Package org.mozilla.jss.netscape.security.pkcs

Class PKCS12Util

java.lang.Object

org.mozilla.jss.netscape.security.pkcs.PKCS12Util

public class PKCS12Util
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
(package private) PBEAlgorithm	certEncryption
static final PBEAlgorithm	DEFAULT_CERT_ENCRYPTION
static final String	DEFAULT_CERT_ENCRYPTION_NAME
static final PBEAlgorithm	DEFAULT_KEY_ENCRYPTION
static final String	DEFAULT_KEY_ENCRYPTION_NAME
(package private) PBEAlgorithm	keyEncryption
private static org.slf4j.Logger	logger
static final String	NO_ENCRYPTION
(package private) SecureRandom	random
static final List<PBEAlgorithm>	SUPPORTED_CERT_ENCRYPTIONS
static final List<PBEAlgorithm>	SUPPORTED_KEY_ENCRYPTIONS
(package private) boolean	trustFlagsEnabled

Constructor Summary

Constructors

Constructor	Description
PKCS12Util()

Method Summary

Modifier and Type	Method	Description
void	addCertBag(PKCS12CertInfo certInfo, SEQUENCE safeContents)
void	addKeyBag(PKCS12KeyInfo keyInfo, Password password, SEQUENCE encSafeContents)	Add a private key to the PKCS #12 object.
ASN1Value	create_EPKI_with_PBE_PKCS5_PBES2(CryptoToken token, PrivateKey privateKey, Password password)
ASN1Value	create_EPKI_with_PBE_SHA1_DES3_CBC(CryptoToken token, PrivateKey privateKey, Password password)
(package private) SET	createCertBagAttrs(PKCS12CertInfo certInfo)
PKCS12CertInfo	createCertInfoFromNSS(X509Certificate cert)
PKCS12CertInfo	createCertInfoFromNSS(X509Certificate cert, String friendlyName)
(package private) SET	createKeyBagAttrs(PKCS12KeyInfo keyInfo)
PKCS12KeyInfo	createKeyInfoFromNSS(X509Certificate cert, PrivateKey privateKey)
PKCS12KeyInfo	createKeyInfoFromNSS(X509Certificate cert, PrivateKey privateKey, String friendlyName)
(package private) BigInteger	createLocalID(byte[] bytes)
(package private) BigInteger	createLocalID(X509Certificate cert)
PFX	generatePFX(PKCS12 pkcs12, Password password)
PKCS12CertInfo	getCertBySubjectDN(PKCS12 pkcs12, String subjectDN)
PBEAlgorithm	getCertEncryption()
PKCS12CertInfo	getCertInfo(SafeBag bag)
void	getCertInfos(PKCS12 pkcs12, PFX pfx, Password password)
PBEAlgorithm	getKeyEncryption()
PKCS12KeyInfo	getKeyInfo(SafeBag bag, Password password)	Loads key bags (for IMPORT and other operations on existing PKCS #12 files).
void	getKeyInfos(PKCS12 pkcs12, PFX pfx, Password password)
PrivateKey.Type	getPrivateKeyType(PublicKey publicKey)
String	getTrustFlags(X509Certificate cert)	Deprecated. Use PK11Cert.getTrustFlags() instead.
void	importKey(PKCS12 pkcs12, Password password, String nickname, PKCS12KeyInfo keyInfo)
boolean	isTrustFlagsEnabled()
void	loadCertFromNSS(PKCS12 pkcs12, String nickname, boolean includeKey, boolean includeChain)
void	loadCertFromNSS(PKCS12 pkcs12, String nickname, boolean includeKey, boolean includeChain, String friendlyName)
void	loadCertFromNSS(PKCS12 pkcs12, X509Certificate cert, boolean includeKey, boolean includeChain)
void	loadCertFromNSS(PKCS12 pkcs12, X509Certificate cert, boolean includeKey, boolean includeChain, String friendlyName)
PKCS12	loadFromByteArray(byte[] b, Password password)
PKCS12	loadFromFile(String filename)
PKCS12	loadFromFile(String filename, Password password)
void	loadFromNSS(PKCS12 pkcs12)
void	loadFromNSS(PKCS12 pkcs12, boolean includeKey, boolean includeChain)
void	setCertEncryption(String name)
void	setCertEncryption(PBEAlgorithm algorithm)
void	setKeyEncryption(String name)
void	setKeyEncryption(PBEAlgorithm algorithm)
void	setTrustFlags(X509Certificate cert, String trustFlags)	Deprecated. Use PK11Cert.setTrustFlags() instead.
void	setTrustFlagsEnabled(boolean trustFlagsEnabled)
void	storeCertIntoNSS(PKCS12 pkcs12, Password password, String nickname, boolean overwrite)
void	storeCertIntoNSS(PKCS12 pkcs12, Password password, PKCS12CertInfo certInfo, boolean overwrite)	Store a certificate (and key, if present) in NSSDB.
void	storeIntoFile(PKCS12 pkcs12, String filename, Password password)
void	storeIntoNSS(PKCS12 pkcs12, Password password, boolean overwrite)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

private static org.slf4j.Logger logger

NO_ENCRYPTION

public static final String NO_ENCRYPTION

See Also:

• Constant Field Values

SUPPORTED_CERT_ENCRYPTIONS

public static final List<PBEAlgorithm> SUPPORTED_CERT_ENCRYPTIONS

SUPPORTED_KEY_ENCRYPTIONS

public static final List<PBEAlgorithm> SUPPORTED_KEY_ENCRYPTIONS

DEFAULT_CERT_ENCRYPTION

public static final PBEAlgorithm DEFAULT_CERT_ENCRYPTION

DEFAULT_CERT_ENCRYPTION_NAME

public static final String DEFAULT_CERT_ENCRYPTION_NAME

See Also:

• Constant Field Values

DEFAULT_KEY_ENCRYPTION

public static final PBEAlgorithm DEFAULT_KEY_ENCRYPTION

DEFAULT_KEY_ENCRYPTION_NAME

public static final String DEFAULT_KEY_ENCRYPTION_NAME

random

SecureRandom random

certEncryption

PBEAlgorithm certEncryption

keyEncryption

PBEAlgorithm keyEncryption

trustFlagsEnabled

boolean trustFlagsEnabled

Constructor Details

PKCS12Util

public PKCS12Util()
           throws Exception

Throws:

Exception

Method Details

setCertEncryption

public void setCertEncryption(String name)
                       throws Exception

Throws:

Exception

setCertEncryption

public void setCertEncryption(PBEAlgorithm algorithm)
                       throws Exception

Throws:

Exception

getCertEncryption

public PBEAlgorithm getCertEncryption()

setKeyEncryption

public void setKeyEncryption(String name)
                      throws Exception

Throws:

Exception

setKeyEncryption

public void setKeyEncryption(PBEAlgorithm algorithm)
                      throws Exception

Throws:

Exception

getKeyEncryption

public PBEAlgorithm getKeyEncryption()

isTrustFlagsEnabled

public boolean isTrustFlagsEnabled()

setTrustFlagsEnabled

public void setTrustFlagsEnabled(boolean trustFlagsEnabled)

getTrustFlags

@Deprecated
public String getTrustFlags(X509Certificate cert)

Deprecated.

Use PK11Cert.getTrustFlags() instead.

setTrustFlags

@Deprecated
public void setTrustFlags(X509Certificate cert,
 String trustFlags)
                   throws Exception

Deprecated.

Use PK11Cert.setTrustFlags() instead.

Throws:

Exception

addKeyBag

public void addKeyBag(PKCS12KeyInfo keyInfo,
 Password password,
 SEQUENCE encSafeContents)
               throws Exception

Add a private key to the PKCS #12 object. The PKCS12KeyInfo object received comes about in two different scenarios: - The private key could be in encrypted byte[] form (e.g. when we have merely loaded a PKCS #12 file for inspection or e.g. to delete a certificate and its associated key). In this case we simply re-use this encrypted private key info byte[]. - The private key could be a be an NSS PrivateKey handle. In this case we must export the PrivateKey from the token to obtain the EncryptedPrivateKeyInfo. The common final step is to add the encrypted private key data to a "Shrouded Key Bag" to the PKCS #12 object. Unencrypted key material is never seen.

Throws:

Exception

create_EPKI_with_PBE_SHA1_DES3_CBC

public ASN1Value create_EPKI_with_PBE_SHA1_DES3_CBC(CryptoToken token,
 PrivateKey privateKey,
 Password password)
                                             throws Exception

Throws:

Exception

create_EPKI_with_PBE_PKCS5_PBES2

public ASN1Value create_EPKI_with_PBE_PKCS5_PBES2(CryptoToken token,
 PrivateKey privateKey,
 Password password)
                                           throws Exception

Throws:

Exception

addCertBag

public void addCertBag(PKCS12CertInfo certInfo,
 SEQUENCE safeContents)
                throws Exception

Throws:

Exception

createLocalID

BigInteger createLocalID(X509Certificate cert)
                  throws Exception

Throws:

Exception

createLocalID

BigInteger createLocalID(byte[] bytes)
                  throws Exception

Throws:

Exception

createKeyBagAttrs

SET createKeyBagAttrs(PKCS12KeyInfo keyInfo)
               throws Exception

Throws:

Exception

createCertBagAttrs

SET createCertBagAttrs(PKCS12CertInfo certInfo)
                throws Exception

Throws:

Exception

loadFromNSS

public void loadFromNSS(PKCS12 pkcs12)
                 throws Exception

Throws:

Exception

loadFromNSS

public void loadFromNSS(PKCS12 pkcs12,
 boolean includeKey,
 boolean includeChain)
                 throws Exception

Throws:

Exception

loadCertFromNSS

public void loadCertFromNSS(PKCS12 pkcs12,
 String nickname,
 boolean includeKey,
 boolean includeChain)
                     throws Exception

Throws:

Exception

loadCertFromNSS

public void loadCertFromNSS(PKCS12 pkcs12,
 String nickname,
 boolean includeKey,
 boolean includeChain,
 String friendlyName)
                     throws Exception

Throws:

Exception

loadCertFromNSS

public void loadCertFromNSS(PKCS12 pkcs12,
 X509Certificate cert,
 boolean includeKey,
 boolean includeChain)
                     throws Exception

Throws:

Exception

loadCertFromNSS

public void loadCertFromNSS(PKCS12 pkcs12,
 X509Certificate cert,
 boolean includeKey,
 boolean includeChain,
 String friendlyName)
                     throws Exception

Throws:

Exception

createCertInfoFromNSS

public PKCS12CertInfo createCertInfoFromNSS(X509Certificate cert)
                                     throws Exception

Throws:

Exception

createCertInfoFromNSS

public PKCS12CertInfo createCertInfoFromNSS(X509Certificate cert,
 String friendlyName)
                                     throws Exception

Throws:

Exception

createKeyInfoFromNSS

public PKCS12KeyInfo createKeyInfoFromNSS(X509Certificate cert,
 PrivateKey privateKey)
                                   throws Exception

Throws:

Exception

createKeyInfoFromNSS

public PKCS12KeyInfo createKeyInfoFromNSS(X509Certificate cert,
 PrivateKey privateKey,
 String friendlyName)
                                   throws Exception

Throws:

Exception

generatePFX

public PFX generatePFX(PKCS12 pkcs12,
 Password password)
                throws Exception

Throws:

Exception

storeIntoFile

public void storeIntoFile(PKCS12 pkcs12,
 String filename,
 Password password)
                   throws Exception

Throws:

Exception

getKeyInfo

public PKCS12KeyInfo getKeyInfo(SafeBag bag,
 Password password)
                         throws Exception

Loads key bags (for IMPORT and other operations on existing PKCS #12 files). Does not decrypt EncryptedPrivateKeyInfo values, but stores them in PKCS12KeyInfo objects for possible later use.

Throws:

Exception

getCertInfo

public PKCS12CertInfo getCertInfo(SafeBag bag)
                           throws Exception

Throws:

Exception

getKeyInfos

public void getKeyInfos(PKCS12 pkcs12,
 PFX pfx,
 Password password)
                 throws Exception

Throws:

Exception

getCertInfos

public void getCertInfos(PKCS12 pkcs12,
 PFX pfx,
 Password password)
                  throws Exception

Throws:

Exception

loadFromFile

public PKCS12 loadFromFile(String filename,
 Password password)
                    throws Exception

Throws:

Exception

loadFromByteArray

public PKCS12 loadFromByteArray(byte[] b,
 Password password)
                         throws Exception

Throws:

Exception

loadFromFile

public PKCS12 loadFromFile(String filename)
                    throws Exception

Throws:

Exception

getPrivateKeyType

public PrivateKey.Type getPrivateKeyType(PublicKey publicKey)

getCertBySubjectDN

public PKCS12CertInfo getCertBySubjectDN(PKCS12 pkcs12,
 String subjectDN)
                                  throws CertificateException

Throws:

CertificateException

importKey

public void importKey(PKCS12 pkcs12,
 Password password,
 String nickname,
 PKCS12KeyInfo keyInfo)
               throws Exception

Throws:

Exception

storeCertIntoNSS

public void storeCertIntoNSS(PKCS12 pkcs12,
 Password password,
 PKCS12CertInfo certInfo,
 boolean overwrite)
                      throws Exception

Store a certificate (and key, if present) in NSSDB.

Throws:

Exception

storeCertIntoNSS

public void storeCertIntoNSS(PKCS12 pkcs12,
 Password password,
 String nickname,
 boolean overwrite)
                      throws Exception

Throws:

Exception

storeIntoNSS

public void storeIntoNSS(PKCS12 pkcs12,
 Password password,
 boolean overwrite)
                  throws Exception

Throws:

Exception