public class CertificateCreator extends Object
| Modifier and Type | Field and Description |
|---|---|
static String |
KEYGEN_ALGO
The default key generation algorithm for this package is RSA.
|
static String |
OID_AUTHORITY_INFO_ACCESS
X.509 OID for Authority Information Access - Omitted when duplicating a cert by default.
|
static String |
OID_AUTHORITY_KEY_IDENTIFIER
X.509 OID for Subject Authority Key Identifier - Replaced when duplicating a cert.
|
static String |
OID_CRL_DISTRIBUTION_POINT
X.509 OID for Certificate Revocation List Distribution Point - Omitted when duplicating a cert by default.
|
static String |
OID_ID_AD_CAISSUERS
X.509 OID for Additional CA Issuers for AIA - Omitted when duplicating a cert by default.
|
static String |
OID_ISSUER_ALTERNATIVE_NAME
X.509 OID for Issuer Alternative Name - Omitted when duplicating a cert by default.
|
static String |
OID_ISSUER_ALTERNATIVE_NAME_2
X.509 OID for Issuer Alternative Name 2 - Omitted when duplicating a cert by default.
|
static String |
OID_SUBJECT_KEY_IDENTIFIER
X.509 OID for Subject Key Identifier Extension - Replaced when duplicating a cert.
|
static String |
SIGN_ALGO
The default sign algorithm for this package is SHA1 with RSA.
|
| Constructor and Description |
|---|
CertificateCreator() |
| Modifier and Type | Method and Description |
|---|---|
static X509Certificate |
createTypicalMasterCert(KeyPair keyPair)
Creates a typical Certification Authority (CA) certificate.
|
static X509Certificate |
generateStdSSLServerCertificate(PublicKey newPubKey,
X509Certificate caCert,
PrivateKey caPrivateKey,
String subject)
Utility method for generating a "standard" server certificate.
|
static X509Certificate |
mitmDuplicateCertificate(X509Certificate originalCert,
PublicKey newPubKey,
X509Certificate caCert,
PrivateKey caPrivateKey)
Convenience method for the most common case of certificate duplication.
|
static X509Certificate |
mitmDuplicateCertificate(X509Certificate originalCert,
PublicKey newPubKey,
X509Certificate caCert,
PrivateKey caPrivateKey,
Set<String> extensionOidsNotToCopy)
This method creates an X509v3 certificate based on an an existing certificate.
|
public static final String KEYGEN_ALGO
public static final String SIGN_ALGO
public static final String OID_SUBJECT_KEY_IDENTIFIER
public static final String OID_AUTHORITY_KEY_IDENTIFIER
public static final String OID_ISSUER_ALTERNATIVE_NAME
public static final String OID_ISSUER_ALTERNATIVE_NAME_2
public static final String OID_CRL_DISTRIBUTION_POINT
public static final String OID_AUTHORITY_INFO_ACCESS
public static final String OID_ID_AD_CAISSUERS
public static X509Certificate generateStdSSLServerCertificate(PublicKey newPubKey, X509Certificate caCert, PrivateKey caPrivateKey, String subject) throws CertificateParsingException, SignatureException, InvalidKeyException, CertificateExpiredException, CertificateNotYetValidException, CertificateException, NoSuchAlgorithmException, NoSuchProviderException
newPubKey - caCert - caPrivateKey - hostname - CertificateParsingExceptionSignatureExceptionInvalidKeyExceptionCertificateExpiredExceptionCertificateNotYetValidExceptionCertificateExceptionNoSuchAlgorithmExceptionNoSuchProviderExceptionpublic static X509Certificate mitmDuplicateCertificate(X509Certificate originalCert, PublicKey newPubKey, X509Certificate caCert, PrivateKey caPrivateKey, Set<String> extensionOidsNotToCopy) throws CertificateParsingException, SignatureException, InvalidKeyException, CertificateException, NoSuchAlgorithmException, NoSuchProviderException
originalCert - The original certificate to duplicate.newPubKey - The new public key for the MITM certificate.caCert - The certificate of the signing authority fot the MITM certificate.caPrivateKey - The private key of the signing authority.extensionOidsNotToCopy - An optional list of certificate extension OIDs not to copy to the MITM certificate.CertificateParsingExceptionSignatureExceptionInvalidKeyExceptionCertificateExpiredExceptionCertificateNotYetValidExceptionCertificateExceptionNoSuchAlgorithmExceptionNoSuchProviderExceptionpublic static X509Certificate mitmDuplicateCertificate(X509Certificate originalCert, PublicKey newPubKey, X509Certificate caCert, PrivateKey caPrivateKey) throws CertificateParsingException, SignatureException, InvalidKeyException, CertificateExpiredException, CertificateNotYetValidException, CertificateException, NoSuchAlgorithmException, NoSuchProviderException
originalCert - newPubKey - caCert - caPrivateKey - CertificateParsingExceptionSignatureExceptionInvalidKeyExceptionCertificateExpiredExceptionCertificateNotYetValidExceptionCertificateExceptionNoSuchAlgorithmExceptionNoSuchProviderExceptionpublic static X509Certificate createTypicalMasterCert(KeyPair keyPair) throws SignatureException, InvalidKeyException, SecurityException, CertificateException, NoSuchAlgorithmException, NoSuchProviderException
keyPair - SecurityExceptionInvalidKeyExceptionNoSuchProviderExceptionNoSuchAlgorithmExceptionCertificateExceptionSignatureExceptionCopyright © 2015. All Rights Reserved.