Package com.yahoo.security
Class X509CertificateBuilder
java.lang.Object
com.yahoo.security.X509CertificateBuilder
- Author:
- bjorncs
-
Method Summary
Modifier and TypeMethodDescriptionaddSubjectAlternativeName(SubjectAlternativeName.Type type, String value) addSubjectAlternativeName(String dnsName) build()static X509CertificateBuilderfromCsr(Pkcs10Csr csr, X500Principal caIssuer, Instant notBefore, Instant notAfter, PrivateKey caPrivateKey, SignatureAlgorithm signingAlgorithm, BigInteger serialNumber) static X509CertificateBuilderfromKeypair(KeyPair keyPair, X500Principal subject, Instant notBefore, Instant notAfter, SignatureAlgorithm signingAlgorithm, BigInteger serialNumber) static BigIntegersetBasicConstraints(boolean isCritical, boolean isCertAuthorityCertificate) setIsCertAuthority(boolean isCertAuthority)
-
Method Details
-
fromCsr
public static X509CertificateBuilder fromCsr(Pkcs10Csr csr, X500Principal caIssuer, Instant notBefore, Instant notAfter, PrivateKey caPrivateKey, SignatureAlgorithm signingAlgorithm, BigInteger serialNumber) -
fromKeypair
public static X509CertificateBuilder fromKeypair(KeyPair keyPair, X500Principal subject, Instant notBefore, Instant notAfter, SignatureAlgorithm signingAlgorithm, BigInteger serialNumber) -
generateRandomSerialNumber
- Returns:
- generates a cryptographically secure positive serial number up to 128 bits
-
addSubjectAlternativeName
-
addSubjectAlternativeName
-
addSubjectAlternativeName
public X509CertificateBuilder addSubjectAlternativeName(SubjectAlternativeName.Type type, String value) -
setBasicConstraints
public X509CertificateBuilder setBasicConstraints(boolean isCritical, boolean isCertAuthorityCertificate) -
setIsCertAuthority
-
build
-