Bouncy Castle Provider 1.77 · org.bouncycastle.x509.X509V3CertificateGenerator

Modifier and Type	Field and Description
private final JcaJceHelper	bcHelper
private final CertificateFactory	certificateFactory
private X509ExtensionsGenerator	extGenerator Deprecated as a consequence of `X509ExtensionsGenerator` being deprecated.
private AlgorithmIdentifier	sigAlgId
private String	signatureAlgorithm
private ASN1ObjectIdentifier	sigOID
private V3TBSCertificateGenerator	tbsGen

Access	Constructor and Description
public	X509V3CertificateGenerator()

Method Summary

Modifier and Type	Method and Description
public void	addExtension(String oid, boolean critical, ASN1Encodable value) add a given extension field for the standard extensions tag (tag 3)
public void	addExtension(ASN1ObjectIdentifier oid, boolean critical, ASN1Encodable value) add a given extension field for the standard extensions tag (tag 3)
public void	addExtension(String oid, boolean critical, byte[] value) add a given extension field for the standard extensions tag (tag 3) The value parameter becomes the contents of the octet string associated with the extension.
public void	addExtension(ASN1ObjectIdentifier oid, boolean critical, byte[] value) add a given extension field for the standard extensions tag (tag 3)
private DERBitString	booleanToBitString(boolean[] id)
public void	copyAndAddExtension(String oid, boolean critical, X509Certificate cert) add a given extension field for the standard extensions tag (tag 3) copying the extension value from another certificate.
public void	copyAndAddExtension(ASN1ObjectIdentifier oid, boolean critical, X509Certificate cert) add a given extension field for the standard extensions tag (tag 3) copying the extension value from another certificate.
public X509Certificate	generate(PrivateKey key) generate an X509 certificate, based on the current issuer and subject using the default provider.
public X509Certificate	generate(PrivateKey key, SecureRandom random) generate an X509 certificate, based on the current issuer and subject using the default provider, and the passed in source of randomness (if required).
public X509Certificate	generate(PrivateKey key, String provider) generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing.
public X509Certificate	generate(PrivateKey key, String provider, SecureRandom random) generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing and the supplied source of randomness, if required.
private X509Certificate	generateJcaObject(TBSCertificate tbsCert, byte[] signature)
private TBSCertificate	generateTbsCert()
public X509Certificate	generateX509Certificate(PrivateKey key) Deprecated use generate(key, "BC") generate an X509 certificate, based on the current issuer and subject using the default provider "BC".
public X509Certificate	generateX509Certificate(PrivateKey key, SecureRandom random) Deprecated use generate(key, random, "BC") generate an X509 certificate, based on the current issuer and subject using the default provider "BC", and the passed in source of randomness (if required).
public X509Certificate	generateX509Certificate(PrivateKey key, String provider) Deprecated use generate() generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing.
public X509Certificate	generateX509Certificate(PrivateKey key, String provider, SecureRandom random) Deprecated use generate() generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing and the supplied source of randomness, if required.
public Iterator<E>	Returns: an iterator containing recognised names. getSignatureAlgNames() Return an iterator of the signature names supported by the generator.
public void	reset() reset the generator
public void	setIssuerDN(X500Principal issuer) Set the issuer distinguished name - the issuer is the entity whose private key is used to sign the certificate.
public void	setIssuerDN(X509Name issuer) Deprecated as a consequence of `X509Name` being deprecated. Set the issuer distinguished name - the issuer is the entity whose private key is used to sign the certificate.
public void	setIssuerUniqueID(boolean[] uniqueID) Set the issuer unique ID - note: it is very rare that it is correct to do this.
public void	setNotAfter(Date date)
public void	setNotBefore(Date date)
public void	setPublicKey(PublicKey key)
public void	setSerialNumber(BigInteger serialNumber) set the serial number for the certificate.
public void	setSignatureAlgorithm(String string representation of the algorithm name. signatureAlgorithm) Set the signature algorithm.
public void	setSubjectDN(X500Principal subject) Set the subject distinguished name.
public void	setSubjectDN(X509Name subject) Deprecated as a consequence of `X509Name` being deprecated. Set the subject distinguished name.
public void	setSubjectUniqueID(boolean[] uniqueID) Set the subject unique ID - note: it is very rare that it is correct to do this.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

bcHelper	back to summary
private final JcaJceHelper bcHelper

certificateFactory	back to summary
private final CertificateFactory certificateFactory

extGenerator	back to summary
private X509ExtensionsGenerator extGenerator Deprecated as a consequence of `X509ExtensionsGenerator` being deprecated. See corresponding docs for further information.

sigAlgId	back to summary
private AlgorithmIdentifier sigAlgId

signatureAlgorithm	back to summary
private String signatureAlgorithm

sigOID	back to summary
private ASN1ObjectIdentifier sigOID

tbsGen	back to summary
private V3TBSCertificateGenerator tbsGen

X509V3CertificateGenerator	back to summary
public X509V3CertificateGenerator()

Method Detail

addExtension	back to summary
public void addExtension(String oid, boolean critical, ASN1Encodable value) add a given extension field for the standard extensions tag (tag 3)

addExtension	back to summary
public void addExtension(ASN1ObjectIdentifier oid, boolean critical, ASN1Encodable value) add a given extension field for the standard extensions tag (tag 3)

addExtension	back to summary
public void addExtension(String oid, boolean critical, byte[] value) add a given extension field for the standard extensions tag (tag 3) The value parameter becomes the contents of the octet string associated with the extension.

addExtension	back to summary
public void addExtension(ASN1ObjectIdentifier oid, boolean critical, byte[] value) add a given extension field for the standard extensions tag (tag 3)

booleanToBitString	back to summary
private DERBitString booleanToBitString(boolean[] id)

copyAndAddExtension	back to summary
public void copyAndAddExtension(String oid, boolean critical, X509Certificate cert) throws CertificateParsingException add a given extension field for the standard extensions tag (tag 3) copying the extension value from another certificate. Exceptions CertificateParsingException: if the extension cannot be extracted.

copyAndAddExtension

back to summary

public void copyAndAddExtension(String oid, boolean critical, X509Certificate cert) throws CertificateParsingException

add a given extension field for the standard extensions tag (tag 3) copying the extension value from another certificate.

Exceptions

CertificateParsingException:: if the extension cannot be extracted.

copyAndAddExtension	back to summary
public void copyAndAddExtension(ASN1ObjectIdentifier oid, boolean critical, X509Certificate cert) throws CertificateParsingException add a given extension field for the standard extensions tag (tag 3) copying the extension value from another certificate. Exceptions CertificateParsingException: if the extension cannot be extracted.

copyAndAddExtension

back to summary

public void copyAndAddExtension(ASN1ObjectIdentifier oid, boolean critical, X509Certificate cert) throws CertificateParsingException

add a given extension field for the standard extensions tag (tag 3) copying the extension value from another certificate.

Exceptions

CertificateParsingException:: if the extension cannot be extracted.

generate	back to summary
public X509Certificate generate(PrivateKey key) throws CertificateEncodingException, IllegalStateException, NoSuchAlgorithmException, SignatureException, InvalidKeyException generate an X509 certificate, based on the current issuer and subject using the default provider. Note this differs from the deprecated method in that the default provider is used - not "BC".

generate	back to summary
public X509Certificate generate(PrivateKey key, SecureRandom random) throws CertificateEncodingException, IllegalStateException, NoSuchAlgorithmException, SignatureException, InvalidKeyException generate an X509 certificate, based on the current issuer and subject using the default provider, and the passed in source of randomness (if required). Note this differs from the deprecated method in that the default provider is used - not "BC".

generate

back to summary

public X509Certificate generate(PrivateKey key, SecureRandom random) throws CertificateEncodingException, IllegalStateException, NoSuchAlgorithmException, SignatureException, InvalidKeyException

generate an X509 certificate, based on the current issuer and subject using the default provider, and the passed in source of randomness (if required).

Note

this differs from the deprecated method in that the default provider is used - not "BC".

generate	back to summary
public X509Certificate generate(PrivateKey key, String provider) throws CertificateEncodingException, IllegalStateException, NoSuchProviderException, NoSuchAlgorithmException, SignatureException, InvalidKeyException generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing.

generate	back to summary
public X509Certificate generate(PrivateKey key, String provider, SecureRandom random) throws CertificateEncodingException, IllegalStateException, NoSuchProviderException, NoSuchAlgorithmException, SignatureException, InvalidKeyException generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing and the supplied source of randomness, if required.

generate

back to summary

public X509Certificate generate(PrivateKey key, String provider, SecureRandom random) throws CertificateEncodingException, IllegalStateException, NoSuchProviderException, NoSuchAlgorithmException, SignatureException, InvalidKeyException

generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing and the supplied source of randomness, if required.

generateJcaObject	back to summary
private X509Certificate generateJcaObject(TBSCertificate tbsCert, byte[] signature) throws Exception

generateTbsCert	back to summary
private TBSCertificate generateTbsCert()

generateX509Certificate	back to summary
public X509Certificate generateX509Certificate(PrivateKey key) throws SecurityException, SignatureException, InvalidKeyException Deprecated use generate(key, "BC") generate an X509 certificate, based on the current issuer and subject using the default provider "BC".

generateX509Certificate	back to summary
public X509Certificate generateX509Certificate(PrivateKey key, SecureRandom random) throws SecurityException, SignatureException, InvalidKeyException Deprecated use generate(key, random, "BC") generate an X509 certificate, based on the current issuer and subject using the default provider "BC", and the passed in source of randomness (if required).

generateX509Certificate	back to summary
public X509Certificate generateX509Certificate(PrivateKey key, String provider) throws NoSuchProviderException, SecurityException, SignatureException, InvalidKeyException Deprecated use generate() generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing.

generateX509Certificate	back to summary
public X509Certificate generateX509Certificate(PrivateKey key, String provider, SecureRandom random) throws NoSuchProviderException, SecurityException, SignatureException, InvalidKeyException Deprecated use generate() generate an X509 certificate, based on the current issuer and subject, using the passed in provider for the signing and the supplied source of randomness, if required.

getSignatureAlgNames	back to summary
public Iterator<E> getSignatureAlgNames() Return an iterator of the signature names supported by the generator. Returns:Iterator<E> an iterator containing recognised names.

getSignatureAlgNames

back to summary

public Iterator<E> getSignatureAlgNames()

Return an iterator of the signature names supported by the generator.

Returns:Iterator<E>: an iterator containing recognised names.

reset	back to summary
public void reset() reset the generator

setIssuerDN	back to summary
public void setIssuerDN(X500Principal issuer) Set the issuer distinguished name - the issuer is the entity whose private key is used to sign the certificate.

setIssuerDN	back to summary
public void setIssuerDN(X509Name issuer) Deprecated as a consequence of `X509Name` being deprecated. See corresponding docs for further information. Set the issuer distinguished name - the issuer is the entity whose private key is used to sign the certificate.

setIssuerUniqueID	back to summary
public void setIssuerUniqueID(boolean[] uniqueID) Set the issuer unique ID - note: it is very rare that it is correct to do this.

setNotAfter	back to summary
public void setNotAfter(Date date)

setNotBefore	back to summary
public void setNotBefore(Date date)

setPublicKey	back to summary
public void setPublicKey(PublicKey key) throws IllegalArgumentException

setSerialNumber	back to summary
public void setSerialNumber(BigInteger serialNumber) set the serial number for the certificate.

setSignatureAlgorithm	back to summary
public void setSignatureAlgorithm(String signatureAlgorithm) Set the signature algorithm. This can be either a name or an OID, names are treated as case insensitive. Parameters signatureAlgorithm:String string representation of the algorithm name.

setSignatureAlgorithm

back to summary

public void setSignatureAlgorithm(String signatureAlgorithm)

Set the signature algorithm. This can be either a name or an OID, names are treated as case insensitive.

Parameters

signatureAlgorithm:String: string representation of the algorithm name.

setSubjectDN	back to summary
public void setSubjectDN(X500Principal subject) Set the subject distinguished name. The subject describes the entity associated with the public key.

setSubjectDN	back to summary
public void setSubjectDN(X509Name subject) Deprecated as a consequence of `X509Name` being deprecated. See corresponding docs for further information. Set the subject distinguished name. The subject describes the entity associated with the public key.

setSubjectUniqueID	back to summary
public void setSubjectUniqueID(boolean[] uniqueID) Set the subject unique ID - note: it is very rare that it is correct to do this.

public Class X509V3CertificateGenerator

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail