public class CertificateChainUtil
extends java.lang.Object
| Modifier and Type | Field and Description |
|---|---|
static boolean |
ALLOW_LOG_SELF_SIGN_TESTS |
| Modifier and Type | Method and Description |
|---|---|
static java.util.List<java.security.cert.X509Certificate> |
buildChainFor(java.security.KeyPair keypair,
java.util.Collection<java.security.cert.X509Certificate> certs) |
static java.util.List<java.security.cert.X509Certificate> |
buildChainFor(java.security.PublicKey key,
java.util.Collection<java.security.cert.X509Certificate> certs) |
static java.security.cert.X509Certificate |
getCertificateFor(java.security.PublicKey publicKey,
java.util.Collection<java.security.cert.X509Certificate> certs) |
static java.security.cert.X509Certificate |
getIssuer(java.security.cert.X509Certificate subject,
java.util.Collection<java.security.cert.X509Certificate> certs) |
static javax.security.auth.x500.X500Principal[] |
getIssuerDNsFromChain(java.util.List<java.security.cert.X509Certificate> chain)
Extracts the DNs of the issuers from a certificate chain.
|
static javax.security.auth.x500.X500Principal[] |
getPrincipals(java.util.List<java.security.cert.X509Certificate> chain) |
static javax.security.auth.x500.X500Principal |
getSubjectDNFromChain(java.util.List<java.security.cert.X509Certificate> chain)
Extracts the Subject: the final certificate in a chain
|
static boolean |
isSelfSigned(java.security.cert.X509Certificate certificate)
Determines if a certificate is a self signed certificate
|
static boolean |
isSignedBy(java.security.cert.X509Certificate subject,
java.security.PublicKey signer) |
static java.util.List<java.security.cert.X509Certificate> |
normaliseChain(java.util.List<java.security.cert.X509Certificate> chain)
Take a chain and return a (Read-only) chain with the root certificate as the first entry
|
static java.util.List<java.security.cert.X509Certificate> |
toRootFirst(java.util.List<java.security.cert.X509Certificate> chain)
Take a chain and return a (Read-only) chain with the root certificate as the first entry
|
static java.util.List<java.security.cert.X509Certificate> |
toRootLast(java.util.List<java.security.cert.X509Certificate> chain)
Take a chain and return a (Read-only) chain with the root certificate as the last entry
|
static void |
verifyChain(java.util.List<java.security.cert.X509Certificate> chain)
Verifies that a certificate chain is valid
|
public static final boolean ALLOW_LOG_SELF_SIGN_TESTS
public static javax.security.auth.x500.X500Principal[] getIssuerDNsFromChain(java.util.List<java.security.cert.X509Certificate> chain)
chain - a normalised chainpublic static javax.security.auth.x500.X500Principal getSubjectDNFromChain(java.util.List<java.security.cert.X509Certificate> chain)
chain - a normalised chainjava.lang.IllegalArgumentException - if the chain is null or emptypublic static boolean isSelfSigned(java.security.cert.X509Certificate certificate)
certificate - the certificate to testpublic static boolean isSignedBy(java.security.cert.X509Certificate subject,
java.security.PublicKey signer)
public static java.util.List<java.security.cert.X509Certificate> buildChainFor(java.security.PublicKey key,
java.util.Collection<java.security.cert.X509Certificate> certs)
public static java.util.List<java.security.cert.X509Certificate> buildChainFor(java.security.KeyPair keypair,
java.util.Collection<java.security.cert.X509Certificate> certs)
public static javax.security.auth.x500.X500Principal[] getPrincipals(java.util.List<java.security.cert.X509Certificate> chain)
public static java.security.cert.X509Certificate getCertificateFor(java.security.PublicKey publicKey,
java.util.Collection<java.security.cert.X509Certificate> certs)
public static java.security.cert.X509Certificate getIssuer(java.security.cert.X509Certificate subject,
java.util.Collection<java.security.cert.X509Certificate> certs)
public static java.util.List<java.security.cert.X509Certificate> normaliseChain(java.util.List<java.security.cert.X509Certificate> chain)
chain - a chain with the certificates in order (either leading away from root or leading towards root)java.lang.IllegalArgumentException - if the chain is null or emptypublic static java.util.List<java.security.cert.X509Certificate> toRootFirst(java.util.List<java.security.cert.X509Certificate> chain)
chain - a chain with the certificates in order (either leading away from root or leading towards root)java.lang.IllegalArgumentException - if the chain is null or emptypublic static java.util.List<java.security.cert.X509Certificate> toRootLast(java.util.List<java.security.cert.X509Certificate> chain)
chain - a chain with the certificates in order (either leading away from root or leading towards root)java.lang.IllegalArgumentException - if the chain is null or emptypublic static void verifyChain(java.util.List<java.security.cert.X509Certificate> chain)
chain - a certificate chain with the root certificate firstjava.lang.IllegalArgumentException - if the chain is invalid, null or emptyCopyright © 2014. All Rights Reserved.