Module iu.util.crypt.impl

Package iu.crypt

Class JsonCertificateReference<R extends JsonCertificateReference<R>>

java.lang.Object

iu.crypt.JsonCertificateReference<R>

Type Parameters:

R - reference type

All Implemented Interfaces:

WebCertificateReference

Direct Known Subclasses:

JsonKeyReference

class JsonCertificateReference<R extends JsonCertificateReference<R>>
extends Object
implements WebCertificateReference

Encapsulates JSON properties that refer to or verify an X.509 certificate chain.

Nested Class Summary

Nested classes/interfaces inherited from interface edu.iu.crypt.WebCertificateReference

WebCertificateReference.Builder<B extends WebCertificateReference.Builder<B>>

Constructor Summary

Constructors

Constructor	Description
JsonCertificateReference(JsonValue certRef)	Constructor.

Method Summary

Modifier and Type	Method	Description
boolean	equals(Object obj)
X509Certificate[]	getCertificateChain()	Gets the certificate chain.
byte[]	getCertificateSha256Thumbprint()	Gets the certificate SHA-256 thumbprint.
byte[]	getCertificateThumbprint()	Gets the certificate thumbprint.
URI	getCertificateUri()	Gets the URI where X.509 certificate associated with this key can be retrieved.
int	hashCode()
(package private) boolean	represents(R key)	Determines whether or not the known components of this key match the known components of another key.
(package private) JsonObjectBuilder	serializeTo(JsonObjectBuilder jwkBuilder)	Adds serialized JWK attributes to a JSON object builder.
String	toString()
(package private) X509Certificate[]	verifiedCertificateChain()	Gets the verified certificate chain resolved by this reference.

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Details

JsonCertificateReference

JsonCertificateReference(JsonValue certRef)

Constructor.

Parameters:

certRef - JsonObject

Method Details

getCertificateUri

public URI getCertificateUri()

Description copied from interface: WebCertificateReference

Gets the URI where X.509 certificate associated with this key can be retrieved.

The protocol used to acquire the resource MUST provide integrity protection; an HTTP GET request to retrieve the certificate MUST use TLS [RFC2818] [RFC5246]; the identity of the server MUST be validated, as per Section 6 of RFC 6125 [RFC6125].

Specified by:

getCertificateUri in interface WebCertificateReference

Returns:

URI

getCertificateChain

public X509Certificate[] getCertificateChain()

Description copied from interface: WebCertificateReference

Gets the certificate chain.

Specified by:

getCertificateChain in interface WebCertificateReference

Returns:

parsed JSON x5c attribute value

getCertificateThumbprint

public byte[] getCertificateThumbprint()

Description copied from interface: WebCertificateReference

Gets the certificate thumbprint.

Specified by:

getCertificateThumbprint in interface WebCertificateReference

Returns:

JSON x5t attribute value

getCertificateSha256Thumbprint

public byte[] getCertificateSha256Thumbprint()

Description copied from interface: WebCertificateReference

Gets the certificate SHA-256 thumbprint.

Specified by:

getCertificateSha256Thumbprint in interface WebCertificateReference

Returns:

JSON x5t#S256 attribute value

hashCode

public int hashCode()

Overrides:

hashCode in class Object

equals

public boolean equals(Object obj)

Overrides:

equals in class Object

toString

public String toString()

Overrides:

toString in class Object

verifiedCertificateChain

X509Certificate[] verifiedCertificateChain()

Gets the verified certificate chain resolved by this reference.

Returns:

Array of X509Certificate; verified as consistent with the other parameters in this reference, at minimum WebCertificateReference.verify(WebCertificateReference)

serializeTo

JsonObjectBuilder serializeTo(JsonObjectBuilder jwkBuilder)

Adds serialized JWK attributes to a JSON object builder.

Parameters:

jwkBuilder - JsonObjectBuilder

Returns:

jwkBuilder

represents

boolean represents(R key)

Determines whether or not the known components of this key match the known components of another key.

Parameters:

key - WebKey

Returns:

true if all non-null components of both keys match