eu.emi.security.authn.x509.proxy

Class ProxyCertificateOptions

java.lang.Object

eu.emi.security.authn.x509.proxy.BaseProxyCertificateOptions

eu.emi.security.authn.x509.proxy.ProxyCertificateOptions

public class ProxyCertificateOptions
extends BaseProxyCertificateOptions

Holds parameters which are used to create a proxy certificate using only a certificate chain.

Author:

J. Hahkala, K. Benedyczak

See Also:

ProxyGenerator

Field Summary

Fields

Modifier and Type	Field and Description
static int	DEFAULT_KEY_LENGTH
static int	DEFAULT_LONG_KEY_LENGTH
static int	LONG_PROXY

Fields inherited from class eu.emi.security.authn.x509.proxy.BaseProxyCertificateOptions

DEFAULT_KEY_USAGE, DEFAULT_LIFETIME, UNLIMITED_PROXY_LENGTH

Constructor Summary

Constructors

Constructor and Description
ProxyCertificateOptions(X509Certificate[] parentCertChain) Create a new proxy cert based on the parent cert chain.

Method Summary

Modifier and Type	Method and Description
int	getKeyLength() Gets the length of the keys to be generated.
PublicKey	getPublicKey() Returns the manually set public key for the proxy.
void	setKeyLength(int length) Sets the length of the keys to be generated, only used if the keys are not set separately.
void	setPublicKey(PublicKey pubKey) Manually sets public key which shall be included in the generated proxy

Methods inherited from class eu.emi.security.authn.x509.proxy.BaseProxyCertificateOptions

addExtension, getAttributeCertificates, getExtensions, getLifetime, getNotBefore, getParentCertChain, getPolicy, getProxyKeyUsageMask, getProxyPathLimit, getProxyTracingIssuer, getProxyTracingSubject, getSAMLAssertion, getSerialNumber, getSourceRestrictionExcludedAddresses, getSourceRestrictionPermittedAddresses, getTargetRestrictionExcludedAddresses, getTargetRestrictionPermittedAddresses, getType, isLimited, setAttributeCertificates, setLifetime, setLifetime, setLimited, setPolicy, setProxyKeyUsageMask, setProxyPathLimit, setProxyTracingIssuer, setProxyTracingSubject, setSAMLAssertion, setSerialNumber, setSourceRestrictionExcludedAddresses, setSourceRestrictionExcludedAddresses, setSourceRestrictionPermittedAddresses, setSourceRestrictionPermittedAddresses, setTargetRestrictionExcludedAddresses, setTargetRestrictionExcludedAddresses, setTargetRestrictionPermittedAddresses, setTargetRestrictionPermittedAddresses, setType, setValidityBounds

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_KEY_LENGTH

public static final int DEFAULT_KEY_LENGTH

See Also:

Constant Field Values

DEFAULT_LONG_KEY_LENGTH

public static final int DEFAULT_LONG_KEY_LENGTH

See Also:

Constant Field Values

LONG_PROXY

public static final int LONG_PROXY

See Also:

Constant Field Values

Constructor Detail

ProxyCertificateOptions

public ProxyCertificateOptions(X509Certificate[] parentCertChain)

Create a new proxy cert based on the parent cert chain. Useful when locally creating a proxy from existing cert chain.

Parameters:

parentCertChain - parent certificate chain

Method Detail

setKeyLength

public void setKeyLength(int length)

Sets the length of the keys to be generated, only used if the keys are not set separately. If this method is not used, the default is 1024 bits.

Parameters:

length - to be set

getKeyLength

public int getKeyLength()

Gets the length of the keys to be generated. By default it returns value of DEFAULT_KEY_LENGTH, or, if proxy liftime exceeds LONG_PROXY, DEFAULT_LONG_KEY_LENGTH.

Returns:

the currently set key length

setPublicKey

public void setPublicKey(PublicKey pubKey)

Manually sets public key which shall be included in the generated proxy

Parameters:

pubKey - the public key to set

getPublicKey

public PublicKey getPublicKey()

Returns the manually set public key for the proxy.

Returns:

the public key