Class JssSubsystem

java.lang.Object

com.netscape.cmscore.security.JssSubsystem

All Implemented Interfaces:

ICryptoSubsystem

public final class JssSubsystem
extends Object
implements ICryptoSubsystem

Subsystem for initializing JSS

Version:

$Revision$ $Date$

Field Summary

Fields

Modifier and Type	Field	Description
protected JssSubsystemConfig	config
static final String	ID
static org.slf4j.Logger	logger

Method Summary

Modifier and Type	Method	Description
void	addEntropy(int bits)	Adds the specified number of bits of entropy from the system entropy generator to the RNG of the default PKCS#11 RNG token.
void	checkCertificateExt(String ext)	Checks if the given base-64 encoded string contains an extension or a sequence of extensions.
void	checkKeyLength(String keyType, int keyLength, String certType, int minRSAKeyLen)
void	deleteCACert(String nickname, String notAfterTime)	Delete the CA certificate from the perm database.
void	deleteCert(String nickname, String notAfterTime)	Delete any certificate from the any token.
void	deleteRootCert(String nickname, String serialno, String issuername)
void	deleteTokenCertificate(String nickname, String pathname)	Deletes certificate of the given nickname.
void	deleteUserCert(String nickname, String serialno, String issuername)
org.mozilla.jss.netscape.security.x509.AlgorithmId	getAlgorithmId(String algname, IConfigStore store)	Retrieves CA's signing algorithm id.
String	getAllCerts()	Retrieves a list of nicknames of certificates that are in the installed tokens.
NameValuePairs	getAllCertsManage()	Gets all certificates on all tokens for Certificate Database Management.
NameValuePairs	getCACerts()	Gets all CA certificates on all tokens.
org.mozilla.jss.crypto.PQGParams	getCAPQG(int keysize, IConfigStore store)	Retrieves PQG parameters based on key size.
org.mozilla.jss.netscape.security.x509.CertificateExtensions	getCertExtensions(String tokenname, String nickname)	Retrieves extensions of the certificate that is identified by the given nickname.
org.mozilla.jss.crypto.X509Certificate	getCertificate(String nickname, String serialno, String issuerName)
NameValuePairs	getCertInfo(String b64E)
String	getCertList(String name)
String	getCertListWithoutTokenName(String name)	Retrieves all certificates.
String	getCertPrettyPrint(String nickname, String serialno, String issuerName, Locale locale)
String	getCertPrettyPrint(String nickname, String date, Locale locale)	Retrieves certificate in pretty-print format by the nickname.
String	getCertPrettyPrint(String b64E, Locale locale)	Retrieves the certificate in the pretty print format.
String	getCertPrettyPrintAndFingerPrint(String nickname, String serialno, String issuerName, Locale locale)
String	getCertRequest(String subjectName, KeyPair kp)	Generates certificate request from the given key pair.
String	getCertSubjectName(String tokenname, String nickname)	Retrieves subject name of the certificate that is identified by the given nickname.
String	getCipherPreferences()	Retrieves the cipher preferences.
String	getCipherVersion()	Retrieves the SSL cipher version.
JssSubsystemConfig	getConfigStore()	Retrieves a configuration store of this subsystem.
KeyPair	getECCKeyPair(KeyCertData properties)	Generates an ECC key pair based on the given parameters.
KeyPair	getECCKeyPair(org.mozilla.jss.crypto.CryptoToken token, String keyCurve, String certType)	Generates an ECC key pair based on the given parameters.
String	getECType(String certType)
org.mozilla.jss.netscape.security.x509.CertificateExtensions	getExtensions(String tokenname, String nickname)	Retrieves extensions of the certificate that is identified by the given nickname.
String	getId()
static JssSubsystem	getInstance()
String	getInternalTokenName()	Retrieves the token name of the internal (software) token.
KeyPair	getKeyPair(KeyCertData properties)	Generates a key pair based on the given parameters.
KeyPair	getKeyPair(String nickname)	Retrieves the key pair based on the given nickname.
KeyPair	getKeyPair(org.mozilla.jss.crypto.CryptoToken token, String alg, int keySize)	Generates a key pair based on the given parameters.
KeyPair	getKeyPair(org.mozilla.jss.crypto.CryptoToken token, String alg, int keySize, org.mozilla.jss.crypto.PQGParams pqg)	Generates a key pair based on the given parameters.
org.mozilla.jss.crypto.PQGParams	getPQG(int keysize)	Retrieves PQG parameters based on key size.
SecureRandom	getRandomNumberGenerator()
NameValuePairs	getRootCerts()
String	getRootCertTrustBit(String nickname, String serialno, String issuerName)
String	getSignatureAlgorithm(String nickname)	Retrieves the signature algorithm of the certificate named by the given nickname.
org.mozilla.jss.netscape.security.x509.X509CertImpl	getSignedCert(KeyCertData data, String certType, PrivateKey priKey)	Signs the certificate template into the given data and returns a signed certificate.
String	getSubjectDN(String nickname)	Retrieves the subject DN of the certificate identified by the nickname.
String	getTokenList()	Retrieves a list of currently registered token names.
NameValuePairs	getUserCerts()
void	importCert(String b64E, String nickname, String certType)	Imports certificate into the server.
void	importCert(org.mozilla.jss.netscape.security.x509.X509CertImpl signedCert, String nickname, String certType)	Imports certificate into the server.
void	init(JssSubsystemConfig config)	Initializes the Jss security subsystem.
boolean	isCACert(String fullNickname)	Checks to see if the certificate of the given nickname is a CA certificate.
String	isCipherFortezza()	Checks if fortezza is enabled.
boolean	isTokenLoggedIn(String name)	Checks if the given token is logged in.
void	isX500DN(String dn)	Checks if the given dn is a valid distinguished name.
void	loggedInToken(String tokenName, String pwd)	Logs into token.
static void	main(String[] args)
void	obscureBytes(byte[] memory)
void	obscureBytes(byte[] memory, String method)
void	obscureChars(char[] memory)
void	setCipherPreferences(String cipherPrefs)	Sets the current SSL cipher preferences.
void	setId(String id)
void	setRootCertTrust(String nickname, String serialno, String issuerName, String trust)
void	shutdown()	Shutdowns this subsystem.
void	startup()	Starts up this service.
void	trustCert(String nickname, String date, String trust)	Trusts a certificate for all available purposes.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

public static org.slf4j.Logger logger

ID

public static final String ID

See Also:

• Constant Field Values

config

protected JssSubsystemConfig config

Method Details

getInstance

public static JssSubsystem getInstance()

getId

public String getId()

setId

public void setId(String id)
           throws EBaseException

Throws:

EBaseException

addEntropy

public void addEntropy(int bits)
                throws org.mozilla.jss.util.NotImplementedException,
IOException,
org.mozilla.jss.crypto.TokenException

Description copied from interface: ICryptoSubsystem

Adds the specified number of bits of entropy from the system entropy generator to the RNG of the default PKCS#11 RNG token. The default token is set using the modutil command. Note that the system entropy generator (usually /dev/random) will block until sufficient entropy is collected.

Specified by:

addEntropy in interface ICryptoSubsystem

Parameters:

bits - number of bits of entropy

Throws:

org.mozilla.jss.util.NotImplementedException - If the Crypto device does not support adding entropy

IOException - If there was a problem reading from the /dev/random

org.mozilla.jss.crypto.TokenException - If there was some other problem with the Crypto device

init

public void init(JssSubsystemConfig config)
          throws EBaseException

Initializes the Jss security subsystem.

Throws:

EBaseException

getRandomNumberGenerator

public SecureRandom getRandomNumberGenerator()

obscureBytes

public void obscureBytes(byte[] memory)

obscureBytes

public void obscureBytes(byte[] memory,
 String method)

obscureChars

public void obscureChars(char[] memory)

getCipherVersion

public String getCipherVersion()
                        throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves the SSL cipher version.

Specified by:

getCipherVersion in interface ICryptoSubsystem

Returns:

cipher version (i.e. "cipherdomestic")

Throws:

EBaseException

getCipherPreferences

public String getCipherPreferences()
                            throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves the cipher preferences.

Specified by:

getCipherPreferences in interface ICryptoSubsystem

Returns:

cipher preferences (i.e. "rc4export,rc2export,...")

Throws:

EBaseException

getECType

public String getECType(String certType)
                 throws EBaseException

Throws:

EBaseException

isCipherFortezza

public String isCipherFortezza()
                        throws EBaseException

Description copied from interface: ICryptoSubsystem

Checks if fortezza is enabled.

Specified by:

isCipherFortezza in interface ICryptoSubsystem

Returns:

"true" if fortezza is enabled

Throws:

EBaseException

setCipherPreferences

public void setCipherPreferences(String cipherPrefs)
                          throws EBaseException

Description copied from interface: ICryptoSubsystem

Sets the current SSL cipher preferences.

Specified by:

setCipherPreferences in interface ICryptoSubsystem

Parameters:

cipherPrefs - cipher preferences (i.e. "rc4export,rc2export,...")

Throws:

EBaseException - failed to set cipher preferences

getConfigStore

public JssSubsystemConfig getConfigStore()

Retrieves a configuration store of this subsystem.

startup

public void startup()
             throws EBaseException

Starts up this service.

Throws:

EBaseException

shutdown

public void shutdown()

Shutdowns this subsystem.

getInternalTokenName

public String getInternalTokenName()
                            throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves the token name of the internal (software) token.

Specified by:

getInternalTokenName in interface ICryptoSubsystem

Returns:

the token name

Throws:

EBaseException - failed to retrieve token name

getTokenList

public String getTokenList()
                    throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves a list of currently registered token names.

Specified by:

getTokenList in interface ICryptoSubsystem

Returns:

list of token names

Throws:

EBaseException - failed to retrieve token list

isTokenLoggedIn

public boolean isTokenLoggedIn(String name)
                        throws EBaseException

Description copied from interface: ICryptoSubsystem

Checks if the given token is logged in.

Specified by:

isTokenLoggedIn in interface ICryptoSubsystem

Parameters:

name - token name

Returns:

true if token is logged in

Throws:

EBaseException - failed to login

loggedInToken

public void loggedInToken(String tokenName,
 String pwd)
                   throws EBaseException

Description copied from interface: ICryptoSubsystem

Logs into token.

Specified by:

loggedInToken in interface ICryptoSubsystem

Parameters:

tokenName - name of the token

pwd - token password

Throws:

EBaseException - failed to login

getCertSubjectName

public String getCertSubjectName(String tokenname,
 String nickname)
                          throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves subject name of the certificate that is identified by the given nickname.

Specified by:

getCertSubjectName in interface ICryptoSubsystem

Parameters:

tokenname - name of token where the nickname is valid

nickname - nickname of the certificate

Returns:

subject name

Throws:

EBaseException - failed to get subject name

getAllCerts

public String getAllCerts()
                   throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves a list of nicknames of certificates that are in the installed tokens.

Specified by:

getAllCerts in interface ICryptoSubsystem

Returns:

a list of comma-separated nicknames

Throws:

EBaseException - failed to retrieve nicknames

getCertListWithoutTokenName

public String getCertListWithoutTokenName(String name)
                                   throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves all certificates. The result list will not contain the token tag.

Specified by:

getCertListWithoutTokenName in interface ICryptoSubsystem

Parameters:

name - token name

Returns:

list of certificates without token tag

Throws:

EBaseException - failed to retrieve

getCertList

public String getCertList(String name)
                   throws EBaseException

Throws:

EBaseException

getAlgorithmId

public org.mozilla.jss.netscape.security.x509.AlgorithmId getAlgorithmId(String algname,
 IConfigStore store)
                                                                  throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves CA's signing algorithm id. If it is DSA algorithm, algorithm is constructed by reading the parameters ca.dsaP, ca.dsaQ, ca.dsaG.

Specified by:

getAlgorithmId in interface ICryptoSubsystem

Parameters:

algname - DSA or RSA

store - configuration store.

Returns:

algorithm id

Throws:

EBaseException - failed to retrieve algorithm id

getSignatureAlgorithm

public String getSignatureAlgorithm(String nickname)
                             throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves the signature algorithm of the certificate named by the given nickname.

Specified by:

getSignatureAlgorithm in interface ICryptoSubsystem

Parameters:

nickname - nickname of the certificate

Returns:

signature algorithm

Throws:

EBaseException - failed to retrieve signature

getKeyPair

public KeyPair getKeyPair(String nickname)
                   throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves the key pair based on the given nickname.

Specified by:

getKeyPair in interface ICryptoSubsystem

Parameters:

nickname - nickname of the public key

Throws:

EBaseException - failed to retrieve key pair

getKeyPair

public KeyPair getKeyPair(org.mozilla.jss.crypto.CryptoToken token,
 String alg,
 int keySize)
                   throws EBaseException

Description copied from interface: ICryptoSubsystem

Generates a key pair based on the given parameters.

Specified by:

getKeyPair in interface ICryptoSubsystem

Parameters:

token - token where key is generated

alg - key algorithm

keySize - key size

Returns:

key pair

Throws:

EBaseException - failed to generate key pair

getKeyPair

public KeyPair getKeyPair(org.mozilla.jss.crypto.CryptoToken token,
 String alg,
 int keySize,
 org.mozilla.jss.crypto.PQGParams pqg)
                   throws EBaseException

Description copied from interface: ICryptoSubsystem

Generates a key pair based on the given parameters.

Specified by:

getKeyPair in interface ICryptoSubsystem

Parameters:

token - token where key is generated

alg - key algorithm

keySize - key size

pqg - pqg parameters if DSA key, otherwise null

Returns:

key pair

Throws:

EBaseException - failed to generate key pair

isX500DN

public void isX500DN(String dn)
              throws EBaseException

Description copied from interface: ICryptoSubsystem

Checks if the given dn is a valid distinguished name.

Specified by:

isX500DN in interface ICryptoSubsystem

Parameters:

dn - distinguished name

Throws:

EBaseException - failed to check

getCertRequest

public String getCertRequest(String subjectName,
 KeyPair kp)
                      throws EBaseException

Description copied from interface: ICryptoSubsystem

Generates certificate request from the given key pair.

Specified by:

getCertRequest in interface ICryptoSubsystem

Parameters:

subjectName - subject name to use in the request

kp - key pair that contains public key material

Returns:

certificate request in base-64 encoded format

Throws:

EBaseException - failed to generate request

importCert

public void importCert(String b64E,
 String nickname,
 String certType)
                throws EBaseException

Description copied from interface: ICryptoSubsystem

Imports certificate into the server.

Specified by:

importCert in interface ICryptoSubsystem

Parameters:

b64E - certificate in mime-64 encoded format

nickname - nickname for the importing certificate

certType - certificate type

Throws:

EBaseException - failed to import certificate

getKeyPair

public KeyPair getKeyPair(KeyCertData properties)
                   throws EBaseException

Description copied from interface: ICryptoSubsystem

Generates a key pair based on the given parameters.

Specified by:

getKeyPair in interface ICryptoSubsystem

Parameters:

properties - key parameters

Returns:

key pair

Throws:

EBaseException - failed to generate key pair

getECCKeyPair

public KeyPair getECCKeyPair(KeyCertData properties)
                      throws EBaseException

Description copied from interface: ICryptoSubsystem

Generates an ECC key pair based on the given parameters.

Specified by:

getECCKeyPair in interface ICryptoSubsystem

Parameters:

properties - key parameters

Returns:

key pair

Throws:

EBaseException - failed to generate key pair

getECCKeyPair

public KeyPair getECCKeyPair(org.mozilla.jss.crypto.CryptoToken token,
 String keyCurve,
 String certType)
                      throws EBaseException

Description copied from interface: ICryptoSubsystem

Generates an ECC key pair based on the given parameters.

Specified by:

getECCKeyPair in interface ICryptoSubsystem

Parameters:

token - token name

keyCurve - curve name

certType - type of cert(sslserver etc..)

Returns:

key pair

Throws:

EBaseException - failed to generate key pair

importCert

public void importCert(org.mozilla.jss.netscape.security.x509.X509CertImpl signedCert,
 String nickname,
 String certType)
                throws EBaseException

Description copied from interface: ICryptoSubsystem

Imports certificate into the server.

Specified by:

importCert in interface ICryptoSubsystem

Parameters:

signedCert - certificate

nickname - nickname for the importing certificate

certType - certificate type

Throws:

EBaseException - failed to import certificate

getCertInfo

public NameValuePairs getCertInfo(String b64E)
                           throws EBaseException

Throws:

EBaseException

deleteUserCert

public void deleteUserCert(String nickname,
 String serialno,
 String issuername)
                    throws EBaseException

Specified by:

deleteUserCert in interface ICryptoSubsystem

Throws:

EBaseException

deleteRootCert

public void deleteRootCert(String nickname,
 String serialno,
 String issuername)
                    throws EBaseException

Specified by:

deleteRootCert in interface ICryptoSubsystem

Throws:

EBaseException

getRootCerts

public NameValuePairs getRootCerts()
                            throws EBaseException

Specified by:

getRootCerts in interface ICryptoSubsystem

Throws:

EBaseException

getUserCerts

public NameValuePairs getUserCerts()
                            throws EBaseException

Specified by:

getUserCerts in interface ICryptoSubsystem

Throws:

EBaseException

getAllCertsManage

public NameValuePairs getAllCertsManage()
                                 throws EBaseException

Description copied from interface: ICryptoSubsystem

Gets all certificates on all tokens for Certificate Database Management.

Specified by:

getAllCertsManage in interface ICryptoSubsystem

Returns:

all certificates

Throws:

EBaseException - failed to retrieve certificates

getCACerts

public NameValuePairs getCACerts()
                          throws EBaseException

Description copied from interface: ICryptoSubsystem

Gets all CA certificates on all tokens.

Specified by:

getCACerts in interface ICryptoSubsystem

Returns:

all CA certificates

Throws:

EBaseException - failed to retrieve certificates

trustCert

public void trustCert(String nickname,
 String date,
 String trust)
               throws EBaseException

Description copied from interface: ICryptoSubsystem

Trusts a certificate for all available purposes.

Specified by:

trustCert in interface ICryptoSubsystem

Parameters:

nickname - nickname of the certificate

date - certificate's not before

trust - "Trust" or other

Throws:

EBaseException - failed to trust certificate

deleteCACert

public void deleteCACert(String nickname,
 String notAfterTime)
                  throws EBaseException

Delete the CA certificate from the perm database.

Parameters:

nickname - The nickname of the CA certificate.

notAfterTime - The notAfter of the certificate. It is possible to get multiple certificates under the same nickname. If one of the certificates match the notAfterTime, then the certificate will get deleted. The format of the notAfterTime has to be in "MMMMM dd, yyyy HH:mm:ss" format.

Throws:

EBaseException

deleteCert

public void deleteCert(String nickname,
 String notAfterTime)
                throws EBaseException

Delete any certificate from the any token.

Specified by:

deleteCert in interface ICryptoSubsystem

Parameters:

nickname - The nickname of the certificate.

notAfterTime - The notAfter of the certificate. It is possible to get multiple certificates under the same nickname. If one of the certificates match the notAfterTime, then the certificate will get deleted. The format of the notAfterTime has to be in "MMMMM dd, yyyy HH:mm:ss" format.

Throws:

EBaseException - failed to delete certificate

deleteTokenCertificate

public void deleteTokenCertificate(String nickname,
 String pathname)
                            throws EBaseException

Description copied from interface: ICryptoSubsystem

Deletes certificate of the given nickname.

Specified by:

deleteTokenCertificate in interface ICryptoSubsystem

Parameters:

nickname - nickname of the certificate

pathname - path where a copy of the deleted certificate is stored

Throws:

EBaseException - failed to delete certificate

getSubjectDN

public String getSubjectDN(String nickname)
                    throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves the subject DN of the certificate identified by the nickname.

Specified by:

getSubjectDN in interface ICryptoSubsystem

Parameters:

nickname - nickname of the certificate

Returns:

subject distinguished name

Throws:

EBaseException - failed to retrieve subject DN

setRootCertTrust

public void setRootCertTrust(String nickname,
 String serialno,
 String issuerName,
 String trust)
                      throws EBaseException

Specified by:

setRootCertTrust in interface ICryptoSubsystem

Throws:

EBaseException

getCertificate

public org.mozilla.jss.crypto.X509Certificate getCertificate(String nickname,
 String serialno,
 String issuerName)
                                                      throws EBaseException

Throws:

EBaseException

getRootCertTrustBit

public String getRootCertTrustBit(String nickname,
 String serialno,
 String issuerName)
                           throws EBaseException

Specified by:

getRootCertTrustBit in interface ICryptoSubsystem

Throws:

EBaseException

getCertPrettyPrint

public String getCertPrettyPrint(String nickname,
 String serialno,
 String issuerName,
 Locale locale)
                          throws EBaseException

Specified by:

getCertPrettyPrint in interface ICryptoSubsystem

Throws:

EBaseException

getCertPrettyPrintAndFingerPrint

public String getCertPrettyPrintAndFingerPrint(String nickname,
 String serialno,
 String issuerName,
 Locale locale)
                                        throws EBaseException

Specified by:

getCertPrettyPrintAndFingerPrint in interface ICryptoSubsystem

Throws:

EBaseException

getCertPrettyPrint

public String getCertPrettyPrint(String nickname,
 String date,
 Locale locale)
                          throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves certificate in pretty-print format by the nickname.

Specified by:

getCertPrettyPrint in interface ICryptoSubsystem

Parameters:

nickname - nickname of certificate

date - not after of the returned certificate must be date

locale - user locale

Returns:

certificate in pretty-print format

Throws:

EBaseException - failed to retrieve certificate

getCertPrettyPrint

public String getCertPrettyPrint(String b64E,
 Locale locale)
                          throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves the certificate in the pretty print format.

Specified by:

getCertPrettyPrint in interface ICryptoSubsystem

Parameters:

b64E - certificate in mime-64 encoded format

locale - end user locale

Returns:

certificate in pretty-print format

Throws:

EBaseException - failed to retrieve certificate

getSignedCert

public org.mozilla.jss.netscape.security.x509.X509CertImpl getSignedCert(KeyCertData data,
 String certType,
 PrivateKey priKey)
                                                                  throws EBaseException

Description copied from interface: ICryptoSubsystem

Signs the certificate template into the given data and returns a signed certificate.

Specified by:

getSignedCert in interface ICryptoSubsystem

Parameters:

data - data that contains certificate template

certType - certificate type

priKey - CA signing key

Returns:

certificate

Throws:

EBaseException - failed to sign certificate template

isCACert

public boolean isCACert(String fullNickname)
                 throws EBaseException

Description copied from interface: ICryptoSubsystem

Checks to see if the certificate of the given nickname is a CA certificate.

Specified by:

isCACert in interface ICryptoSubsystem

Parameters:

fullNickname - nickname of the certificate to check

Returns:

true if it is a CA certificate

Throws:

EBaseException - failed to check

getExtensions

public org.mozilla.jss.netscape.security.x509.CertificateExtensions getExtensions(String tokenname,
 String nickname)
                                                                           throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves extensions of the certificate that is identified by the given nickname.

Specified by:

getExtensions in interface ICryptoSubsystem

Parameters:

tokenname - name of token where the nickname is valid

nickname - nickname of the certificate

Returns:

certificate extensions

Throws:

EBaseException - failed to get extensions

checkCertificateExt

public void checkCertificateExt(String ext)
                         throws EBaseException

Description copied from interface: ICryptoSubsystem

Checks if the given base-64 encoded string contains an extension or a sequence of extensions.

Specified by:

checkCertificateExt in interface ICryptoSubsystem

Parameters:

ext - extension or sequence of extension encoded in base-64

Throws:

EBaseException - failed to check encoding

checkKeyLength

public void checkKeyLength(String keyType,
 int keyLength,
 String certType,
 int minRSAKeyLen)
                    throws EBaseException

Throws:

EBaseException

getPQG

public org.mozilla.jss.crypto.PQGParams getPQG(int keysize)

Description copied from interface: ICryptoSubsystem

Retrieves PQG parameters based on key size.

Specified by:

getPQG in interface ICryptoSubsystem

Parameters:

keysize - key size

Returns:

pqg parameters

getCAPQG

public org.mozilla.jss.crypto.PQGParams getCAPQG(int keysize,
 IConfigStore store)
                                          throws EBaseException

Description copied from interface: ICryptoSubsystem

Retrieves PQG parameters based on key size.

Specified by:

getCAPQG in interface ICryptoSubsystem

Parameters:

keysize - key size

store - configuration store

Returns:

pqg parameters

Throws:

EBaseException

getCertExtensions

public org.mozilla.jss.netscape.security.x509.CertificateExtensions getCertExtensions(String tokenname,
 String nickname)
                                                                               throws org.mozilla.jss.NotInitializedException,
org.mozilla.jss.crypto.TokenException,
org.mozilla.jss.crypto.ObjectNotFoundException,
IOException,
CertificateException

Description copied from interface: ICryptoSubsystem

Retrieves extensions of the certificate that is identified by the given nickname.

Specified by:

getCertExtensions in interface ICryptoSubsystem

Parameters:

tokenname - token name

nickname - nickname

Returns:

certificate extensions

Throws:

org.mozilla.jss.NotInitializedException

org.mozilla.jss.crypto.TokenException

org.mozilla.jss.crypto.ObjectNotFoundException

IOException

CertificateException

main

public static void main(String[] args)
                 throws Exception

Throws:

Exception