Package com.yubico.internal.util

Class CertificateParser

java.lang.Object

com.yubico.internal.util.CertificateParser

public class CertificateParser
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ID_FIDO_GEN_CE_AAGUID

Constructor Summary

Constructors

Constructor	Description
CertificateParser()

Method Summary

Modifier and Type	Method	Description
static byte[]	computeSubjectKeyIdentifier(Certificate cert)	Compute a Subject Key Identifier as defined as method (1) in RFC 5280 section 4.2.1.2.
static X509Certificate	parseDer(byte[] derEncodedCert)
static X509Certificate	parseDer(InputStream is)
static X509Certificate	parseDer(String base64DerEncodedCert)
static Optional<byte[]>	parseFidoAaguidExtension(X509Certificate cert)
static X509Certificate	parsePem(String pemEncodedCert)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ID_FIDO_GEN_CE_AAGUID

public static final String ID_FIDO_GEN_CE_AAGUID

See Also:

• Constant Field Values

Constructor Details

CertificateParser

public CertificateParser()

Method Details

parsePem

public static X509Certificate parsePem(String pemEncodedCert)
                                throws CertificateException

Throws:

CertificateException

parseDer

public static X509Certificate parseDer(String base64DerEncodedCert)
                                throws CertificateException

Throws:

CertificateException

parseDer

public static X509Certificate parseDer(byte[] derEncodedCert)
                                throws CertificateException

Throws:

CertificateException

parseDer

public static X509Certificate parseDer(InputStream is)
                                throws CertificateException

Throws:

CertificateException

computeSubjectKeyIdentifier

public static byte[] computeSubjectKeyIdentifier(Certificate cert)
                                          throws NoSuchAlgorithmException

Compute a Subject Key Identifier as defined as method (1) in RFC 5280 section 4.2.1.2.

Throws:

NoSuchAlgorithmException - if the SHA-1 hash algorithm is not available.

See Also:

• Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, section 4.2.1.2. Subject Key Identifier

parseFidoAaguidExtension

public static Optional<byte[]> parseFidoAaguidExtension(X509Certificate cert)