com.ontimize.security

Class CertificateUtils

java.lang.Object

com.ontimize.security.CertificateUtils

public final class CertificateUtils
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static String	BEGIN_CERTIFICATE
static String	beginCertificateToken
static String	DNIe
static String	DNIe_C
static String	DNIe_CN
static String	DNIe_G
static String	DNIe_SERIALNUMBER
static String	DNIe_SN
static String	END_CERTIFICATE
protected static int	OFFSET
protected static String	OFFSET_STRING
static String	providers
static String	PROVIDERS
static String	SIGNED_ERROR
static String	SIGNED_TOKEN
static String	TOKEN
static String	TOKEN_ERROR
static String	TRUST_CA_ERROR
static String	TRUST_CRL_ERROR
static String	USER_CERTIFICATE
static String	VALIDITY_ERROR

Method Summary

Methods

Modifier and Type	Method and Description
static void	addToKeyStore(String keystoreFilepath, char[] keystorePassword, String alias, String keystoreType) Loads content into a keystore from file.
static boolean	checkValidity(Certificate cert)
static String	createTokenToSend(Certificate cert, String token, String signedToken)
static Certificate	decodeCertificate(String certificate)
static String	encodeCertificate(Certificate cert)
static String	encrypt(String password)
static List	getAliasCertPairFromKeyStore(KeyStore ks, String pin)
protected static String	getInfo(X509Certificate cert)
static KeyStore	getKeystoreInstance()
static KeyStore	getKeystoreInstance(boolean forceRenew)
static Provider	getProviderInstalled(String key)
static Enumeration	getProvidersInstalled()
static String	getSignedToken(String token, Certificate cert, PrivateKey sk)
static Hashtable	getX509CertificateSubjectDNFields(X509Certificate cert)
static String	getX509CertificateSubjectDNFields(X509Certificate cert, String field)
static Certificate	importCertificate(String filepath)
static void	installCertProviders()
static void	installProvider(String key, Provider provider)
static boolean	isProviderInstalled(String key)
static boolean	isRevoked(Certificate cert, CRL[] crls)
static boolean	isTrustCA(Certificate cert, Certificate[] validCA)
static Object	loadCerfificatesFromDir(List dirlist, boolean crl)
static Certificate[]	loadCerfificatesFromProperties(Properties properties)
static Certificate[]	loadCerfificatesFromStream(InputStream is)
static Certificate[]	loadCerfificatesFromURL(String url)
static Object	loadCertificateFromFile(File file, boolean crl)
static Object	loadCertificateFromFile(String filePath, boolean crl)
static Object	loadCertificates(Vector vCert, boolean crl) It returns in server locator revoked and accepted certificates.
static CRL[]	loadCRLFromProperties(Properties properties)
static CRL[]	loadCRLFromStream(InputStream is)
static CRL[]	loadCRLFromURL(String url)
static Hashtable	parseTokenReceived(String token)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PROVIDERS

public static final String PROVIDERS

See Also:

Constant Field Values

BEGIN_CERTIFICATE

public static final String BEGIN_CERTIFICATE

See Also:

Constant Field Values

END_CERTIFICATE

public static final String END_CERTIFICATE

See Also:

Constant Field Values

USER_CERTIFICATE

public static final String USER_CERTIFICATE

See Also:

Constant Field Values

SIGNED_TOKEN

public static final String SIGNED_TOKEN

See Also:

Constant Field Values

TOKEN

public static final String TOKEN

See Also:

Constant Field Values

TOKEN_ERROR

public static final String TOKEN_ERROR

See Also:

Constant Field Values

SIGNED_ERROR

public static final String SIGNED_ERROR

See Also:

Constant Field Values

TRUST_CA_ERROR

public static final String TRUST_CA_ERROR

See Also:

Constant Field Values

TRUST_CRL_ERROR

public static final String TRUST_CRL_ERROR

See Also:

Constant Field Values

VALIDITY_ERROR

public static final String VALIDITY_ERROR

See Also:

Constant Field Values

DNIe

public static final String DNIe

See Also:

Constant Field Values

DNIe_CN

public static final String DNIe_CN

See Also:

Constant Field Values

DNIe_G

public static final String DNIe_G

See Also:

Constant Field Values

DNIe_SN

public static final String DNIe_SN

See Also:

Constant Field Values

DNIe_SERIALNUMBER

public static final String DNIe_SERIALNUMBER

See Also:

Constant Field Values

DNIe_C

public static final String DNIe_C

See Also:

Constant Field Values

OFFSET

protected static int OFFSET

OFFSET_STRING

protected static String OFFSET_STRING

providers

public static String providers

beginCertificateToken

public static String beginCertificateToken

Method Detail

installCertProviders

public static void installCertProviders()

installProvider

public static void installProvider(String key,
                   Provider provider)

getProvidersInstalled

public static Enumeration getProvidersInstalled()

getProviderInstalled

public static Provider getProviderInstalled(String key)

isProviderInstalled

public static boolean isProviderInstalled(String key)

encrypt

public static String encrypt(String password)

encodeCertificate

public static String encodeCertificate(Certificate cert)

decodeCertificate

public static Certificate decodeCertificate(String certificate)
                                     throws Exception

Throws:

Exception

createTokenToSend

public static String createTokenToSend(Certificate cert,
                       String token,
                       String signedToken)

parseTokenReceived

public static Hashtable parseTokenReceived(String token)
                                    throws Exception

Throws:

Exception

getSignedToken

public static String getSignedToken(String token,
                    Certificate cert,
                    PrivateKey sk)

loadCerfificatesFromURL

public static Certificate[] loadCerfificatesFromURL(String url)
                                             throws Exception

Throws:

Exception

loadCerfificatesFromStream

public static Certificate[] loadCerfificatesFromStream(InputStream is)
                                                throws Exception

Throws:

Exception

loadCerfificatesFromProperties

public static Certificate[] loadCerfificatesFromProperties(Properties properties)
                                                    throws Exception

Throws:

Exception

loadCerfificatesFromDir

public static Object loadCerfificatesFromDir(List dirlist,
                             boolean crl)
                                      throws Exception

Throws:

Exception

loadCertificateFromFile

public static Object loadCertificateFromFile(String filePath,
                             boolean crl)
                                      throws Exception

Throws:

Exception

loadCertificateFromFile

public static Object loadCertificateFromFile(File file,
                             boolean crl)
                                      throws Exception

Throws:

Exception

loadCRLFromURL

public static CRL[] loadCRLFromURL(String url)
                            throws Exception

Throws:

Exception

loadCRLFromStream

public static CRL[] loadCRLFromStream(InputStream is)
                               throws Exception

Throws:

Exception

loadCRLFromProperties

public static CRL[] loadCRLFromProperties(Properties properties)
                                   throws Exception

Throws:

Exception

checkValidity

public static boolean checkValidity(Certificate cert)

isTrustCA

public static boolean isTrustCA(Certificate cert,
                Certificate[] validCA)

isRevoked

public static boolean isRevoked(Certificate cert,
                CRL[] crls)

importCertificate

public static Certificate importCertificate(String filepath)

getAliasCertPairFromKeyStore

public static List getAliasCertPairFromKeyStore(KeyStore ks,
                                String pin)
                                         throws KeyStoreException,
                                                NoSuchAlgorithmException,
                                                CertificateException,
                                                IOException

Throws:

KeyStoreException

NoSuchAlgorithmException

CertificateException

IOException

getInfo

protected static String getInfo(X509Certificate cert)

getX509CertificateSubjectDNFields

public static Hashtable getX509CertificateSubjectDNFields(X509Certificate cert)

getX509CertificateSubjectDNFields

public static String getX509CertificateSubjectDNFields(X509Certificate cert,
                                       String field)

getKeystoreInstance

public static KeyStore getKeystoreInstance()

getKeystoreInstance

public static KeyStore getKeystoreInstance(boolean forceRenew)

addToKeyStore

public static void addToKeyStore(String keystoreFilepath,
                 char[] keystorePassword,
                 String alias,
                 String keystoreType)

Loads content into a keystore from file.

Parameters:

keystoreFilepath -

keystorePassword -

alias -

loadCertificates

public static Object loadCertificates(Vector vCert,
                      boolean crl)
                               throws Exception

It returns in server locator revoked and accepted certificates. This method is called programmatically twice in remote locator to load revoked and accepted certificates.

Parameters:

vCert - Contains the list of places where user wants to load certificates:

• One unique .properties file included in project (keeps backward compatibility), e.g. com/ontimize/quickstart/server /certificate/cert.properties . This properties contains a structure like this:
  
  AC_DNIE_001=com/ontimize/quickstart /server/certificate/AC_DNIE_001.crt
  AC_DNIE_002=com/ontimize/ quickstart/server/certificate/AC_DNIE_002.crt
  AC_DNIE_003=com/ontimize/ quickstart/server/certificate/AC_DNIE_003.crt
  
  
• Complete path to a directory, e.g. /home/cert. With this format, all files contained in this path will be scanned. Non-compatible certificate files will be discarded.
• Indivual file path, e.g. /home/cert/AC_DNIE_001.crt. An individual certificate will be loaded with this format.

crl - when true loads and returns revoked certificates, else loads/returns accepted certificates.

Returns:

the Certificate[]/CRL[] array with accepted/revoked certificates according to crl parameter

Throws:

Exception - when occurs an error loading one of these file paths

Since:

5.2068EN-0.2EN