org.eclipse.milo.opcua.stack.core.util

Class SelfSignedCertificateGenerator

java.lang.Object

org.eclipse.milo.opcua.stack.core.util.SelfSignedCertificateGenerator

public class SelfSignedCertificateGenerator
extends Object

Constructor Summary

Constructors

Constructor and Description
SelfSignedCertificateGenerator()

Method Summary

Modifier and Type	Method and Description
protected void	addAuthorityKeyIdentifier(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder, KeyPair keyPair)
protected void	addBasicConstraints(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder, org.bouncycastle.asn1.x509.BasicConstraints basicConstraints)
protected void	addExtendedKeyUsage(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder)
protected void	addKeyUsage(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder)
protected void	addSubjectAlternativeNames(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder, KeyPair keyPair, @Nullable String applicationUri, List<String> dnsNames, List<String> ipAddresses)
static KeyPair	generateEcKeyPair(int length) Generate an EC KeyPair of bit length length.
static KeyPair	generateRsaKeyPair(int length) Generate an RSA KeyPair of bit length length.
X509Certificate	generateSelfSigned(KeyPair keyPair, Date notBefore, Date notAfter, @Nullable String commonName, @Nullable String organization, @Nullable String organizationalUnit, @Nullable String localityName, @Nullable String stateName, @Nullable String countryCode, @Nullable String applicationUri, List<String> dnsNames, List<String> ipAddresses, String signatureAlgorithm)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SelfSignedCertificateGenerator

public SelfSignedCertificateGenerator()

Method Detail

generateRsaKeyPair

public static KeyPair generateRsaKeyPair(int length)
                                  throws NoSuchAlgorithmException

Generate an RSA KeyPair of bit length length.

Parameters:

length - the length, in bits, of the key to generate.

Returns:

a KeyPair of bit length length.

Throws:

NoSuchAlgorithmException - if no Provider supports RSA KeyPair generation.

generateEcKeyPair

public static KeyPair generateEcKeyPair(int length)
                                 throws NoSuchAlgorithmException

Generate an EC KeyPair of bit length length.

Parameters:

length - the length, in bits, of the key to generate.

Returns:

a KeyPair of bit length length.

Throws:

NoSuchAlgorithmException - if no Provider supports EC KeyPair generation.

generateSelfSigned

public X509Certificate generateSelfSigned(KeyPair keyPair,
                                          Date notBefore,
                                          Date notAfter,
                                          @Nullable
                                          @Nullable String commonName,
                                          @Nullable
                                          @Nullable String organization,
                                          @Nullable
                                          @Nullable String organizationalUnit,
                                          @Nullable
                                          @Nullable String localityName,
                                          @Nullable
                                          @Nullable String stateName,
                                          @Nullable
                                          @Nullable String countryCode,
                                          @Nullable
                                          @Nullable String applicationUri,
                                          List<String> dnsNames,
                                          List<String> ipAddresses,
                                          String signatureAlgorithm)
                                   throws Exception

Throws:

Exception

addSubjectAlternativeNames

protected void addSubjectAlternativeNames(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder,
                                          KeyPair keyPair,
                                          @Nullable
                                          @Nullable String applicationUri,
                                          List<String> dnsNames,
                                          List<String> ipAddresses)
                                   throws org.bouncycastle.cert.CertIOException,
                                          NoSuchAlgorithmException

Throws:

org.bouncycastle.cert.CertIOException

NoSuchAlgorithmException

addExtendedKeyUsage

protected void addExtendedKeyUsage(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder)
                            throws org.bouncycastle.cert.CertIOException

Throws:

org.bouncycastle.cert.CertIOException

addKeyUsage

protected void addKeyUsage(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder)
                    throws org.bouncycastle.cert.CertIOException

Throws:

org.bouncycastle.cert.CertIOException

addBasicConstraints

protected void addBasicConstraints(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder,
                                   org.bouncycastle.asn1.x509.BasicConstraints basicConstraints)
                            throws org.bouncycastle.cert.CertIOException

Throws:

org.bouncycastle.cert.CertIOException

addAuthorityKeyIdentifier

protected void addAuthorityKeyIdentifier(org.bouncycastle.cert.X509v3CertificateBuilder certificateBuilder,
                                         KeyPair keyPair)
                                  throws org.bouncycastle.cert.CertIOException,
                                         NoSuchAlgorithmException

Throws:

org.bouncycastle.cert.CertIOException

NoSuchAlgorithmException