Package org.conscrypt

Class OpenSSLX509Certificate

java.lang.Object

java.security.cert.Certificate

java.security.cert.X509Certificate

org.conscrypt.OpenSSLX509Certificate

All Implemented Interfaces:

Serializable, X509Extension

@Internal
public final class OpenSSLX509Certificate
extends X509Certificate

An implementation of X509Certificate based on BoringSSL.

See Also:

Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from class java.security.cert.Certificate

Certificate.CertificateRep

Method Summary

Modifier and Type	Method	Description
void	checkValidity()
void	checkValidity(Date date)
boolean	equals(Object other)
protected void	finalize()
static OpenSSLX509Certificate	fromCertificate(Certificate cert)
static List<OpenSSLX509Certificate>	fromPkcs7DerInputStream(InputStream is)
static List<OpenSSLX509Certificate>	fromPkcs7PemInputStream(InputStream is)
static OpenSSLX509Certificate	fromX509Der(byte[] encoded)
static OpenSSLX509Certificate	fromX509DerInputStream(InputStream is)
static OpenSSLX509Certificate	fromX509PemInputStream(InputStream is)
int	getBasicConstraints()
long	getContext()	Returns the raw pointer to the X509 context for use in JNI calls.
Set<String>	getCriticalExtensionOIDs()
byte[]	getEncoded()
List<String>	getExtendedKeyUsage()
byte[]	getExtensionValue(String oid)
Collection<List<?>>	getIssuerAlternativeNames()
Principal	getIssuerDN()
boolean[]	getIssuerUniqueID()
X500Principal	getIssuerX500Principal()
boolean[]	getKeyUsage()
Set<String>	getNonCriticalExtensionOIDs()
Date	getNotAfter()
Date	getNotBefore()
PublicKey	getPublicKey()
BigInteger	getSerialNumber()
String	getSigAlgName()
String	getSigAlgOID()
byte[]	getSigAlgParams()
byte[]	getSignature()
Collection<List<?>>	getSubjectAlternativeNames()
Principal	getSubjectDN()
boolean[]	getSubjectUniqueID()
X500Principal	getSubjectX500Principal()
byte[]	getTBSCertificate()
int	getVersion()
int	hashCode()
boolean	hasUnsupportedCriticalExtension()
String	toString()
void	verify(PublicKey key)
void	verify(PublicKey key, String sigProvider)
void	verify(PublicKey key, Provider sigProvider)
OpenSSLX509Certificate	withDeletedExtension(String oid)	Delete an extension.

Methods inherited from class java.security.cert.Certificate

getType, writeReplace

Methods inherited from class java.lang.Object

clone, getClass, notify, notifyAll, wait, wait, wait

Method Detail

fromX509DerInputStream

public static OpenSSLX509Certificate fromX509DerInputStream(InputStream is)
                                                     throws org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

Throws:

org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

fromX509Der

public static OpenSSLX509Certificate fromX509Der(byte[] encoded)
                                          throws CertificateEncodingException

Throws:

CertificateEncodingException

fromPkcs7DerInputStream

public static List<OpenSSLX509Certificate> fromPkcs7DerInputStream(InputStream is)
                                                            throws org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

Throws:

org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

fromX509PemInputStream

public static OpenSSLX509Certificate fromX509PemInputStream(InputStream is)
                                                     throws org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

Throws:

org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

fromPkcs7PemInputStream

public static List<OpenSSLX509Certificate> fromPkcs7PemInputStream(InputStream is)
                                                            throws org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

Throws:

org.conscrypt.OpenSSLX509CertificateFactory.ParsingException

fromCertificate

public static OpenSSLX509Certificate fromCertificate(Certificate cert)
                                              throws CertificateEncodingException

Throws:

CertificateEncodingException

getCriticalExtensionOIDs

public Set<String> getCriticalExtensionOIDs()

getExtensionValue

public byte[] getExtensionValue(String oid)

getNonCriticalExtensionOIDs

public Set<String> getNonCriticalExtensionOIDs()

hasUnsupportedCriticalExtension

public boolean hasUnsupportedCriticalExtension()

checkValidity

public void checkValidity()
                   throws CertificateExpiredException,
                          CertificateNotYetValidException

Specified by:

checkValidity in class X509Certificate

Throws:

CertificateExpiredException

CertificateNotYetValidException

checkValidity

public void checkValidity(Date date)
                   throws CertificateExpiredException,
                          CertificateNotYetValidException

Specified by:

checkValidity in class X509Certificate

Throws:

CertificateExpiredException

CertificateNotYetValidException

getVersion

public int getVersion()

Specified by:

getVersion in class X509Certificate

getSerialNumber

public BigInteger getSerialNumber()

Specified by:

getSerialNumber in class X509Certificate

getIssuerDN

public Principal getIssuerDN()

Specified by:

getIssuerDN in class X509Certificate

getSubjectDN

public Principal getSubjectDN()

Specified by:

getSubjectDN in class X509Certificate

getNotBefore

public Date getNotBefore()

Specified by:

getNotBefore in class X509Certificate

getNotAfter

public Date getNotAfter()

Specified by:

getNotAfter in class X509Certificate

getTBSCertificate

public byte[] getTBSCertificate()
                         throws CertificateEncodingException

Specified by:

getTBSCertificate in class X509Certificate

Throws:

CertificateEncodingException

getSignature

public byte[] getSignature()

Specified by:

getSignature in class X509Certificate

getSigAlgName

public String getSigAlgName()

Specified by:

getSigAlgName in class X509Certificate

getSigAlgOID

public String getSigAlgOID()

Specified by:

getSigAlgOID in class X509Certificate

getSigAlgParams

public byte[] getSigAlgParams()

Specified by:

getSigAlgParams in class X509Certificate

getIssuerUniqueID

public boolean[] getIssuerUniqueID()

Specified by:

getIssuerUniqueID in class X509Certificate

getSubjectUniqueID

public boolean[] getSubjectUniqueID()

Specified by:

getSubjectUniqueID in class X509Certificate

getKeyUsage

public boolean[] getKeyUsage()

Specified by:

getKeyUsage in class X509Certificate

getBasicConstraints

public int getBasicConstraints()

Specified by:

getBasicConstraints in class X509Certificate

getEncoded

public byte[] getEncoded()
                  throws CertificateEncodingException

Specified by:

getEncoded in class Certificate

Throws:

CertificateEncodingException

verify

public void verify(PublicKey key)
            throws CertificateException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException

Specified by:

verify in class Certificate

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

NoSuchProviderException

SignatureException

verify

public void verify(PublicKey key,
                   String sigProvider)
            throws CertificateException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException

Specified by:

verify in class Certificate

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

NoSuchProviderException

SignatureException

verify

public void verify(PublicKey key,
                   Provider sigProvider)
            throws CertificateException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   SignatureException

Overrides:

verify in class X509Certificate

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

toString

public String toString()

Specified by:

toString in class Certificate

getPublicKey

public PublicKey getPublicKey()

Specified by:

getPublicKey in class Certificate

getIssuerX500Principal

public X500Principal getIssuerX500Principal()

Overrides:

getIssuerX500Principal in class X509Certificate

getSubjectX500Principal

public X500Principal getSubjectX500Principal()

Overrides:

getSubjectX500Principal in class X509Certificate

getExtendedKeyUsage

public List<String> getExtendedKeyUsage()
                                 throws CertificateParsingException

Overrides:

getExtendedKeyUsage in class X509Certificate

Throws:

CertificateParsingException

getSubjectAlternativeNames

public Collection<List<?>> getSubjectAlternativeNames()
                                               throws CertificateParsingException

Overrides:

getSubjectAlternativeNames in class X509Certificate

Throws:

CertificateParsingException

getIssuerAlternativeNames

public Collection<List<?>> getIssuerAlternativeNames()
                                              throws CertificateParsingException

Overrides:

getIssuerAlternativeNames in class X509Certificate

Throws:

CertificateParsingException

equals

public boolean equals(Object other)

Overrides:

equals in class Certificate

hashCode

public int hashCode()

Overrides:

hashCode in class Certificate

getContext

public long getContext()

Returns the raw pointer to the X509 context for use in JNI calls. The life cycle of this native pointer is managed by the OpenSSLX509Certificate instance and must not be destroyed or freed by users of this API.

withDeletedExtension

public OpenSSLX509Certificate withDeletedExtension(String oid)

Delete an extension. A modified copy of the certificate is returned. The original object is unchanged. If the extension is not present, an unmodified copy is returned.

finalize

protected void finalize()
                 throws Throwable

Overrides:

finalize in class Object

Throws:

Throwable