com.ibm.security.certclient
Class PkEeCertReqFactory
- java.lang.Object
com.ibm.security.certclient.PkEeFactory
com.ibm.security.certclient.PkEeCertReqFactory
- public final class PkEeCertReqFactory
- extends PkEeFactory
Field Summary
Fields inherited from class com.ibm.security.certclient.PkEeFactory |
---|
CA_DN, caDn, caPort, cmpEvntFmt, keystoreFilename, keystorePwd, keyStoreType, provider |
Method Summary
Modifier and Type | Method and Description |
---|---|
|
newCertRequest(int keySize,java.lang.String subject,int numValidDays,boolean useRSA,boolean useShortSubjectKId,java.util.List<java.lang.String> subjectAltNames,java.util.List<java.lang.String> kUsage,java.util.List<java.lang.String> extkUsage,java.lang.String iaFile,java.lang.String revoPwd,java.lang.String dn)
Initialise a certificate request to the supplied CA.
|
|
newCertRequest(int keySize,java.lang.String subject,int numValidDays,boolean useRSA,boolean useShortSubjectKId,java.util.List<java.lang.String> subjectAltNames,java.util.List<java.lang.String> kUsage,java.util.List<java.lang.String> extkUsage,java.lang.String iaFile,java.lang.String revoPwd,java.lang.String dn,java.security.KeyPair keyPair)
Initialise a certificate request to the supplied CA.
|
|
newCertRequest(java.lang.String subject,java.lang.String iaFile,java.lang.String revoPwd,java.lang.String dn)
Initialises a certificate request to the supplied CA.
|
Methods inherited from class com.ibm.security.certclient.PkEeFactory |
---|
getCA_DN, getCaDn, getCaPort, getCmpFmt, getKeystoreFilename, getKeyStoreType, getProvider, setCA_DN, setCaDn, setCaPort, setKeystoreFilename, setKeystorePwd, setKeyStoreType, setProvider |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Method Detail
newCertRequest
- public static PkEeCertReqTransaction newCertRequest( int keySize,
- java.lang.String subject,
- int numValidDays,
- boolean useRSA,
- boolean useShortSubjectKId,
- java.util.List<java.lang.String> subjectAltNames,
- java.util.List<java.lang.String> kUsage,
- java.util.List<java.lang.String> extkUsage,
- java.lang.String iaFile,
- java.lang.String revoPwd,
- java.lang.String dn)
- throws com.ibm.security.certclient.base.PkException
Initialise a certificate request to the supplied CA. The request
is ready to action.
Parameters:
keySize
- size of key. subject
- The Relative DN for the subject. It will be prepended to
the value of parameter dn to create the subject DN. For example, String subject="cn=Test Group". numValidDays
- period of certificate validity. Will be measured from current
date. useRSA
- if true create RSA key else create with DSA key useShortSubjectKId
- if true use short form of Subject Key Id else use long form subjectAltNames
- (optional)List of subject alternate names. Specify null to indicate that no value is being specified.
kUsage
- (optional)List of Key Usage strings. Acceptable values are-
"digital_signature"
"non_repudiation"
"key_encipherment"
"data_encipherment"
"encipher_only"
"decipher_only" extkUsage
- (optional)List of Extended Key Usage strings. Acceptable values are-
"ServerAuth_Id"
"ClientAuth_Id"
"CodeSigning_Id"
"EmailProtection_Id"
"IPSecEndSystem_Id"
"IPSecTunnel_Id"
"IPSecUser_Id"
"TimeStamping_Id" iaFile
- initial authorisation file containing initial reference number and passphrase on consecutive lines revoPwd
- password to be used when revoking this certificate after it has been signed dn
- domain name for certificate request. For example, String dn="o=IBM,c=US".
If null, value of PkEeFactory CA_DN will be used. Throws:
com.ibm.security.certclient.base.PkException
- Parameter error newCertRequest
- public static PkEeCertReqTransaction newCertRequest( int keySize,
- java.lang.String subject,
- int numValidDays,
- boolean useRSA,
- boolean useShortSubjectKId,
- java.util.List<java.lang.String> subjectAltNames,
- java.util.List<java.lang.String> kUsage,
- java.util.List<java.lang.String> extkUsage,
- java.lang.String iaFile,
- java.lang.String revoPwd,
- java.lang.String dn,
- java.security.KeyPair keyPair)
- throws com.ibm.security.certclient.base.PkException
Initialise a certificate request to the supplied CA. The request
is ready to action.
Parameters:
keySize
- size of key. Not used if keyPair is provided. subject
- The Relative DN for the subject. It will be prepended to
the value of parameter dn to create the subject DN. For example, String subject="cn=Test Group". numValidDays
- period of certificate validity. Will be measured from current
date. useRSA
- if true create RSA key else create with DSA key
Not used if keyPair is provided. useShortSubjectKId
- if true use short form of Subject Key Id else use long form subjectAltNames
- (optional)List of subject alternate names. Specify null to indicate that no value is being specified.
kUsage
- (optional)List of Key Usage strings. Acceptable values are-
"digital_signature"
"non_repudiation"
"key_encipherment"
"data_encipherment"
"encipher_only"
"decipher_only" extkUsage
- (optional)List of Extended Key Usage strings. Acceptable values are-
"ServerAuth_Id"
"ClientAuth_Id"
"CodeSigning_Id"
"EmailProtection_Id"
"IPSecEndSystem_Id"
"IPSecTunnel_Id"
"IPSecUser_Id"
"TimeStamping_Id" iaFile
- initial authorisation file containing initial reference number and passphrase on consecutive lines revoPwd
- password to be used when revoking this certificate after it has been signed dn
- domain name for certificate request. For example, String dn="o=IBM,c=US".
If null, value of PkEeFactory CA_DN will be used. keyPair
- keyPair to use for Public/Private Key Throws:
com.ibm.security.certclient.base.PkException
- Parameter error newCertRequest
- public static PkEeCertReqTransaction newCertRequest( java.lang.String subject,
- java.lang.String iaFile,
- java.lang.String revoPwd,
- java.lang.String dn)
- throws com.ibm.security.certclient.base.PkException
Initialises a certificate request to the supplied CA. The request is
ready to action but will have the following default values keySize =
1024 numValidDays = 365 keyType = RSA SubjectKeyId algorithm is RFC
3280 Long Form SubjectAlternateNames = none KeyUsage = none
ExtendedKeyUsage = none
Parameters:
subject
- The Relative DN for the subject. It will be prepended to
the value of parameter dn to create the subject DN. For example, String subject="cn=Test Group". iaFile
- initial authorisation file containing reference number and
passphrase on consecutive lines revoPwd
- password to be used when revoking this certificate after
it has been signed dn
- domain name for certificate request. For example, String dn="o=IBM,c=US".
If null, value of PkEeFactory CA_DN will be used. Throws:
com.ibm.security.certclient.base.PkException
- Parameter error