Class OpenSSLX509Certificate

java.lang.Object

java.security.cert.Certificate

java.security.cert.X509Certificate

org.conscrypt.OpenSSLX509Certificate

All Implemented Interfaces:

Serializable, X509Extension, DEREncodablePREVIEW

@Internal
public final class OpenSSLX509Certificate
extends X509Certificate

An implementation of X509Certificate based on BoringSSL.

See Also:

• Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from class Certificate

Certificate.CertificateRep

Field Summary

Fields

Modifier and Type	Field	Description
private final long	mContext
private Integer	mHashCode
private final Date	notAfter
private final Date	notBefore
private static final long	serialVersionUID

Constructor Summary

Constructors

Modifier	Constructor	Description
(package private)	OpenSSLX509Certificate(long ctx)
private	OpenSSLX509Certificate(long ctx, Date notBefore, Date notAfter)

Method Summary

Modifier and Type	Method	Description
private static Collection<List<?>>	alternativeNameArrayToList(Object[][] altNameArray)
void	checkValidity()
void	checkValidity(Date date)
boolean	equals(Object other)
protected void	finalize()
static OpenSSLX509Certificate	fromCertificate(Certificate cert)
static List<OpenSSLX509Certificate>	fromPkcs7DerInputStream(InputStream is)
static List<OpenSSLX509Certificate>	fromPkcs7PemInputStream(InputStream is)
static OpenSSLX509Certificate	fromX509Der(byte[] encoded)
static OpenSSLX509Certificate	fromX509DerInputStream(InputStream is)
static OpenSSLX509Certificate	fromX509PemInputStream(InputStream is)
int	getBasicConstraints()
long	getContext()	Returns the raw pointer to the X509 context for use in JNI calls.
Set<String>	getCriticalExtensionOIDs()
byte[]	getEncoded()
List<String>	getExtendedKeyUsage()
byte[]	getExtensionValue(String oid)
Collection<List<?>>	getIssuerAlternativeNames()
Principal	getIssuerDN()
boolean[]	getIssuerUniqueID()
X500Principal	getIssuerX500Principal()
boolean[]	getKeyUsage()
Set<String>	getNonCriticalExtensionOIDs()
Date	getNotAfter()
Date	getNotBefore()
PublicKey	getPublicKey()
BigInteger	getSerialNumber()
String	getSigAlgName()
String	getSigAlgOID()
byte[]	getSigAlgParams()
byte[]	getSignature()
Collection<List<?>>	getSubjectAlternativeNames()
Principal	getSubjectDN()
boolean[]	getSubjectUniqueID()
X500Principal	getSubjectX500Principal()
byte[]	getTBSCertificate()
int	getVersion()
int	hashCode()
boolean	hasUnsupportedCriticalExtension()
private static Date	toDate(long asn1time)
String	toString()
void	verify(PublicKey key)
void	verify(PublicKey key, String sigProvider)
void	verify(PublicKey key, Provider sigProvider)
private void	verifyInternal(PublicKey key, String sigProvider)
private void	verifyOpenSSL(OpenSSLKey pkey)
OpenSSLX509Certificate	withDeletedExtension(String oid)	Delete an extension.

Methods inherited from class Certificate

getType, writeReplace

Methods inherited from class Object

clone, getClass, notify, notifyAll, wait, wait, wait

Field Details

serialVersionUID

private static final long serialVersionUID

See Also:

• Constant Field Values

mContext

private final transient long mContext

mHashCode

private transient Integer mHashCode

notBefore

private final Date notBefore

notAfter

private final Date notAfter

Constructor Details

OpenSSLX509Certificate

OpenSSLX509Certificate(long ctx)
                throws OpenSSLX509CertificateFactory.ParsingException

Throws:

OpenSSLX509CertificateFactory.ParsingException

OpenSSLX509Certificate

private OpenSSLX509Certificate(long ctx,
 Date notBefore,
 Date notAfter)

Method Details

toDate

private static Date toDate(long asn1time)
                    throws OpenSSLX509CertificateFactory.ParsingException

Throws:

OpenSSLX509CertificateFactory.ParsingException

fromX509DerInputStream

public static OpenSSLX509Certificate fromX509DerInputStream(InputStream is)
                                                     throws OpenSSLX509CertificateFactory.ParsingException

Throws:

OpenSSLX509CertificateFactory.ParsingException

fromX509Der

public static OpenSSLX509Certificate fromX509Der(byte[] encoded)
                                          throws CertificateEncodingException

Throws:

CertificateEncodingException

fromPkcs7DerInputStream

public static List<OpenSSLX509Certificate> fromPkcs7DerInputStream(InputStream is)
                                                            throws OpenSSLX509CertificateFactory.ParsingException

Throws:

OpenSSLX509CertificateFactory.ParsingException

fromX509PemInputStream

public static OpenSSLX509Certificate fromX509PemInputStream(InputStream is)
                                                     throws OpenSSLX509CertificateFactory.ParsingException

Throws:

OpenSSLX509CertificateFactory.ParsingException

fromPkcs7PemInputStream

public static List<OpenSSLX509Certificate> fromPkcs7PemInputStream(InputStream is)
                                                            throws OpenSSLX509CertificateFactory.ParsingException

Throws:

OpenSSLX509CertificateFactory.ParsingException

fromCertificate

public static OpenSSLX509Certificate fromCertificate(Certificate cert)
                                              throws CertificateEncodingException

Throws:

CertificateEncodingException

getCriticalExtensionOIDs

public Set<String> getCriticalExtensionOIDs()

getExtensionValue

public byte[] getExtensionValue(String oid)

getNonCriticalExtensionOIDs

public Set<String> getNonCriticalExtensionOIDs()

hasUnsupportedCriticalExtension

public boolean hasUnsupportedCriticalExtension()

checkValidity

public void checkValidity()
                   throws CertificateExpiredException,
CertificateNotYetValidException

Specified by:

checkValidity in class X509Certificate

Throws:

CertificateExpiredException

CertificateNotYetValidException

checkValidity

public void checkValidity(Date date)
                   throws CertificateExpiredException,
CertificateNotYetValidException

Specified by:

checkValidity in class X509Certificate

Throws:

CertificateExpiredException

CertificateNotYetValidException

getVersion

public int getVersion()

Specified by:

getVersion in class X509Certificate

getSerialNumber

public BigInteger getSerialNumber()

Specified by:

getSerialNumber in class X509Certificate

getIssuerDN

public Principal getIssuerDN()

Specified by:

getIssuerDN in class X509Certificate

getSubjectDN

public Principal getSubjectDN()

Specified by:

getSubjectDN in class X509Certificate

getNotBefore

public Date getNotBefore()

Specified by:

getNotBefore in class X509Certificate

getNotAfter

public Date getNotAfter()

Specified by:

getNotAfter in class X509Certificate

getTBSCertificate

public byte[] getTBSCertificate()
                         throws CertificateEncodingException

Specified by:

getTBSCertificate in class X509Certificate

Throws:

CertificateEncodingException

getSignature

public byte[] getSignature()

Specified by:

getSignature in class X509Certificate

getSigAlgName

public String getSigAlgName()

Specified by:

getSigAlgName in class X509Certificate

getSigAlgOID

public String getSigAlgOID()

Specified by:

getSigAlgOID in class X509Certificate

getSigAlgParams

public byte[] getSigAlgParams()

Specified by:

getSigAlgParams in class X509Certificate

getIssuerUniqueID

public boolean[] getIssuerUniqueID()

Specified by:

getIssuerUniqueID in class X509Certificate

getSubjectUniqueID

public boolean[] getSubjectUniqueID()

Specified by:

getSubjectUniqueID in class X509Certificate

getKeyUsage

public boolean[] getKeyUsage()

Specified by:

getKeyUsage in class X509Certificate

getBasicConstraints

public int getBasicConstraints()

Specified by:

getBasicConstraints in class X509Certificate

getEncoded

public byte[] getEncoded()
                  throws CertificateEncodingException

Specified by:

getEncoded in class Certificate

Throws:

CertificateEncodingException

verifyOpenSSL

private void verifyOpenSSL(OpenSSLKey pkey)
                    throws CertificateException,
NoSuchAlgorithmException,
InvalidKeyException,
SignatureException

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

verifyInternal

private void verifyInternal(PublicKey key,
 String sigProvider)
                     throws CertificateException,
NoSuchAlgorithmException,
InvalidKeyException,
NoSuchProviderException,
SignatureException

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

NoSuchProviderException

SignatureException

verify

public void verify(PublicKey key)
            throws CertificateException,
NoSuchAlgorithmException,
InvalidKeyException,
NoSuchProviderException,
SignatureException

Specified by:

verify in class Certificate

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

NoSuchProviderException

SignatureException

verify

public void verify(PublicKey key,
 String sigProvider)
            throws CertificateException,
NoSuchAlgorithmException,
InvalidKeyException,
NoSuchProviderException,
SignatureException

Specified by:

verify in class Certificate

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

NoSuchProviderException

SignatureException

verify

public void verify(PublicKey key,
 Provider sigProvider)
            throws CertificateException,
NoSuchAlgorithmException,
InvalidKeyException,
SignatureException

Overrides:

verify in class X509Certificate

Throws:

CertificateException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

toString

public String toString()

Specified by:

toString in class Certificate

getPublicKey

public PublicKey getPublicKey()

Specified by:

getPublicKey in class Certificate

getIssuerX500Principal

public X500Principal getIssuerX500Principal()

Overrides:

getIssuerX500Principal in class X509Certificate

getSubjectX500Principal

public X500Principal getSubjectX500Principal()

Overrides:

getSubjectX500Principal in class X509Certificate

getExtendedKeyUsage

public List<String> getExtendedKeyUsage()
                                 throws CertificateParsingException

Overrides:

getExtendedKeyUsage in class X509Certificate

Throws:

CertificateParsingException

alternativeNameArrayToList

private static Collection<List<?>> alternativeNameArrayToList(Object[][] altNameArray)

getSubjectAlternativeNames

public Collection<List<?>> getSubjectAlternativeNames()
                                               throws CertificateParsingException

Overrides:

getSubjectAlternativeNames in class X509Certificate

Throws:

CertificateParsingException

getIssuerAlternativeNames

public Collection<List<?>> getIssuerAlternativeNames()
                                              throws CertificateParsingException

Overrides:

getIssuerAlternativeNames in class X509Certificate

Throws:

CertificateParsingException

equals

public boolean equals(Object other)

Overrides:

equals in class Certificate

hashCode

public int hashCode()

Overrides:

hashCode in class Certificate

getContext

public long getContext()

Returns the raw pointer to the X509 context for use in JNI calls. The life cycle of this native pointer is managed by the OpenSSLX509Certificate instance and must not be destroyed or freed by users of this API.

withDeletedExtension

public OpenSSLX509Certificate withDeletedExtension(String oid)

Delete an extension. A modified copy of the certificate is returned. The original object is unchanged. If the extension is not present, an unmodified copy is returned.

finalize

protected void finalize()
                 throws Throwable

Overrides:

finalize in class Object

Throws:

Throwable