Bouncy Castle Cryptography Library 1.80 · org.bouncycastle.tls.CertificateRequest

Parsing and encoding of a CertificateRequest struct from RFC 4346:

struct {
    ClientCertificateType certificate_types<1..2^8-1>;
    DistinguishedName certificate_authorities<3..2^16-1>;
} CertificateRequest;

Updated for RFC 5246:

struct {
    ClientCertificateType certificate_types<1..2^8-1>;
    SignatureAndHashAlgorithm supported_signature_algorithms<2^16-1>;
    DistinguishedName certificate_authorities<0..2^16-1>;
} CertificateRequest;

Revised for RFC 8446:

struct {
    opaque certificate_request_context<0..2^8-1>;
    Extension extensions<2..2^16-1>;
} CertificateRequest;

Modifier and Type	Field and Description
protected final Vector<E>	certificateAuthorities
protected final byte[]	certificateRequestContext
protected final short[]	certificateTypes
protected final Vector<E>	supportedSignatureAlgorithms
protected final Vector<E>	supportedSignatureAlgorithmsCert

Constructor Summary

Access	Constructor and Description
public	CertificateRequest(short[] see `ClientCertificateType` for valid constants. certificateTypes, Vector<E> supportedSignatureAlgorithms, Vector<E> a `Vector` of `X500Name`. certificateAuthorities)
public	CertificateRequest(byte[] certificateRequestContext, Vector<E> supportedSignatureAlgorithms, Vector<E> supportedSignatureAlgorithmsCert, Vector<E> certificateAuthorities)
private	CertificateRequest(byte[] certificateRequestContext, short[] certificateTypes, Vector<E> supportedSignatureAlgorithms, Vector<E> supportedSignatureAlgorithmsCert, Vector<E> certificateAuthorities)

Method Summary

Modifier and Type	Method and Description
private static Vector<E>	checkSupportedSignatureAlgorithms(Vector<E> supportedSignatureAlgorithms, short alertDescription)
public void	encode(TlsContext the `TlsContext` of the current connection. context, OutputStream the `OutputStream` to encode to. output) Encode this `CertificateRequest` to an `OutputStream`.
public Vector<E>	Returns: a `Vector` of `X500Name` getCertificateAuthorities()
public byte[]	getCertificateRequestContext()
public short[]	Returns: an array of certificate types getCertificateTypes()
public Vector<E>	Returns: a `Vector` of `SignatureAndHashAlgorithm` (or null before TLS 1.2). getSupportedSignatureAlgorithms()
public Vector<E>	Returns: an optional `Vector` of `SignatureAndHashAlgorithm`. May be non-null from TLS 1.3 onwards. getSupportedSignatureAlgorithmsCert()
public boolean	hasCertificateRequestContext(byte[] certificateRequestContext)
public static CertificateRequest	Returns: a `CertificateRequest` object. parse(TlsContext the `TlsContext` of the current connection. context, InputStream the `InputStream` to parse from. input) Parse a `CertificateRequest` from an `InputStream`.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

certificateAuthorities	back to summary
protected final Vector<E> certificateAuthorities

certificateRequestContext	back to summary
protected final byte[] certificateRequestContext

certificateTypes	back to summary
protected final short[] certificateTypes

supportedSignatureAlgorithms	back to summary
protected final Vector<E> supportedSignatureAlgorithms

supportedSignatureAlgorithmsCert	back to summary
protected final Vector<E> supportedSignatureAlgorithmsCert

Constructor Detail

CertificateRequest	back to summary
public CertificateRequest(short[] certificateTypes, Vector<E> supportedSignatureAlgorithms, Vector<E> certificateAuthorities) Parameters certificateTypes:short[] see `ClientCertificateType` for valid constants. certificateAuthorities:Vector<E> a `Vector` of `X500Name`.

CertificateRequest	back to summary
public CertificateRequest(byte[] certificateRequestContext, Vector<E> supportedSignatureAlgorithms, Vector<E> supportedSignatureAlgorithmsCert, Vector<E> certificateAuthorities) throws IOException

CertificateRequest	back to summary
private CertificateRequest(byte[] certificateRequestContext, short[] certificateTypes, Vector<E> supportedSignatureAlgorithms, Vector<E> supportedSignatureAlgorithmsCert, Vector<E> certificateAuthorities)

Method Detail

checkSupportedSignatureAlgorithms	back to summary
private static Vector<E> checkSupportedSignatureAlgorithms(Vector<E> supportedSignatureAlgorithms, short alertDescription) throws IOException

encode back to summary

encode	back to summary
public void encode(TlsContext context, OutputStream output) throws IOException Encode this `CertificateRequest` to an `OutputStream`. Parameters context:TlsContext the `TlsContext` of the current connection. output:OutputStream the `OutputStream` to encode to.

public void encode(TlsContext context, OutputStream output) throws IOException

Encode this CertificateRequest to an OutputStream.

Parameters

context:TlsContext: the TlsContext of the current connection.
output:OutputStream: the OutputStream to encode to.

getCertificateAuthorities	back to summary
public Vector<E> getCertificateAuthorities() Returns:Vector<E> a `Vector` of `X500Name`

getCertificateRequestContext	back to summary
public byte[] getCertificateRequestContext()

getCertificateTypes	back to summary
public short[] getCertificateTypes() Returns:short[] an array of certificate types See Also `ClientCertificateType`

getSupportedSignatureAlgorithms	back to summary
public Vector<E> getSupportedSignatureAlgorithms() Returns:Vector<E> a `Vector` of `SignatureAndHashAlgorithm` (or null before TLS 1.2).

getSupportedSignatureAlgorithmsCert	back to summary
public Vector<E> getSupportedSignatureAlgorithmsCert() Returns:Vector<E> an optional `Vector` of `SignatureAndHashAlgorithm`. May be non-null from TLS 1.3 onwards.

hasCertificateRequestContext	back to summary
public boolean hasCertificateRequestContext(byte[] certificateRequestContext)

parse back to summary

parse	back to summary
public static CertificateRequest parse(TlsContext context, InputStream input) throws IOException Parse a `CertificateRequest` from an `InputStream`. Parameters context:TlsContext the `TlsContext` of the current connection. input:InputStream the `InputStream` to parse from. Returns:CertificateRequest a `CertificateRequest` object.

public static CertificateRequest parse(TlsContext context, InputStream input) throws IOException

Parse a CertificateRequest from an InputStream.

Parameters

context:TlsContext: the TlsContext of the current connection.
input:InputStream: the InputStream to parse from.

Returns:CertificateRequest

a CertificateRequest object.

public Class CertificateRequest

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail