Package org.bouncycastle.tls.crypto.impl.bc

Class BcTlsRawKeyCertificate

java.lang.Object

org.bouncycastle.tls.crypto.impl.bc.BcTlsRawKeyCertificate

All Implemented Interfaces:

TlsCertificate

Direct Known Subclasses:

BcTlsCertificate

public class BcTlsRawKeyCertificate
extends Object
implements TlsCertificate

Implementation class for a single X.509 certificate based on the BC light-weight API.

Field Summary

Fields

Modifier and Type	Field	Description
protected final BcTlsCrypto	crypto
protected final org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	keyInfo
protected org.bouncycastle.crypto.params.DHPublicKeyParameters	pubKeyDH
protected org.bouncycastle.crypto.params.ECPublicKeyParameters	pubKeyEC
protected org.bouncycastle.crypto.params.Ed25519PublicKeyParameters	pubKeyEd25519
protected org.bouncycastle.crypto.params.Ed448PublicKeyParameters	pubKeyEd448
protected org.bouncycastle.crypto.params.RSAKeyParameters	pubKeyRSA

Constructor Summary

Constructors

Constructor	Description
BcTlsRawKeyCertificate(BcTlsCrypto crypto, byte[] keyInfo)
BcTlsRawKeyCertificate(BcTlsCrypto crypto, org.bouncycastle.asn1.x509.SubjectPublicKeyInfo keyInfo)

Method Summary

Modifier and Type	Method	Description
TlsCertificate	checkUsageInRole(int tlsCertificateRole)
TlsEncryptor	createEncryptor(int tlsCertificateRole)	Return an encryptor based on the public key in this certificate.
Tls13Verifier	createVerifier(int signatureScheme)
TlsVerifier	createVerifier(short signatureAlgorithm)
byte[]	getEncoded()
byte[]	getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
short	getLegacySignatureAlgorithm()
org.bouncycastle.crypto.params.DHPublicKeyParameters	getPubKeyDH()
org.bouncycastle.crypto.params.DSAPublicKeyParameters	getPubKeyDSS()
org.bouncycastle.crypto.params.ECPublicKeyParameters	getPubKeyEC()
org.bouncycastle.crypto.params.Ed25519PublicKeyParameters	getPubKeyEd25519()
org.bouncycastle.crypto.params.Ed448PublicKeyParameters	getPubKeyEd448()
org.bouncycastle.pqc.crypto.mldsa.MLDSAPublicKeyParameters	getPubKeyMLDSA()
org.bouncycastle.crypto.params.RSAKeyParameters	getPubKeyRSA()
protected org.bouncycastle.crypto.params.AsymmetricKeyParameter	getPublicKey()
BigInteger	getSerialNumber()
String	getSigAlgOID()
org.bouncycastle.asn1.ASN1Encodable	getSigAlgParams()
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo	getSubjectPublicKeyInfo()
protected boolean	supportsKeyUsage(int keyUsageBit)
protected boolean	supportsMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)
protected boolean	supportsRSA_PKCS1()
protected boolean	supportsRSA_PSS_PSS(short signatureAlgorithm)
protected boolean	supportsRSA_PSS_RSAE()
boolean	supportsSignatureAlgorithm(short signatureAlgorithm)
protected boolean	supportsSignatureAlgorithm(short signatureAlgorithm, int keyUsage)
boolean	supportsSignatureAlgorithmCA(short signatureAlgorithm)
void	validateKeyUsage(int keyUsageBit)
protected void	validateMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)
protected void	validateRSA_PKCS1()
protected void	validateRSA_PSS_PSS(short signatureAlgorithm)
protected void	validateRSA_PSS_RSAE()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

crypto

protected final BcTlsCrypto crypto

keyInfo

protected final org.bouncycastle.asn1.x509.SubjectPublicKeyInfo keyInfo

pubKeyDH

protected org.bouncycastle.crypto.params.DHPublicKeyParameters pubKeyDH

pubKeyEC

protected org.bouncycastle.crypto.params.ECPublicKeyParameters pubKeyEC

pubKeyEd25519

protected org.bouncycastle.crypto.params.Ed25519PublicKeyParameters pubKeyEd25519

pubKeyEd448

protected org.bouncycastle.crypto.params.Ed448PublicKeyParameters pubKeyEd448

pubKeyRSA

protected org.bouncycastle.crypto.params.RSAKeyParameters pubKeyRSA

Constructor Details

BcTlsRawKeyCertificate

public BcTlsRawKeyCertificate(BcTlsCrypto crypto,
 byte[] keyInfo)

BcTlsRawKeyCertificate

public BcTlsRawKeyCertificate(BcTlsCrypto crypto,
 org.bouncycastle.asn1.x509.SubjectPublicKeyInfo keyInfo)

Method Details

getSubjectPublicKeyInfo

public org.bouncycastle.asn1.x509.SubjectPublicKeyInfo getSubjectPublicKeyInfo()

createEncryptor

public TlsEncryptor createEncryptor(int tlsCertificateRole)
                             throws IOException

Description copied from interface: TlsCertificate

Return an encryptor based on the public key in this certificate.

Specified by:

createEncryptor in interface TlsCertificate

Parameters:

tlsCertificateRole - TlsCertificateRole

Returns:

a TlsEncryptor based on this certificate's public key.

Throws:

IOException

createVerifier

public TlsVerifier createVerifier(short signatureAlgorithm)
                           throws IOException

Specified by:

createVerifier in interface TlsCertificate

Parameters:

signatureAlgorithm - SignatureAlgorithm

Throws:

IOException

createVerifier

public Tls13Verifier createVerifier(int signatureScheme)
                             throws IOException

Specified by:

createVerifier in interface TlsCertificate

Parameters:

signatureScheme - SignatureScheme

Throws:

IOException

getEncoded

public byte[] getEncoded()
                  throws IOException

Specified by:

getEncoded in interface TlsCertificate

Throws:

IOException

getExtension

public byte[] getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
                    throws IOException

Specified by:

getExtension in interface TlsCertificate

Throws:

IOException

getSerialNumber

public BigInteger getSerialNumber()

Specified by:

getSerialNumber in interface TlsCertificate

getSigAlgOID

public String getSigAlgOID()

Specified by:

getSigAlgOID in interface TlsCertificate

Returns:

the OID of this certificate's 'signatureAlgorithm', as a String.

getSigAlgParams

public org.bouncycastle.asn1.ASN1Encodable getSigAlgParams()

Specified by:

getSigAlgParams in interface TlsCertificate

getLegacySignatureAlgorithm

public short getLegacySignatureAlgorithm()
                                  throws IOException

Specified by:

getLegacySignatureAlgorithm in interface TlsCertificate

Returns:

SignatureAlgorithm

Throws:

IOException

getPubKeyDH

public org.bouncycastle.crypto.params.DHPublicKeyParameters getPubKeyDH()
                                                                 throws IOException

Throws:

IOException

getPubKeyDSS

public org.bouncycastle.crypto.params.DSAPublicKeyParameters getPubKeyDSS()
                                                                   throws IOException

Throws:

IOException

getPubKeyEC

public org.bouncycastle.crypto.params.ECPublicKeyParameters getPubKeyEC()
                                                                 throws IOException

Throws:

IOException

getPubKeyEd25519

public org.bouncycastle.crypto.params.Ed25519PublicKeyParameters getPubKeyEd25519()
                                                                           throws IOException

Throws:

IOException

getPubKeyEd448

public org.bouncycastle.crypto.params.Ed448PublicKeyParameters getPubKeyEd448()
                                                                       throws IOException

Throws:

IOException

getPubKeyMLDSA

public org.bouncycastle.pqc.crypto.mldsa.MLDSAPublicKeyParameters getPubKeyMLDSA()
                                                                          throws IOException

Throws:

IOException

getPubKeyRSA

public org.bouncycastle.crypto.params.RSAKeyParameters getPubKeyRSA()
                                                             throws IOException

Throws:

IOException

supportsSignatureAlgorithm

public boolean supportsSignatureAlgorithm(short signatureAlgorithm)
                                   throws IOException

Specified by:

supportsSignatureAlgorithm in interface TlsCertificate

Parameters:

signatureAlgorithm - SignatureAlgorithm

Returns:

true if (and only if) this certificate can be used to verify the given signature algorithm.

Throws:

IOException

supportsSignatureAlgorithmCA

public boolean supportsSignatureAlgorithmCA(short signatureAlgorithm)
                                     throws IOException

Specified by:

supportsSignatureAlgorithmCA in interface TlsCertificate

Throws:

IOException

checkUsageInRole

public TlsCertificate checkUsageInRole(int tlsCertificateRole)
                                throws IOException

Specified by:

checkUsageInRole in interface TlsCertificate

Parameters:

tlsCertificateRole - TlsCertificateRole

Throws:

IOException

getPublicKey

protected org.bouncycastle.crypto.params.AsymmetricKeyParameter getPublicKey()
                                                                      throws IOException

Throws:

IOException

supportsKeyUsage

protected boolean supportsKeyUsage(int keyUsageBit)

supportsMLDSA

protected boolean supportsMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)

supportsRSA_PKCS1

protected boolean supportsRSA_PKCS1()

supportsRSA_PSS_PSS

protected boolean supportsRSA_PSS_PSS(short signatureAlgorithm)

supportsRSA_PSS_RSAE

protected boolean supportsRSA_PSS_RSAE()

supportsSignatureAlgorithm

protected boolean supportsSignatureAlgorithm(short signatureAlgorithm,
 int keyUsage)
                                      throws IOException

Throws:

IOException

validateKeyUsage

public void validateKeyUsage(int keyUsageBit)
                      throws IOException

Throws:

IOException

validateMLDSA

protected void validateMLDSA(org.bouncycastle.asn1.ASN1ObjectIdentifier mlDsaAlgOid)
                      throws IOException

Throws:

IOException

validateRSA_PKCS1

protected void validateRSA_PKCS1()
                          throws IOException

Throws:

IOException

validateRSA_PSS_PSS

protected void validateRSA_PSS_PSS(short signatureAlgorithm)
                            throws IOException

Throws:

IOException

validateRSA_PSS_RSAE

protected void validateRSA_PSS_RSAE()
                             throws IOException

Throws:

IOException