|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectorg.glite.security.delegation.GrDPX509Util
public class GrDPX509Util
Utility to manage X509 certificates
Field Summary | |
---|---|
static java.lang.String |
CERT_CHAIN_CONTENT_TYPE
|
static java.lang.String |
CERT_REQ_CONTENT_TYPE
|
Constructor Summary | |
---|---|
GrDPX509Util()
|
Method Summary | |
---|---|
static byte[] |
certChainToByte(java.security.cert.X509Certificate[] x509Cert)
Deprecated. use org.glite.security.util.proxy.ProxyCertificateGenerator. |
static java.lang.String |
certProxyResponse(java.lang.String proxyCert)
Returns a proxy certificate in HTTP MIME type format |
static java.lang.String |
certReqResponse(java.lang.String certReq)
Returns a certificate request in HTTP MIME type format |
static boolean |
changeFileMode(java.lang.String file,
int mode)
Change the access mode of a file in the filesystem (!!! |
static java.lang.String |
createCertificateRequest(java.security.cert.X509Certificate subjectCert,
java.lang.String sigAlgName,
java.security.KeyPair keyPair)
Create a new certificate request. |
static java.lang.String |
createCertificateRequest(org.bouncycastle.asn1.x509.X509Name subjectDN,
java.lang.String sigAlgName,
java.security.KeyPair keyPair)
Deprecated. use the method with certificate input instead to avoid problems with DN encoding. |
static byte[] |
digest(byte[] input)
A synchronizer wrapper for the static digester, only access it through this utility method. |
static java.lang.String |
digestFileName(java.lang.String delegationid_in,
java.lang.String DN_in)
Returns SHA1 hash digest of file name based on given delegationID and DER encoded DN in form of SHA1_HASH(DelegationID)+"-"+SHA1_HASH(DN) |
static java.lang.String |
errorResponse(java.lang.String errorMsg)
Makes an HTTP error message out of the error message. |
static java.lang.String |
findPrivateKeyInCache(java.lang.String strDirCache,
java.lang.String delegationID,
java.lang.String userDN)
Deprecated. Use delegation storage. |
static java.lang.String |
findProxyInCache(java.lang.String strDirCache,
java.lang.String delegationID,
java.lang.String userDN)
Deprecated. Use delegation storage. |
static java.lang.String[] |
fromStringVOMSAttrs(java.lang.String vomsAttributesStr)
Returns the list of VOMS attributes from a single string representation. |
static java.lang.String |
genDlgID(java.lang.String dn,
java.lang.String[] vomsAttributes)
Generates a new delegation ID starting from the given DN and list of VOMS attributes. |
static java.lang.String |
generateSessionID(java.security.PublicKey pk)
Generates a new session ID based on the public key. |
static java.lang.String |
getDefaultCertFile()
Retrieves the location of the user cert file. |
static java.lang.String |
getDefaultCertLocation()
Retrieves the location of the CA cert files. |
static java.lang.String |
getDefaultKeyFile()
Retrieves the location of the user key file. |
static java.lang.String |
getDefaultProxyFile()
Retrieves the location of the proxy file. |
static java.lang.String |
getDlgeePropertyFile()
Retrieve the path to the delegatee property file |
static java.lang.String |
getDlgorPropertyFile()
Retrieve the path to the delegator property file |
static byte[] |
getFilesBytes(java.io.File file)
Deprecated. use relevant functions in util-java or bouncycastle. |
static GrDPStorageFactory |
getGrDPStorageFactory(java.lang.String factoryClass)
Get the factory to create storage instances. |
static java.security.KeyPair |
getKeyPair(int size)
Generate a new key pair. |
static java.lang.String[] |
getVOMSAttributes(org.glite.security.SecurityContext sc)
Returns the list of VOMS attributes exposed in the given SecurityContext. |
static java.security.cert.X509Certificate |
loadCertificate(java.io.InputStream cert)
Deprecated. Use delegation storage or org.glite.security.util.FileCertReader. |
static java.security.cert.X509Certificate[] |
loadCertificateChain(java.io.BufferedInputStream bisCerts)
Deprecated. Use delegation storage or org.glite.security.util.FileCertReader. |
static java.security.cert.X509Certificate[] |
loadCertificateChain(byte[] bCerts)
Deprecated. Use delegation storage or org.glite.security.util.FileCertReader. |
static org.bouncycastle.jce.PKCS10CertificationRequest |
loadCertificateRequest(java.lang.String request)
Deprecated. Use delegation storage or org.glite.security.util.FileCertReader. |
static org.bouncycastle.asn1.x509.X509Name |
makeGridCertDN(java.lang.String DN)
Deprecated. Use org.glite.security.util.proxy.ProxyCertificateGenerator |
static org.bouncycastle.asn1.x509.X509Name |
makeGridCertDN(java.lang.String organization,
java.lang.String orgUnit,
java.lang.String commonName,
java.lang.String country,
java.lang.String email)
Deprecated. Use org.glite.security.util.proxy.ProxyCertificateGenerator |
static byte[] |
readPEM(java.io.InputStream is,
java.lang.String hdr,
java.lang.String ftr)
Deprecated. Use org.glite.security.util.FileCertReader |
static byte[] |
readPEM(java.lang.String in,
java.lang.String hdr,
java.lang.String ftr)
Deprecated. Use org.bouncycastle.openssl.PEMWriter |
static void |
saveCertProxyTofile(java.lang.String inCertProxy,
java.lang.String fileLocation,
java.lang.String delegationID,
java.lang.String userDN,
boolean append)
Deprecated. use org.glite.security.util.proxy.ProxyCertificateGenerator. |
static void |
saveCertProxyTofile(java.security.cert.X509Certificate certProxy,
java.lang.String fileLocation)
Deprecated. use org.glite.security.util.proxy.ProxyCertificateGenerator |
static void |
saveCertReqToFile(java.lang.String certReq,
java.lang.String fileLocation)
Deprecated. Use delegation storage, don't write to file. |
static void |
savePrivateKey(java.security.PrivateKey pk,
java.lang.String fileLocation,
java.lang.String delegationID,
java.lang.String userDN)
Deprecated. Use delegation storage. |
static java.lang.String |
toStringVOMSAttrs(java.lang.String[] vomsAttributes)
Returns a single string representation of the VOMS attributes list. |
static java.lang.String |
writePEM(byte[] bytes,
java.lang.String hdr,
java.lang.String ftr)
Deprecated. Use org.bouncycastle.openssl.PEMWriter |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Field Detail |
---|
public static final java.lang.String CERT_CHAIN_CONTENT_TYPE
public static final java.lang.String CERT_REQ_CONTENT_TYPE
Constructor Detail |
---|
public GrDPX509Util()
Method Detail |
---|
public static java.lang.String writePEM(byte[] bytes, java.lang.String hdr, java.lang.String ftr)
bytes
- input streamhdr
- Header delimeter of certificateftr
- footer delimeter of certificate
java.io.IOException
public static byte[] readPEM(java.io.InputStream is, java.lang.String hdr, java.lang.String ftr) throws java.io.IOException
is
- Base64 PEM encoded streamhdr
- Header delimeterftr
- Footer delimeter
java.io.IOException
- if a read error occurspublic static byte[] readPEM(java.lang.String in, java.lang.String hdr, java.lang.String ftr)
in
- Base64 PEM encoded stringhdr
- Header delimeterftr
- Footer delimeter
java.io.IOException
- if a read error occurspublic static org.bouncycastle.asn1.x509.X509Name makeGridCertDN(java.lang.String organization, java.lang.String orgUnit, java.lang.String commonName, java.lang.String country, java.lang.String email)
organization
- OrganizationorgUnit
- Organization UnitcommonName
- X509 Common Namecountry
- Countryemail
- Email address
public static org.bouncycastle.asn1.x509.X509Name makeGridCertDN(java.lang.String DN)
DN
- The client's distiungished name.
public static void saveCertReqToFile(java.lang.String certReq, java.lang.String fileLocation) throws java.io.IOException
certReq
- given certificate request to savefileLocation
- location of certificare request
java.io.IOException
public static void saveCertProxyTofile(java.security.cert.X509Certificate certProxy, java.lang.String fileLocation)
certProxy
- Given proxy certificate to savefileLocation
- location of proxy certificatepublic static void saveCertProxyTofile(java.lang.String inCertProxy, java.lang.String fileLocation, java.lang.String delegationID, java.lang.String userDN, boolean append)
certProxy
- Given proxy certificate to savefileLocation
- location of proxy certificatedelegationID
- userDN
- public static void savePrivateKey(java.security.PrivateKey pk, java.lang.String fileLocation, java.lang.String delegationID, java.lang.String userDN) throws java.io.FileNotFoundException, java.io.IOException
pk
- Given private key to savefileLocation
- location of private keydelegationID
- the ID of the delegationuserDN
- the DN of the client's certificate
java.io.FileNotFoundException
java.io.IOException
public static java.lang.String findProxyInCache(java.lang.String strDirCache, java.lang.String delegationID, java.lang.String userDN)
strDirCache
- cache directorydelegationID
- Delegation IDuserDN
- UserDN
public static java.lang.String findPrivateKeyInCache(java.lang.String strDirCache, java.lang.String delegationID, java.lang.String userDN)
strDirCache
- cache directorydelegationID
- Delegation IDuserDN
- UserDN
public static java.security.cert.X509Certificate loadCertificate(java.io.InputStream cert) throws java.security.NoSuchProviderException
cert
- certificate to load
java.io.IOException
java.security.GeneralSecurityException
java.security.NoSuchProviderException
public static java.security.cert.X509Certificate[] loadCertificateChain(byte[] bCerts) throws java.io.IOException, java.security.cert.CertificateException, java.security.NoSuchProviderException
bCerts
-
java.io.IOException
java.security.GeneralSecurityException
java.security.cert.CertificateException
java.security.NoSuchProviderException
public static java.security.cert.X509Certificate[] loadCertificateChain(java.io.BufferedInputStream bisCerts) throws java.io.IOException, java.security.cert.CertificateException, java.security.NoSuchProviderException
bisCerts
-
java.io.IOException
java.security.GeneralSecurityException
java.security.cert.CertificateException
java.security.NoSuchProviderException
public static org.bouncycastle.jce.PKCS10CertificationRequest loadCertificateRequest(java.lang.String request)
request
- BASE64 PEM encoded string
public static byte[] getFilesBytes(java.io.File file) throws java.io.IOException
file
- File name
java.io.IOException
public static byte[] certChainToByte(java.security.cert.X509Certificate[] x509Cert) throws java.security.cert.CertificateEncodingException
x509Cert
-
java.security.cert.CertificateEncodingException
public static byte[] digest(byte[] input)
input
- The bytes to digest.
public static boolean changeFileMode(java.lang.String file, int mode)
file
- Location of the file to be changed.mode
- New mode for the file.
public static java.lang.String getDefaultCertFile()
public static java.lang.String getDefaultKeyFile()
public static java.lang.String getDefaultCertLocation()
public static java.lang.String getDefaultProxyFile()
public static java.lang.String digestFileName(java.lang.String delegationid_in, java.lang.String DN_in)
delegationid_in
- delegationID of proxy certificateDN_in
- DER encoded DN
public static java.lang.String certReqResponse(java.lang.String certReq)
certReq
- certificate request to response
public static java.lang.String certProxyResponse(java.lang.String proxyCert)
proxyCert
- proxy certificate to response
public static java.lang.String errorResponse(java.lang.String errorMsg)
errorMsg
- to send
public static java.lang.String getDlgeePropertyFile()
public static java.lang.String getDlgorPropertyFile()
public static GrDPStorageFactory getGrDPStorageFactory(java.lang.String factoryClass) throws java.lang.ClassNotFoundException, java.lang.NoSuchMethodException, java.lang.reflect.InvocationTargetException, java.lang.IllegalAccessException, java.lang.InstantiationException
factoryClass
- The full name of the class implementing the storage factory.
java.lang.ClassNotFoundException
- Could not find the specified class in classpath
java.lang.NoSuchMethodException
- Failed to instantiate a factory object
java.lang.reflect.InvocationTargetException
- Failed to instantiate a factory object
java.lang.IllegalAccessException
- Failed to instantiate a factory object
java.lang.InstantiationException
- Failed to instantiate a factory objectpublic static java.lang.String createCertificateRequest(org.bouncycastle.asn1.x509.X509Name subjectDN, java.lang.String sigAlgName, java.security.KeyPair keyPair) throws java.security.GeneralSecurityException
subjectDN
- The dn to include in the certificate request.sigAlgName
- The algorithm to be used.keyPair
- The keypair to include in the certificate.
java.security.GeneralSecurityException
- Failed to generate the certificate request.public static java.lang.String createCertificateRequest(java.security.cert.X509Certificate subjectCert, java.lang.String sigAlgName, java.security.KeyPair keyPair) throws java.security.GeneralSecurityException
subjectDN
- The dn to include in the certificate request.sigAlgName
- The algorithm to be used.keyPair
- The keypair to include in the certificate.
java.security.GeneralSecurityException
- Failed to generate the certificate request.public static java.security.KeyPair getKeyPair(int size)
public static java.lang.String generateSessionID(java.security.PublicKey pk) throws java.security.NoSuchAlgorithmException
pk
- public key of a certificate (request)
java.security.NoSuchAlgorithmException
public static java.lang.String genDlgID(java.lang.String dn, java.lang.String[] vomsAttributes)
dn
- The dn to be used in the hashing process.vomsAttributes
- The list of attributes to be used in the hashing process.
public static java.lang.String[] getVOMSAttributes(org.glite.security.SecurityContext sc)
sc
- The SecurityContext object from which to take the attributes
public static java.lang.String toStringVOMSAttrs(java.lang.String[] vomsAttributes)
vomsAttributes
- The VOMS attributes array
public static java.lang.String[] fromStringVOMSAttrs(java.lang.String vomsAttributesStr)
vomsAttributesStr
- A single string representation of a VOMS attributes list.
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |