com.ibm.security.certclient

Class PkEeCertReqFactory

  1. java.lang.Object
  2. extended bycom.ibm.security.certclient.PkEeFactory
  3. extended bycom.ibm.security.certclient.PkEeCertReqFactory

  1. public final class PkEeCertReqFactory
  2. extends PkEeFactory
Produce an initial certificate request transaction. This requires an initial authentication key to be provided to allow the CA to check the validity of the request.

Field Summary

Fields inherited from class com.ibm.security.certclient.PkEeFactory
CA_DN, caDn, caPort, cmpEvntFmt, keystoreFilename, keystorePwd, keyStoreType, provider

Method Summary

Modifier and Type Method and Description
  1. static
  2. PkEeCertReqTransaction
newCertRequest(int keySize,java.lang.String subject,int numValidDays,boolean useRSA,boolean useShortSubjectKId,java.util.List<java.lang.String> subjectAltNames,java.util.List<java.lang.String> kUsage,java.util.List<java.lang.String> extkUsage,java.lang.String iaFile,java.lang.String revoPwd,java.lang.String dn)
Initialise a certificate request to the supplied CA.
  1. static
  2. PkEeCertReqTransaction
newCertRequest(int keySize,java.lang.String subject,int numValidDays,boolean useRSA,boolean useShortSubjectKId,java.util.List<java.lang.String> subjectAltNames,java.util.List<java.lang.String> kUsage,java.util.List<java.lang.String> extkUsage,java.lang.String iaFile,java.lang.String revoPwd,java.lang.String dn,java.security.KeyPair keyPair)
Initialise a certificate request to the supplied CA.
  1. static
  2. PkEeCertReqTransaction
newCertRequest(java.lang.String subject,java.lang.String iaFile,java.lang.String revoPwd,java.lang.String dn)
Initialises a certificate request to the supplied CA.
Methods inherited from class com.ibm.security.certclient.PkEeFactory
getCA_DN, getCaDn, getCaPort, getCmpFmt, getKeystoreFilename, getKeyStoreType, getProvider, setCA_DN, setCaDn, setCaPort, setKeystoreFilename, setKeystorePwd, setKeyStoreType, setProvider
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

newCertRequest

  1. public static PkEeCertReqTransaction newCertRequest( int keySize,
  2. java.lang.String subject,
  3. int numValidDays,
  4. boolean useRSA,
  5. boolean useShortSubjectKId,
  6. java.util.List<java.lang.String> subjectAltNames,
  7. java.util.List<java.lang.String> kUsage,
  8. java.util.List<java.lang.String> extkUsage,
  9. java.lang.String iaFile,
  10. java.lang.String revoPwd,
  11. java.lang.String dn)
  12. throws com.ibm.security.certclient.base.PkException
Initialise a certificate request to the supplied CA. The request is ready to action.
Parameters:
keySize - size of key.
subject - The Relative DN for the subject. It will be prepended to the value of parameter dn to create the subject DN. For example, String subject="cn=Test Group".
numValidDays - period of certificate validity. Will be measured from current date.
useRSA - if true create RSA key else create with DSA key
useShortSubjectKId - if true use short form of Subject Key Id else use long form
subjectAltNames - (optional)List of subject alternate names. Specify null to indicate that no value is being specified.
  • 0. email email address for the subject , e.g. newUser@us.ibm.com
  • 1. dnsName domain name server name. Name is not case sensitive. e.g host.domain
  • 2. uri universal resource identifier ,e.g http://www.tivoli.com, ftp://www.ibm.com/
  • 3. ipaddress ipaddress for the subject , e.g. 127.0.0.1
  • kUsage - (optional)List of Key Usage strings. Acceptable values are- "digital_signature" "non_repudiation" "key_encipherment" "data_encipherment" "encipher_only" "decipher_only"
    extkUsage - (optional)List of Extended Key Usage strings. Acceptable values are- "ServerAuth_Id" "ClientAuth_Id" "CodeSigning_Id" "EmailProtection_Id" "IPSecEndSystem_Id" "IPSecTunnel_Id" "IPSecUser_Id" "TimeStamping_Id"
    iaFile - initial authorisation file containing initial reference number and passphrase on consecutive lines
    revoPwd - password to be used when revoking this certificate after it has been signed
    dn - domain name for certificate request. For example, String dn="o=IBM,c=US". If null, value of PkEeFactory CA_DN will be used.
    Throws:
    com.ibm.security.certclient.base.PkException - Parameter error

    newCertRequest

    1. public static PkEeCertReqTransaction newCertRequest( int keySize,
    2. java.lang.String subject,
    3. int numValidDays,
    4. boolean useRSA,
    5. boolean useShortSubjectKId,
    6. java.util.List<java.lang.String> subjectAltNames,
    7. java.util.List<java.lang.String> kUsage,
    8. java.util.List<java.lang.String> extkUsage,
    9. java.lang.String iaFile,
    10. java.lang.String revoPwd,
    11. java.lang.String dn,
    12. java.security.KeyPair keyPair)
    13. throws com.ibm.security.certclient.base.PkException
    Initialise a certificate request to the supplied CA. The request is ready to action.
    Parameters:
    keySize - size of key. Not used if keyPair is provided.
    subject - The Relative DN for the subject. It will be prepended to the value of parameter dn to create the subject DN. For example, String subject="cn=Test Group".
    numValidDays - period of certificate validity. Will be measured from current date.
    useRSA - if true create RSA key else create with DSA key Not used if keyPair is provided.
    useShortSubjectKId - if true use short form of Subject Key Id else use long form
    subjectAltNames - (optional)List of subject alternate names. Specify null to indicate that no value is being specified.
  • 0. email email address for the subject , e.g. newUser@us.ibm.com
  • 1. dnsName domain name server name. Name is not case sensitive. e.g host.domain
  • 2. uri universal resource identifier ,e.g http://www.tivoli.com, ftp://www.ibm.com/
  • 3. ipaddress ipaddress for the subject , e.g. 127.0.0.1
  • kUsage - (optional)List of Key Usage strings. Acceptable values are- "digital_signature" "non_repudiation" "key_encipherment" "data_encipherment" "encipher_only" "decipher_only"
    extkUsage - (optional)List of Extended Key Usage strings. Acceptable values are- "ServerAuth_Id" "ClientAuth_Id" "CodeSigning_Id" "EmailProtection_Id" "IPSecEndSystem_Id" "IPSecTunnel_Id" "IPSecUser_Id" "TimeStamping_Id"
    iaFile - initial authorisation file containing initial reference number and passphrase on consecutive lines
    revoPwd - password to be used when revoking this certificate after it has been signed
    dn - domain name for certificate request. For example, String dn="o=IBM,c=US". If null, value of PkEeFactory CA_DN will be used.
    keyPair - keyPair to use for Public/Private Key
    Throws:
    com.ibm.security.certclient.base.PkException - Parameter error

    newCertRequest

    1. public static PkEeCertReqTransaction newCertRequest( java.lang.String subject,
    2. java.lang.String iaFile,
    3. java.lang.String revoPwd,
    4. java.lang.String dn)
    5. throws com.ibm.security.certclient.base.PkException
    Initialises a certificate request to the supplied CA. The request is ready to action but will have the following default values keySize = 1024 numValidDays = 365 keyType = RSA SubjectKeyId algorithm is RFC 3280 Long Form SubjectAlternateNames = none KeyUsage = none ExtendedKeyUsage = none
    Parameters:
    subject - The Relative DN for the subject. It will be prepended to the value of parameter dn to create the subject DN. For example, String subject="cn=Test Group".
    iaFile - initial authorisation file containing reference number and passphrase on consecutive lines
    revoPwd - password to be used when revoking this certificate after it has been signed
    dn - domain name for certificate request. For example, String dn="o=IBM,c=US". If null, value of PkEeFactory CA_DN will be used.
    Throws:
    com.ibm.security.certclient.base.PkException - Parameter error