org.springframework.vault.support

Class CertificateBundle

java.lang.Object

org.springframework.vault.support.CertificateBundle

public class CertificateBundle
extends Object

Value object representing a certificate bundle consisting of a private key, the certificate and the issuer certificate. Certificate and keys can be either DER or PEM encoded. DER-encoded certificates can be converted to a KeySpec and X509Certificate.

Author:

Mark Paluch

See Also:

getPrivateKeySpec(), getX509Certificate(), getIssuingCaCertificate()

Method Summary

Modifier and Type	Method and Description
KeyStore	createKeyStore(String keyAlias) Create a KeyStore from this CertificateBundle containing the private key and certificate chain.
String	getCertificate()
String	getIssuingCaCertificate()
String	getPrivateKey()
KeySpec	getPrivateKeySpec() Retrieve the private key as KeySpec.
String	getSerialNumber()
X509Certificate	getX509Certificate() Retrieve the certificate as X509Certificate.
X509Certificate	getX509IssuerCertificate() Retrieve the issuing CA certificate as X509Certificate.
static CertificateBundle	of(String serialNumber, String certificate, String issuingCaCertificate, String privateKey) Create a CertificateBundle given a private key with certificates and the serial number.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

of

public static CertificateBundle of(String serialNumber,
                                   String certificate,
                                   String issuingCaCertificate,
                                   String privateKey)

Create a CertificateBundle given a private key with certificates and the serial number.

Parameters:

serialNumber - must not be empty or null.

certificate - must not be empty or null.

issuingCaCertificate - must not be empty or null.

privateKey - must not be empty or null.

Returns:

the CertificateBundle

getSerialNumber

public String getSerialNumber()

Returns:

the serial number.

getCertificate

public String getCertificate()

Returns:

encoded certificate (PEM or DER-encoded).

getIssuingCaCertificate

public String getIssuingCaCertificate()

Returns:

encoded certificate of the issuing CA (PEM or DER-encoded).

getPrivateKey

public String getPrivateKey()

Returns:

the private key (decrypted form, PEM or DER-encoded)

getPrivateKeySpec

public KeySpec getPrivateKeySpec()

Retrieve the private key as KeySpec. Only supported if private key is DER-encoded.

Returns:

the private KeySpec. KeyFactory can generate a PrivateKey from this KeySpec.

getX509Certificate

public X509Certificate getX509Certificate()

Retrieve the certificate as X509Certificate. Only supported if certificate is DER-encoded.

Returns:

the X509Certificate.

getX509IssuerCertificate

public X509Certificate getX509IssuerCertificate()

Retrieve the issuing CA certificate as X509Certificate. Only supported if certificate is DER-encoded.

Returns:

the issuing CA X509Certificate.

createKeyStore

public KeyStore createKeyStore(String keyAlias)

Create a KeyStore from this CertificateBundle containing the private key and certificate chain. Only supported if certificate and private key are DER-encoded.

Parameters:

keyAlias - the key alias to use.

Returns:

the KeyStore containing the private key and certificate chain.