|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectjava.security.KeyStoreSpi
com.ibm.crypto.provider.PKCS12KeyStoreV2
public class PKCS12KeyStoreV2
A KeyStore implementation of PKCS#12 files. The keystore type is PKCS12KS.
Constructor Summary | |
---|---|
PKCS12KeyStoreV2()
|
Method Summary | |
---|---|
Enumeration |
engineAliases()
Lists all the alias names of this keystore. |
boolean |
engineContainsAlias(String alias)
Checks if the given alias exists in this keystore. |
void |
engineDeleteEntry(String alias)
Deletes the entry identified by the given alias from this keystore. |
Certificate |
engineGetCertificate(String alias)
Returns the certificate associated with the given alias. |
String |
engineGetCertificateAlias(Certificate cert)
Returns the (alias) name of the first keystore entry whose certificate matches the given certificate. |
Certificate[] |
engineGetCertificateChain(String alias)
Returns the certificate chain associated with the given alias. |
Date |
engineGetCreationDate(String alias)
This method is not supported. |
Key |
engineGetKey(String alias,
char[] password)
Returns the key associated with the given alias, using the given password to recover it. |
boolean |
engineIsCertificateEntry(String alias)
Returns true if the entry identified by the given alias is a trusted certificate entry, and false otherwise. |
boolean |
engineIsKeyEntry(String alias)
Returns true if the entry identified by the given alias is a key entry, and false otherwise. |
void |
engineLoad(InputStream stream,
char[] password)
Loads the keystore from the given input stream. |
void |
engineSetCertificateEntry(String alias,
Certificate cert)
Assigns the given certificate to the given alias. |
void |
engineSetKeyEntry(String alias,
byte[] key,
Certificate[] chain)
This operation is not supported. |
void |
engineSetKeyEntry(String alias,
Key key,
char[] password,
Certificate[] chain)
Assigns the given key to the given alias, protecting it with the given password. |
int |
engineSize()
Retrieves the number of entries in this keystore. |
void |
engineStore(OutputStream stream,
char[] password)
Stores this keystore to the given output stream, and protects its integrity with the given password. |
Methods inherited from class java.security.KeyStoreSpi |
---|
engineEntryInstanceOf, engineGetEntry, engineLoad, engineSetEntry, engineStore |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Constructor Detail |
---|
public PKCS12KeyStoreV2()
Method Detail |
---|
public Key engineGetKey(String alias, char[] password) throws NoSuchAlgorithmException, UnrecoverableKeyException
engineGetKey
in class KeyStoreSpi
alias
- the alias namepassword
- the password for recovering the key
NoSuchAlgorithmException
- if the algorithm for recovering the
key cannot be found
UnrecoverableKeyException
- if the key cannot be recovered
(e.g., the given password is wrong).public Certificate[] engineGetCertificateChain(String alias)
engineGetCertificateChain
in class KeyStoreSpi
alias
- the alias name
public Certificate engineGetCertificate(String alias)
If the given alias name identifies a trusted certificate entry, the certificate associated with that entry is returned. If the given alias name identifies a key entry, the first element of the certificate chain of that entry is returned, or null if that entry does not have a certificate chain.
engineGetCertificate
in class KeyStoreSpi
alias
- the alias name
public Date engineGetCreationDate(String alias)
engineGetCreationDate
in class KeyStoreSpi
public void engineSetKeyEntry(String alias, Key key, char[] password, Certificate[] chain) throws KeyStoreException
If the given key is of type java.security.PrivateKey
,
it must be accompanied by a certificate chain certifying the
corresponding public key.
If the given alias already exists, the keystore information associated with it is overridden by the given key (and possibly certificate chain).
engineSetKeyEntry
in class KeyStoreSpi
alias
- the alias namekey
- the key to be associated with the aliaspassword
- the password to protect the keychain
- the certificate chain for the corresponding public
key (only required if the given key is of type
java.security.PrivateKey
).
KeyStoreException
- if the given key cannot be protected, or
this operation fails for some other reasonpublic void engineSetKeyEntry(String alias, byte[] key, Certificate[] chain) throws KeyStoreException
If the protected key is of type
java.security.PrivateKey
,
it must be accompanied by a certificate chain certifying the
corresponding public key.
If the given alias already exists, the keystore information associated with it is overridden by the given key (and possibly certificate chain).
engineSetKeyEntry
in class KeyStoreSpi
alias
- the alias namekey
- the key (in protected format) to be associated with the aliaschain
- the certificate chain for the corresponding public
key (only useful if the protected key is of type
java.security.PrivateKey
).
KeyStoreException
- if this operation fails.public void engineSetCertificateEntry(String alias, Certificate cert) throws KeyStoreException
If the given alias already exists in this keystore and identifies a trusted certificate entry, the certificate associated with it is overridden by the given certificate.
engineSetCertificateEntry
in class KeyStoreSpi
alias
- the alias namecert
- the certificate
KeyStoreException
- if the given alias already exists and does
not identify a trusted certificate entry, or this operation
fails for some other reason.public void engineDeleteEntry(String alias) throws KeyStoreException
engineDeleteEntry
in class KeyStoreSpi
alias
- the alias name
KeyStoreException
- if the entry cannot be removed.public Enumeration engineAliases()
engineAliases
in class KeyStoreSpi
public boolean engineContainsAlias(String alias)
engineContainsAlias
in class KeyStoreSpi
alias
- the alias name
public int engineSize()
engineSize
in class KeyStoreSpi
public boolean engineIsKeyEntry(String alias)
engineIsKeyEntry
in class KeyStoreSpi
public boolean engineIsCertificateEntry(String alias)
engineIsCertificateEntry
in class KeyStoreSpi
public String engineGetCertificateAlias(Certificate cert)
This method attempts to match the given certificate with each keystore entry. The entry being considered is a key entry, the given certificate is compared to the first element of that entry's certificate chain (if a chain exists).
engineGetCertificateAlias
in class KeyStoreSpi
cert
- the certificate to match with.
public void engineStore(OutputStream stream, char[] password) throws IOException, NoSuchAlgorithmException, CertificateException
engineStore
in class KeyStoreSpi
stream
- the output stream to which this keystore is written.password
- the password to generate the keystore integrity check
IOException
- if there was an I/O problem with data
NoSuchAlgorithmException
- if the appropriate data integrity
algorithm could not be found
CertificateException
- if any of the certificates included in
the keystore data could not be storedpublic void engineLoad(InputStream stream, char[] password) throws IOException, NoSuchAlgorithmException, CertificateException
If a password is given, it is used to check the integrity of the keystore data. Otherwise, the integrity of the keystore is not checked.
engineLoad
in class KeyStoreSpi
stream
- the input stream from which the keystore is loadedpassword
- the password used to check the integrity of
the keystore.
IOException
- if there is an I/O or format problem with the
keystore data
NoSuchAlgorithmException
- if the algorithm used to check
the integrity of the keystore cannot be found
CertificateException
- if any of the certificates in the
keystore could not be loaded
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |