Package eu.europa.esig.dss.pki.jaxb.builder

Class X509CertificateBuilder

java.lang.Object

eu.europa.esig.dss.pki.jaxb.builder.X509CertificateBuilder

public class X509CertificateBuilder
extends Object

Builds a eu.europa.esig.dss.model.x509.CertificateToken

Constructor Summary

Constructors

Constructor	Description
X509CertificateBuilder()	Default constructor to create an empty instance of X509CertificateBuilder.

Method Summary

Modifier and Type	Method	Description
CertificateToken	build()	Builds a certificate token
X509CertificateBuilder	ca(boolean ca)	Sets whether the certificate is a CA certificate
X509CertificateBuilder	caIssuers(String caIssuersUrl)	Sets the AIA CA Issuers distribution point URL
X509CertificateBuilder	certificatePolicies(List<String> certificatePolicies)	Sets the certificate policies for the certificate
X509CertificateBuilder	crl(String crlUrl)	Sets the CRL distribution point URL
X509CertificateBuilder	extendedKeyUsages(List<String> extendedKeyUsages)	Adds extended key usages certificate extension
X509CertificateBuilder	issuer(CertificateToken issuerCertificate, PrivateKey issuerPrivateKey, SignatureAlgorithm signatureAlgorithm)	Sets mandatory information about the certificate's issuer to sign the created certificate with a CertificateToken of the issuer
X509CertificateBuilder	issuer(org.bouncycastle.asn1.x500.X500Name issuerName, PrivateKey issuerPrivateKey, SignatureAlgorithm signatureAlgorithm)	Sets mandatory information about the certificate's issuer to sign the created certificate
X509CertificateBuilder	keyUsages(List<KeyUsageBit> keyUsages)	Sets the key usages for the certificate
X509CertificateBuilder	notAfter(Date notAfter)	Sets mandatory information about the certificate's notAfter field
X509CertificateBuilder	notBefore(Date notBefore)	Sets mandatory information about the certificate's notBefore field
X509CertificateBuilder	ocsp(String ocspUrl)	Sets the OCSP access point URL
X509CertificateBuilder	ocspNoCheck(boolean ocspNoCheck)	Sets whether the ocsp-no-check extension shall be present
X509CertificateBuilder	qcCClegislations(List<String> qcCClegislations)	Sets the QcCCLegislation Ids
X509CertificateBuilder	qcStatements(List<String> qcStatements)	Sets the QcStatement Ids
X509CertificateBuilder	qcTypes(List<String> qcTypes)	Sets the QcType Ids
X509CertificateBuilder	subject(org.bouncycastle.asn1.x500.X500Name subjectName, BigInteger serialNumber, PublicKey publicKey)	Sets mandatory information about the certificate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

X509CertificateBuilder

public X509CertificateBuilder()

Default constructor to create an empty instance of X509CertificateBuilder. Methods #subject and issuer shall be called at minimum to create a X509CertificateHolder

Method Details

subject

public X509CertificateBuilder subject(org.bouncycastle.asn1.x500.X500Name subjectName,
 BigInteger serialNumber,
 PublicKey publicKey)

Sets mandatory information about the certificate

Parameters:

subjectName - X500Name representing a DN subject name of the certificate to be created

serialNumber - BigInteger representing a certificate's serial number

publicKey - PublicKey of the certificate to be created

Returns:

X509CertificateBuilder this

issuer

public X509CertificateBuilder issuer(org.bouncycastle.asn1.x500.X500Name issuerName,
 PrivateKey issuerPrivateKey,
 SignatureAlgorithm signatureAlgorithm)

Sets mandatory information about the certificate's issuer to sign the created certificate

Parameters:

issuerName - X500Name representing a DN issuer name of the certificate to be created

issuerPrivateKey - PrivateKey of the issuer certificate to sign the certificate

signatureAlgorithm - SignatureAlgorithm to be used on signature creation

Returns:

X509CertificateBuilder this

issuer

public X509CertificateBuilder issuer(CertificateToken issuerCertificate,
 PrivateKey issuerPrivateKey,
 SignatureAlgorithm signatureAlgorithm)

Sets mandatory information about the certificate's issuer to sign the created certificate with a CertificateToken of the issuer

Parameters:

issuerCertificate - CertificateToken representing a certificate token of the issuer

issuerPrivateKey - PrivateKey of the issuer certificate to sign the certificate

signatureAlgorithm - SignatureAlgorithm to be used on signature creation

Returns:

X509CertificateBuilder this

notBefore

public X509CertificateBuilder notBefore(Date notBefore)

Sets mandatory information about the certificate's notBefore field

Parameters:

notBefore - Date representing a certificate's notBefore time

Returns:

X509CertificateBuilder this

notAfter

public X509CertificateBuilder notAfter(Date notAfter)

Sets mandatory information about the certificate's notAfter field

Parameters:

notAfter - Date representing a certificate's notAfter time

Returns:

X509CertificateBuilder this

keyUsages

public X509CertificateBuilder keyUsages(List<KeyUsageBit> keyUsages)

Sets the key usages for the certificate

Parameters:

keyUsages - a list of KeyUsageBits

Returns:

X509CertificateBuilder this

certificatePolicies

public X509CertificateBuilder certificatePolicies(List<String> certificatePolicies)

Sets the certificate policies for the certificate

Parameters:

certificatePolicies - a list of String certificate policy identifiers

Returns:

X509CertificateBuilder this

qcStatements

public X509CertificateBuilder qcStatements(List<String> qcStatements)

Sets the QcStatement Ids

Parameters:

qcStatements - a list of String qcStatement identifiers

Returns:

X509CertificateBuilder this

qcTypes

public X509CertificateBuilder qcTypes(List<String> qcTypes)

Sets the QcType Ids

Parameters:

qcTypes - a list of String qcType identifiers

Returns:

X509CertificateBuilder this

qcCClegislations

public X509CertificateBuilder qcCClegislations(List<String> qcCClegislations)

Sets the QcCCLegislation Ids

Parameters:

qcCClegislations - a list of String qcCCLegislation identifiers

Returns:

X509CertificateBuilder this

ca

public X509CertificateBuilder ca(boolean ca)

Sets whether the certificate is a CA certificate

Parameters:

ca - whether the certificate is a CA certificate

Returns:

X509CertificateBuilder this

ocspNoCheck

public X509CertificateBuilder ocspNoCheck(boolean ocspNoCheck)

Sets whether the ocsp-no-check extension shall be present

Parameters:

ocspNoCheck - whether the ocsp-no-check extension shall be present

Returns:

X509CertificateBuilder this

extendedKeyUsages

public X509CertificateBuilder extendedKeyUsages(List<String> extendedKeyUsages)

Adds extended key usages certificate extension

Parameters:

extendedKeyUsages - a list of String OIDs

Returns:

X509CertificateBuilder this

crl

public X509CertificateBuilder crl(String crlUrl)

Sets the CRL distribution point URL

Parameters:

crlUrl - String

Returns:

X509CertificateBuilder this

ocsp

public X509CertificateBuilder ocsp(String ocspUrl)

Sets the OCSP access point URL

Parameters:

ocspUrl - String

Returns:

X509CertificateBuilder this

caIssuers

public X509CertificateBuilder caIssuers(String caIssuersUrl)

Sets the AIA CA Issuers distribution point URL

Parameters:

caIssuersUrl - String

Returns:

X509CertificateBuilder this

build

public CertificateToken build()
                       throws org.bouncycastle.operator.OperatorCreationException,
IOException

Builds a certificate token

Returns:

CertificateToken

Throws:

org.bouncycastle.operator.OperatorCreationException - if an error on certificate signing occurs

IOException - if an error on certificate's content creation occurs