Module org.eclipse.milo.opcua.stack.core

Package org.eclipse.milo.opcua.stack.core.security

Class RsaSha256CertificateFactory

java.lang.Object

org.eclipse.milo.opcua.stack.core.security.RsaSha256CertificateFactory

All Implemented Interfaces:

CertificateFactory

public abstract class RsaSha256CertificateFactory
extends Object
implements CertificateFactory

Constructor Summary

Constructors

Constructor	Description
RsaSha256CertificateFactory()

Method Summary

Modifier and Type	Method	Description
X509Certificate[]	createCertificateChain(NodeId certificateTypeId, KeyPair keyPair)	Create a X509Certificate chain for the certificate of the type identified by certificateTypeId.
KeyPair	createKeyPair(NodeId certificateTypeId)	Create a KeyPair for the certificate of the type identified by certificateTypeId.
protected abstract X509Certificate[]	createRsaSha256CertificateChain(KeyPair keyPair)	Create a new X509Certificate chain of type NodeIds0.RsaSha256ApplicationCertificateType.
protected KeyPair	createRsaSha256KeyPair()	Create a new KeyPair for a NodeIds0.RsaSha256ApplicationCertificateType type certificate.
protected ByteString	createRsaSha256SigningRequest(KeyPair keyPair, org.bouncycastle.asn1.x500.X500Name subjectName, String sanUri, List<String> dnsNames, List<String> ipAddresses)	Create a new PKCS10 certificate signing request for a NodeIds0.RsaSha256ApplicationCertificateType type certificate.
ByteString	createSigningRequest(NodeId certificateTypeId, KeyPair keyPair, org.bouncycastle.asn1.x500.X500Name subjectName, String sanUri, List<String> dnsNames, List<String> ipAddresses)	Create a PKCS10 certificate signing request for the certificate of the type identified by certificateTypeId.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

RsaSha256CertificateFactory

public RsaSha256CertificateFactory()

Method Details

createKeyPair

public KeyPair createKeyPair(NodeId certificateTypeId)
                      throws NoSuchAlgorithmException

Description copied from interface: CertificateFactory

Create a KeyPair for the certificate of the type identified by certificateTypeId.

Specified by:

createKeyPair in interface CertificateFactory

Parameters:

certificateTypeId - the NodeId identifying the type of certificate.

Returns:

the new KeyPair.

Throws:

NoSuchAlgorithmException

createCertificateChain

public X509Certificate[] createCertificateChain(NodeId certificateTypeId,
 KeyPair keyPair)
                                         throws Exception

Description copied from interface: CertificateFactory

Create a X509Certificate chain for the certificate of the type identified by certificateTypeId.

Specified by:

createCertificateChain in interface CertificateFactory

Parameters:

certificateTypeId - the NodeId identifying the type of certificate.

keyPair - the KeyPair to use when creating the certificate chain.

Returns:

the new X509Certificate chain.

Throws:

Exception

createSigningRequest

public ByteString createSigningRequest(NodeId certificateTypeId,
 KeyPair keyPair,
 org.bouncycastle.asn1.x500.X500Name subjectName,
 String sanUri,
 List<String> dnsNames,
 List<String> ipAddresses)
                                throws Exception

Description copied from interface: CertificateFactory

Create a PKCS10 certificate signing request for the certificate of the type identified by certificateTypeId.

Specified by:

createSigningRequest in interface CertificateFactory

Parameters:

certificateTypeId - the NodeId identifying the type of certificate.

keyPair - the KeyPair to use when creating the signing request.

subjectName - the X500Name to request.

sanUri - the URI to request in the Subject Alternative Name of the CSR.

dnsNames - the DNS names to request in the Subject Alternative Name of the CSR.

ipAddresses - the IP addresses to request in the Subject Alternative Name of the CSR.

Returns:

the new ByteString containing the DER-encoded PKCS10 signing request.

Throws:

Exception - if an error occurs while creating the signing request.

createRsaSha256KeyPair

protected KeyPair createRsaSha256KeyPair()
                                  throws NoSuchAlgorithmException

Create a new KeyPair for a NodeIds0.RsaSha256ApplicationCertificateType type certificate. The key length must be between 2048 and 4096 bits.

Returns:

the new KeyPair.

Throws:

NoSuchAlgorithmException

createRsaSha256CertificateChain

protected abstract X509Certificate[] createRsaSha256CertificateChain(KeyPair keyPair)
                                                              throws Exception

Create a new X509Certificate chain of type NodeIds0.RsaSha256ApplicationCertificateType. The chain may be of length 1 if the certificate is self-signed.

Parameters:

keyPair - the KeyPair to use when creating the certificate chain.

Returns:

the new X509Certificate chain.

Throws:

Exception - if an error occurs while creating the certificate chain.

createRsaSha256SigningRequest

protected ByteString createRsaSha256SigningRequest(KeyPair keyPair,
 org.bouncycastle.asn1.x500.X500Name subjectName,
 String sanUri,
 List<String> dnsNames,
 List<String> ipAddresses)
                                            throws Exception

Create a new PKCS10 certificate signing request for a NodeIds0.RsaSha256ApplicationCertificateType type certificate.

Parameters:

keyPair - the KeyPair to use when creating the signing request.

subjectName - the X500Name to request.

sanUri - the URI to request in the Subject Alternative Name of the CSR.

dnsNames - the DNS names to request in the Subject Alternative Name of the CSR.

ipAddresses - the IP addresses to request in the Subject Alternative Name of the CSR.

Returns:

the new ByteString containing the DER-encoded PKCS10 signing request.

Throws:

Exception - if an error occurs while creating the signing request.