Module iu.util.crypt.impl

Package iu.crypt

Class CertificateReferenceBuilder<B extends CertificateReferenceBuilder<B>>

java.lang.Object

edu.iu.client.IuJsonBuilder<B>

iu.crypt.CertificateReferenceBuilder<B>

Type Parameters:

B - builder type

All Implemented Interfaces:

WebCertificateReference.Builder<B>

Direct Known Subclasses:

KeyReferenceBuilder

class CertificateReferenceBuilder<B extends CertificateReferenceBuilder<B>>
extends IuJsonBuilder<B>
implements WebCertificateReference.Builder<B>

Common base class for JSON web security object builders.

Constructor Summary

Constructors

Constructor	Description
CertificateReferenceBuilder()	Default constructor.

Method Summary

Modifier and Type	Method	Description
B	cert(URI uri)	Sets the URI where X.509 certificate associated with this key can be retrieved.
B	cert(X509Certificate... chain)	Sets the URI where X.509 certificate associated with this key can be retrieved.
B	pem(InputStream pemEncoded)	Sets key data from potentially concatenated PEM-encoded input.
B	pem(String pemEncoded)	Sets key data from potentially concatenated PEM-encoded input.
B	x5t(byte[] certificateThumbprint)	Sets the certificate thumbprint.
B	x5t256(byte[] certificateSha256Thumbprint)	Sets the certificate SHA-256 thumbprint.

Methods inherited from class edu.iu.client.IuJsonBuilder

build, copy, param, param, param, paramNames, toJson

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CertificateReferenceBuilder

public CertificateReferenceBuilder()

Default constructor.

Method Details

cert

public B cert(URI uri)

Description copied from interface: WebCertificateReference.Builder

Sets the URI where X.509 certificate associated with this key can be retrieved.

The URI will be validated and resolved when this method is invoked. To ensure dependency on a remote URI won't impact application startup, always store certificates locally and use WebCertificateReference.Builder.cert(X509Certificate...) instead of this method for critical initialization in production environments.

Specified by:

cert in interface WebCertificateReference.Builder<B extends CertificateReferenceBuilder<B>>

Parameters:

uri - URI

Returns:

this

cert

public B cert(X509Certificate... chain)

Description copied from interface: WebCertificateReference.Builder

Sets the URI where X.509 certificate associated with this key can be retrieved.

Specified by:

cert in interface WebCertificateReference.Builder<B extends CertificateReferenceBuilder<B>>

Parameters:

chain - one or more X509Certificates

Returns:

this

x5t

public B x5t(byte[] certificateThumbprint)

Description copied from interface: WebCertificateReference.Builder

Sets the certificate thumbprint.

Specified by:

x5t in interface WebCertificateReference.Builder<B extends CertificateReferenceBuilder<B>>

Parameters:

certificateThumbprint - JSON x5t attribute value

Returns:

this

x5t256

public B x5t256(byte[] certificateSha256Thumbprint)

Description copied from interface: WebCertificateReference.Builder

Sets the certificate SHA-256 thumbprint.

Specified by:

x5t256 in interface WebCertificateReference.Builder<B extends CertificateReferenceBuilder<B>>

Parameters:

certificateSha256Thumbprint - JSON x5t attribute value

Returns:

this

pem

public B pem(InputStream pemEncoded)

Description copied from interface: WebCertificateReference.Builder

Sets key data from potentially concatenated PEM-encoded input.

Specified by:

pem in interface WebCertificateReference.Builder<B extends CertificateReferenceBuilder<B>>

Parameters:

pemEncoded - InputStream of PEM encoded key data, potentially concatenated

Returns:

this

pem

public B pem(String pemEncoded)

Description copied from interface: WebCertificateReference.Builder

Sets key data from potentially concatenated PEM-encoded input.

Specified by:

pem in interface WebCertificateReference.Builder<B extends CertificateReferenceBuilder<B>>

Parameters:

pemEncoded - potentially concatenated PEM encoded key data

Returns:

this