org.apache.knox.gateway.util

Class X509CertificateUtil

java.lang.Object

org.apache.knox.gateway.util.X509CertificateUtil

public class X509CertificateUtil
extends Object

Constructor Summary

Constructors

Constructor and Description
X509CertificateUtil()

Method Summary

Modifier and Type	Method and Description
static X509Certificate	generateCertificate(String dn, KeyPair pair, int days, String algorithm) Create a self-signed X.509 Certificate
static boolean	isSelfSignedCertificate(Certificate certificate) Tests the X509 certificate to see if it was self-signed.
static void	writeCertificatesToJks(Certificate[] certs, File file, String keystorePassword)
static void	writeCertificateToFile(Certificate cert, File file)
static void	writeCertificateToJceks(Certificate cert, File file)
static void	writeCertificateToJks(Certificate cert, File file)
static void	writeCertificateToJks(Certificate cert, File file, String keystorePassword)
static void	writeCertificateToPkcs12(Certificate cert, File file)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509CertificateUtil

public X509CertificateUtil()

Method Detail

generateCertificate

public static X509Certificate generateCertificate(String dn,
                                                  KeyPair pair,
                                                  int days,
                                                  String algorithm)

Create a self-signed X.509 Certificate

Parameters:

dn - the X.509 Distinguished Name, eg "CN=Test, L=London, C=GB"

pair - the KeyPair

days - how many days from now the Certificate is valid for

algorithm - the signing algorithm, eg "SHA1withRSA"

Returns:

self-signed X.509 certificate

writeCertificateToFile

public static void writeCertificateToFile(Certificate cert,
                                          File file)
                                   throws CertificateEncodingException,
                                          IOException

Throws:

CertificateEncodingException

IOException

writeCertificateToJks

public static void writeCertificateToJks(Certificate cert,
                                         File file)
                                  throws IOException,
                                         KeyStoreException,
                                         NoSuchAlgorithmException,
                                         CertificateException

Throws:

IOException

KeyStoreException

NoSuchAlgorithmException

CertificateException

writeCertificateToJks

public static void writeCertificateToJks(Certificate cert,
                                         File file,
                                         String keystorePassword)
                                  throws IOException,
                                         KeyStoreException,
                                         NoSuchAlgorithmException,
                                         CertificateException

Throws:

IOException

KeyStoreException

NoSuchAlgorithmException

CertificateException

writeCertificatesToJks

public static void writeCertificatesToJks(Certificate[] certs,
                                          File file,
                                          String keystorePassword)
                                   throws IOException,
                                          KeyStoreException,
                                          NoSuchAlgorithmException,
                                          CertificateException

Throws:

IOException

KeyStoreException

NoSuchAlgorithmException

CertificateException

writeCertificateToJceks

public static void writeCertificateToJceks(Certificate cert,
                                           File file)
                                    throws IOException,
                                           KeyStoreException,
                                           NoSuchAlgorithmException,
                                           CertificateException

Throws:

IOException

KeyStoreException

NoSuchAlgorithmException

CertificateException

writeCertificateToPkcs12

public static void writeCertificateToPkcs12(Certificate cert,
                                            File file)
                                     throws IOException,
                                            KeyStoreException,
                                            NoSuchAlgorithmException,
                                            CertificateException

Throws:

IOException

KeyStoreException

NoSuchAlgorithmException

CertificateException

isSelfSignedCertificate

public static boolean isSelfSignedCertificate(Certificate certificate)

Tests the X509 certificate to see if it was self-signed.

The certificate is determined to be self-signed if the subject DN is the same as the issuer DN

Parameters:

certificate - the X509Certificate to test

Returns:

true if the X509 certficate is self-signed; otherwise false