Package com.yahoo.security

Class X509CertificateBuilder

java.lang.Object

com.yahoo.security.X509CertificateBuilder

public class X509CertificateBuilder
extends Object

Author:

bjorncs

Method Summary

Modifier and Type	Method	Description
X509CertificateBuilder	addSubjectAlternativeName(SubjectAlternativeName san)
X509CertificateBuilder	addSubjectAlternativeName(SubjectAlternativeName.Type type, String value)
X509CertificateBuilder	addSubjectAlternativeName(String dnsName)
X509Certificate	build()
static X509CertificateBuilder	fromCsr(Pkcs10Csr csr, X500Principal caIssuer, Instant notBefore, Instant notAfter, PrivateKey caPrivateKey, SignatureAlgorithm signingAlgorithm, BigInteger serialNumber)
static X509CertificateBuilder	fromKeypair(KeyPair keyPair, X500Principal subject, Instant notBefore, Instant notAfter, SignatureAlgorithm signingAlgorithm, BigInteger serialNumber)
static BigInteger	generateRandomSerialNumber()
X509CertificateBuilder	setBasicConstraints(boolean isCritical, boolean isCertAuthorityCertificate)
X509CertificateBuilder	setIsCertAuthority(boolean isCertAuthority)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

fromCsr

public static X509CertificateBuilder fromCsr(Pkcs10Csr csr,
 X500Principal caIssuer,
 Instant notBefore,
 Instant notAfter,
 PrivateKey caPrivateKey,
 SignatureAlgorithm signingAlgorithm,
 BigInteger serialNumber)

fromKeypair

public static X509CertificateBuilder fromKeypair(KeyPair keyPair,
 X500Principal subject,
 Instant notBefore,
 Instant notAfter,
 SignatureAlgorithm signingAlgorithm,
 BigInteger serialNumber)

generateRandomSerialNumber

public static BigInteger generateRandomSerialNumber()

Returns:

generates a cryptographically secure positive serial number up to 128 bits

addSubjectAlternativeName

public X509CertificateBuilder addSubjectAlternativeName(String dnsName)

addSubjectAlternativeName

public X509CertificateBuilder addSubjectAlternativeName(SubjectAlternativeName san)

addSubjectAlternativeName

public X509CertificateBuilder addSubjectAlternativeName(SubjectAlternativeName.Type type,
 String value)

setBasicConstraints

public X509CertificateBuilder setBasicConstraints(boolean isCritical,
 boolean isCertAuthorityCertificate)

setIsCertAuthority

public X509CertificateBuilder setIsCertAuthority(boolean isCertAuthority)

build

public X509Certificate build()