org.graylog2.shared.security.tls

Class PemKeyStore

java.lang.Object

org.graylog2.shared.security.tls.PemKeyStore

public final class PemKeyStore
extends Object

Constructor Summary

Constructors

Constructor and Description
PemKeyStore()

Method Summary

Modifier and Type	Method and Description
static KeyStore	buildKeyStore(java.nio.file.Path certChainFile, java.nio.file.Path keyFile, char[] keyPasswordChars) Generates a new KeyStore.
protected static PKCS8EncodedKeySpec	generateKeySpec(char[] password, byte[] key) Generates a key specification for an (encrypted) private key.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PemKeyStore

public PemKeyStore()

Method Detail

generateKeySpec

protected static PKCS8EncodedKeySpec generateKeySpec(char[] password,
                                                     byte[] key)
                                              throws IOException,
                                                     NoSuchAlgorithmException,
                                                     NoSuchPaddingException,
                                                     InvalidKeySpecException,
                                                     InvalidKeyException,
                                                     InvalidAlgorithmParameterException

Generates a key specification for an (encrypted) private key.

Parameters:

password - characters, if null or empty an unencrypted key is assumed

key - bytes of the DER encoded private key

Returns:

a key specification

Throws:

IOException - if parsing key fails

NoSuchAlgorithmException - if the algorithm used to encrypt key is unkown

NoSuchPaddingException - if the padding scheme specified in the decryption algorithm is unkown

InvalidKeySpecException - if the decryption key based on password cannot be generated

InvalidKeyException - if the decryption key based on password cannot be used to decrypt key

InvalidAlgorithmParameterException - if decryption algorithm parameters are somehow faulty

buildKeyStore

public static KeyStore buildKeyStore(java.nio.file.Path certChainFile,
                                     java.nio.file.Path keyFile,
                                     char[] keyPasswordChars)
                              throws KeyStoreException,
                                     NoSuchAlgorithmException,
                                     NoSuchPaddingException,
                                     InvalidKeySpecException,
                                     InvalidAlgorithmParameterException,
                                     CertificateException,
                                     KeyException,
                                     IOException

Generates a new KeyStore.

Parameters:

certChainFile - a X.509 certificate chain file in PEM format,

keyFile - a PKCS#8 private key file in PEM format,

keyPasswordChars - the password of the keyFile. null if it's not password-protected.

Returns:

generated KeyStore.

Throws:

KeyStoreException

NoSuchAlgorithmException

NoSuchPaddingException

InvalidKeySpecException

InvalidAlgorithmParameterException

CertificateException

KeyException

IOException