org.apache.ws.security.components.crypto

Class BouncyCastle

java.lang.Object

org.apache.ws.security.components.crypto.CryptoBase

org.apache.ws.security.components.crypto.AbstractCrypto

org.apache.ws.security.components.crypto.BouncyCastle

All Implemented Interfaces:

Crypto

public class BouncyCastle
extends AbstractCrypto

JDK1.4 based implementation of Crypto (uses keystore).

Author:

Davanum Srinivas (dims@yahoo.com).

Field Summary

Fields inherited from class org.apache.ws.security.components.crypto.AbstractCrypto

certFact, properties

Fields inherited from class org.apache.ws.security.components.crypto.CryptoBase

cacerts, certFactMap, keystore

Constructor Summary

Constructors

Constructor and Description
BouncyCastle(Properties properties) Constructor.
BouncyCastle(Properties properties, ClassLoader loader)

Method Summary

Methods

Modifier and Type	Method and Description
byte[]	getCertificateData(boolean reverse, X509Certificate[] certs) get a byte array given an array of X509 certificates.
X509Certificate[]	getX509Certificates(byte[] data, boolean reverse) Construct an array of X509Certificate's from the byte array.
boolean	validateCertPath(X509Certificate[] certs) Uses the CertPath API to validate a given certificate chain

Methods inherited from class org.apache.ws.security.components.crypto.AbstractCrypto

getCryptoProvider, getDefaultX509Alias, load

Methods inherited from class org.apache.ws.security.components.crypto.CryptoBase

createKeyStoreErrorMessage, getAliasesForDN, getAliasForX509Cert, getAliasForX509Cert, getAliasForX509Cert, getAliasForX509Cert, getAliasForX509CertThumb, getCertificateFactory, getCertificates, getKeyStore, getPrivateKey, getSKIBytesFromCert, loadCertificate, setKeyStore, splitAndTrim

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BouncyCastle

public BouncyCastle(Properties properties)
             throws CredentialException,
                    IOException

Constructor.

Parameters:

properties -

Throws:

CredentialException

IOException

BouncyCastle

public BouncyCastle(Properties properties,
            ClassLoader loader)
             throws CredentialException,
                    IOException

Throws:

CredentialException

IOException

Method Detail

getX509Certificates

public X509Certificate[] getX509Certificates(byte[] data,
                                    boolean reverse)
                                      throws WSSecurityException

Construct an array of X509Certificate's from the byte array.

Specified by:

getX509Certificates in interface Crypto

Overrides:

getX509Certificates in class CryptoBase

Parameters:

data - The byte array containing the X509 data

reverse - If set the first certificate in input data will the last in the array

Returns:

An array of X509 certificates, ordered according to the reverse flag

Throws:

WSSecurityException

getCertificateData

public byte[] getCertificateData(boolean reverse,
                        X509Certificate[] certs)
                          throws WSSecurityException

get a byte array given an array of X509 certificates.

Specified by:

getCertificateData in interface Crypto

Overrides:

getCertificateData in class CryptoBase

Parameters:

reverse - If set the first certificate in the array data will the last in the byte array

certs - The certificates to convert

Returns:

The byte array for the certificates ordered according to the reverse flag

Throws:

WSSecurityException

validateCertPath

public boolean validateCertPath(X509Certificate[] certs)
                         throws WSSecurityException

Uses the CertPath API to validate a given certificate chain

Specified by:

validateCertPath in interface Crypto

Overrides:

validateCertPath in class CryptoBase

Parameters:

certs - Certificate chain to validate

Returns:

true if the certificate chain is valid, false otherwise

Throws:

WSSecurityException