws IOException

Overrides:

getPublicKey in class JcaTlsRawKeyCertificate

Throws:

IOException

getSubjectPublicKeyInfo

protected org.bouncycastle.asn1.x509.SubjectPublicKeyInfo getSubjectPublicKeyInfo()
                                                                           throws IOException

Overrides:

getSubjectPublicKeyInfo in class JcaTlsRawKeyCertificate

Throws:

IOException

supportsKeyUsageBit

protected boolean supportsKeyUsageBit(int keyUsageBit)

Overrides:

supportsKeyUsageBit in class JcaTlsRawKeyCertificate