org.apache.clerezza.ssl.keygen

Interface KeygenService

All Known Implementing Classes:

BouncyKeygenService, StaticKeygenService

public interface KeygenService

A service to get Certificates from Certification Requests These can the be used to get information about the CSR's public key, and generate a certifiate to return to the server. Question: should the methods be throwing exceptions or should they log errors and return null?

Author:

Henry J. Story

Field Summary

Fields

Modifier and Type	Field and Description
static String	issuer

Method Summary

Methods

Modifier and Type	Method and Description
Certificate	createFromCRMF(String crmfReq) CRMF requests are produced by the javascript generateCRMFRequest() method in Netscape and are documented by RFC 2511.
Certificate	createFromPEM(String csr) Creates a certificate stub from the given PEM CSR.
Certificate	createFromSpkac(String spkac) Creates a certificate stub from the given SPKAC CSR.

Field Detail

issuer

static final String issuer

See Also:

Constant Field Values

Method Detail

createFromPEM

Certificate createFromPEM(String csr)

Creates a certificate stub from the given PEM CSR. The returned certificate will be filled out with info from the CSR and a number of other defaults. Other information may then be added programatically before generating a certificate to return.

Internet Explorer sends PEM CSRs to the server.

Parameters:

csr - a PEM Certificate Signing Request

Returns:

a certificate using the CSR, and cert defaults

createFromSpkac

Certificate createFromSpkac(String spkac)

Creates a certificate stub from the given SPKAC CSR. The returned certificate will be filled out with info from the CSR and a number of other defaults. Other information may then be added programatically before generating a certificate to return.

Safari, Firefox, Opera, return through the <keygen> element an SPKAC request (see the specification in html5)

Parameters:

spkac - a SPKAC Certificate Signing Request

Returns:

a certificate using the CSR, and cert defaults

createFromCRMF

Certificate createFromCRMF(String crmfReq)

CRMF requests are produced by the javascript generateCRMFRequest() method in Netscape and are documented by RFC 2511.

Using this method may be needed when the server has to produce XHTML (should be rare!) as the keygen tag in Netscape browsers is only supported by html. This should be fixed soon, now that html5 supports the keygen element. For progress on this issue check bug report 101019.

A CRMF request can contain more details about the certificate, but those would better be passed using a form, as in the keygen examples, the server then setting those fields directly on the returned request. Currently we extract only the public key to generate the returned Certificate.

Parameters:

crmfReq - the request

Returns:

a certificate that may be filled in with some extra details in the requests such as webid