Class C509CertificationRequestBuilder

java.lang.Object
org.bouncycastle.cert.c509.C509CertificationRequestBuilder
public class C509CertificationRequestBuilder extends Object
Builder for natively signed C509 certification requests (type 2, Section 4 of draft-ietf-cose-cbor-encoded-cert-20). The proof-of-possession signature is computed directly over the TBSCertificationRequest CBOR sequence.

  • Constructor Details

    • C509CertificationRequestBuilder

      public C509CertificationRequestBuilder(org.bouncycastle.asn1.x500.X500Name subject, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo subjectPublicKeyInfo)
      Base constructor.
      Parameters:
      subject - the X.500 name defining the certificate subject.
      subjectPublicKeyInfo - the info structure for the public key to be associated with the request.

  • Method Details

    • setExtensionRequest

      public C509CertificationRequestBuilder setExtensionRequest(org.bouncycastle.asn1.x509.Extensions extensionRequest)
      Set the extensions requested of the CA (the RFC 2985 extensionRequest attribute).

    • setChallengePassword

      public C509CertificationRequestBuilder setChallengePassword(String challengePassword)
      Set a challenge password (the RFC 2985 challengePassword attribute). In a natively signed request the password is always carried as a UTF-8 text string.

    • setConversionOptions

      public C509CertificationRequestBuilder setConversionOptions(org.bouncycastle.cbor.c509.C509ConversionOptions options)
      Set the conversion options - point compression in particular.

    • build

      public C509CertificationRequestHolder build(ContentSigner signer) throws CertIOException
      Generate the certification request, signing the TBSCertificationRequest CBOR sequence with the given signer.
      Throws:
      CertIOException