org.apache.brooklyn.util.crypto

Class SecureKeysWithoutBouncyCastle

java.lang.Object

org.apache.brooklyn.util.crypto.SecureKeysWithoutBouncyCastle

Direct Known Subclasses:

SecureKeys

public class SecureKeysWithoutBouncyCastle
extends java.lang.Object

Utility methods for generating and working with keys, with no BC dependencies

Method Summary

Modifier and Type	Method and Description
static java.security.cert.X509Certificate	getCanonicalImpl(java.security.cert.X509Certificate inCert) converts a certificate to the canonical implementation, commonly sun.security.x509.X509CertImpl, which is required in some places -- the Bouncy Castle X509 impl is not accepted (e.g.
static javax.net.ssl.TrustManager	getTrustManager(java.security.KeyStore trustStore) see getTrustManager(KeyStore, Class), matching any type
static <T extends javax.net.ssl.TrustManager> T	getTrustManager(java.security.KeyStore trustStore, java.lang.Class<T> type) returns the trust manager inferred from trustStore, matching the type (if not null); throws exception if there are none, or if there are multiple
static javax.net.ssl.X509TrustManager	getTrustManager(java.security.cert.X509Certificate certificate)
static javax.security.auth.x500.X500Principal	getX500PrincipalWithCommonName(java.lang.String commonName)
static boolean	isCertificateAuthorizedBy(java.security.cert.X509Certificate candidate, java.security.cert.X509Certificate authority)
static boolean	isCertificateAuthorizedBy(java.security.cert.X509Certificate candidate, java.security.cert.X509Certificate authority, boolean quiet)
static java.security.KeyPair	newKeyPair()
static java.security.KeyPair	newKeyPair(java.lang.String algorithm, int bits)
static java.security.KeyPairGenerator	newKeyPairGenerator(java.lang.String algorithm, int bits)
static java.security.KeyStore	newKeyStore() returns a new keystore, of the default type, and initialized to be empty.
static java.security.KeyStore	newKeyStore(java.io.InputStream source, java.lang.String passphrase) returns keystore of default type read from given source

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

newKeyPairGenerator

public static java.security.KeyPairGenerator newKeyPairGenerator(java.lang.String algorithm,
                                                                 int bits)

newKeyPair

public static java.security.KeyPair newKeyPair()

newKeyPair

public static java.security.KeyPair newKeyPair(java.lang.String algorithm,
                                               int bits)

newKeyStore

public static java.security.KeyStore newKeyStore()

returns a new keystore, of the default type, and initialized to be empty. (everyone always forgets to load(null,null).)

newKeyStore

public static java.security.KeyStore newKeyStore(java.io.InputStream source,
                                                 java.lang.String passphrase)

returns keystore of default type read from given source

getTrustManager

public static javax.net.ssl.TrustManager getTrustManager(java.security.KeyStore trustStore)

see getTrustManager(KeyStore, Class), matching any type

getTrustManager

public static <T extends javax.net.ssl.TrustManager> T getTrustManager(java.security.KeyStore trustStore,
                                                                       java.lang.Class<T> type)

returns the trust manager inferred from trustStore, matching the type (if not null); throws exception if there are none, or if there are multiple

getTrustManager

public static javax.net.ssl.X509TrustManager getTrustManager(java.security.cert.X509Certificate certificate)

getCanonicalImpl

public static java.security.cert.X509Certificate getCanonicalImpl(java.security.cert.X509Certificate inCert)

converts a certificate to the canonical implementation, commonly sun.security.x509.X509CertImpl, which is required in some places -- the Bouncy Castle X509 impl is not accepted (e.g. where certs are chained, passed to trust manager)

isCertificateAuthorizedBy

public static boolean isCertificateAuthorizedBy(java.security.cert.X509Certificate candidate,
                                                java.security.cert.X509Certificate authority)

isCertificateAuthorizedBy

public static boolean isCertificateAuthorizedBy(java.security.cert.X509Certificate candidate,
                                                java.security.cert.X509Certificate authority,
                                                boolean quiet)

getX500PrincipalWithCommonName

public static javax.security.auth.x500.X500Principal getX500PrincipalWithCommonName(java.lang.String commonName)