org.springframework.vault.support

Class Certificate

java.lang.Object

org.springframework.vault.support.Certificate

Direct Known Subclasses:

CertificateBundle

public class Certificate
extends Object

Value object representing a certificate consisting of the certificate and the issuer certificate. Certificate and keys can be either DER or PEM encoded. DER-encoded certificates can be converted to a X509Certificate.

Since:

2.0

Author:

Mark Paluch

See Also:

getX509Certificate(), getIssuingCaCertificate()

Method Summary

Modifier and Type	Method and Description
KeyStore	createTrustStore() Create a trust store as KeyStore from this Certificate containing the certificate chain.
String	getCertificate()
String	getIssuingCaCertificate()
String	getSerialNumber()
X509Certificate	getX509Certificate() Retrieve the certificate as X509Certificate.
X509Certificate	getX509IssuerCertificate() Retrieve the issuing CA certificate as X509Certificate.
static Certificate	of(String serialNumber, String certificate, String issuingCaCertificate) Create a Certificate given a private key with certificates and the serial number.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

of

public static Certificate of(String serialNumber,
                             String certificate,
                             String issuingCaCertificate)

Create a Certificate given a private key with certificates and the serial number.

Parameters:

serialNumber - must not be empty or null.

certificate - must not be empty or null.

issuingCaCertificate - must not be empty or null.

Returns:

the Certificate

getSerialNumber

public String getSerialNumber()

Returns:

the serial number.

getCertificate

public String getCertificate()

Returns:

encoded certificate (PEM or DER-encoded).

getIssuingCaCertificate

public String getIssuingCaCertificate()

Returns:

encoded certificate of the issuing CA (PEM or DER-encoded).

getX509Certificate

public X509Certificate getX509Certificate()

Retrieve the certificate as X509Certificate. Only supported if certificate is DER-encoded.

Returns:

the X509Certificate.

getX509IssuerCertificate

public X509Certificate getX509IssuerCertificate()

Retrieve the issuing CA certificate as X509Certificate. Only supported if certificate is DER-encoded.

Returns:

the issuing CA X509Certificate.

createTrustStore

public KeyStore createTrustStore()

Create a trust store as KeyStore from this Certificate containing the certificate chain. Only supported if certificate is DER-encoded.

Returns:

the KeyStore containing the private key and certificate chain.