Package org.bouncycastle.tls.crypto

Interface TlsCertificate

All Known Implementing Classes:

BcTlsCertificate, BcTlsRawKeyCertificate, JcaTlsCertificate

public interface TlsCertificate

Interface providing the functional representation of a single X.509 certificate.

Method Summary

Modifier and Type	Method	Description
TlsCertificate	checkUsageInRole(int tlsCertificateRole)
TlsEncryptor	createEncryptor(int tlsCertificateRole)	Return an encryptor based on the public key in this certificate.
Tls13Verifier	createVerifier(int signatureScheme)
TlsVerifier	createVerifier(short signatureAlgorithm)
byte[]	getEncoded()
byte[]	getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
short	getLegacySignatureAlgorithm()
BigInteger	getSerialNumber()
String	getSigAlgOID()
org.bouncycastle.asn1.ASN1Encodable	getSigAlgParams()
boolean	supportsSignatureAlgorithm(short signatureAlgorithm)
boolean	supportsSignatureAlgorithmCA(short signatureAlgorithm)

Method Details

createEncryptor

TlsEncryptor createEncryptor(int tlsCertificateRole)
                      throws IOException

Return an encryptor based on the public key in this certificate.

Parameters:

tlsCertificateRole - TlsCertificateRole

Returns:

a TlsEncryptor based on this certificate's public key.

Throws:

IOException

createVerifier

TlsVerifier createVerifier(short signatureAlgorithm)
                    throws IOException

Parameters:

signatureAlgorithm - SignatureAlgorithm

Throws:

IOException

createVerifier

Tls13Verifier createVerifier(int signatureScheme)
                      throws IOException

Parameters:

signatureScheme - SignatureScheme

Throws:

IOException

getEncoded

byte[] getEncoded()
           throws IOException

Throws:

IOException

getExtension

byte[] getExtension(org.bouncycastle.asn1.ASN1ObjectIdentifier extensionOID)
             throws IOException

Throws:

IOException

getSerialNumber

BigInteger getSerialNumber()

getSigAlgOID

String getSigAlgOID()

Returns:

the OID of this certificate's 'signatureAlgorithm', as a String.

getSigAlgParams

org.bouncycastle.asn1.ASN1Encodable getSigAlgParams()
                                             throws IOException

Throws:

IOException

getLegacySignatureAlgorithm

short getLegacySignatureAlgorithm()
                           throws IOException

Returns:

SignatureAlgorithm

Throws:

IOException

supportsSignatureAlgorithm

boolean supportsSignatureAlgorithm(short signatureAlgorithm)
                            throws IOException

Parameters:

signatureAlgorithm - SignatureAlgorithm

Returns:

true if (and only if) this certificate can be used to verify the given signature algorithm.

Throws:

IOException

supportsSignatureAlgorithmCA

boolean supportsSignatureAlgorithmCA(short signatureAlgorithm)
                              throws IOException

Throws:

IOException

checkUsageInRole

TlsCertificate checkUsageInRole(int tlsCertificateRole)
                         throws IOException

Parameters:

tlsCertificateRole - TlsCertificateRole

Throws:

IOException