com.entrust.toolkit.credentials

Class CapiCredentialCreatorOrRecoverer

java.lang.Object

com.entrust.toolkit.credentials.CredentialReader

com.entrust.toolkit.credentials.CMPCredentialReader

com.entrust.toolkit.credentials.CapiCmpCredentialReader

com.entrust.toolkit.credentials.CapiCredentialCreatorOrRecoverer

public final class CapiCredentialCreatorOrRecoverer
extends CapiCmpCredentialReader

This credential reader is capable of creating or recovering an Entrust user's Digital Identity in Microsoft CryptoAPI (MSCAPI) using Entrust format.

The operation to be performed (user creation or user recovery) is determined automatically based on the user's state. This class performs the services offered by both the CapiCredentialCreator class and the CapiCredentialRecoverer class and can be used in place of either. For additional details on user creation or user recovery, please refer to the class documentation of the aforementioned classes.

Note: This credential reader is not supported with Security Manager version 6.0.1 and earlier; with these older versions the user's state cannot be retrieved over PKIX-CMP.

Since:

8.0

Field Summary

Fields inherited from class com.entrust.toolkit.credentials.CMPCredentialReader

DSASignature, ECDSASignature, PKIX4Version, PKIX5Version, RSASignature

Constructor Summary

Constructors

Constructor and Description
CapiCredentialCreatorOrRecoverer(SecureStringBuffer referenceNumber, AuthorizationCode authorizationCode) A constructor; creates a new CapiCredentialCreatorOrRecoverer object.

Method Summary

Modifier and Type	Method and Description
java.lang.String	getType() Returns the type (name) of this specific credential reader.

Methods inherited from class com.entrust.toolkit.credentials.CMPCredentialReader

setClientKeyGenParams, setForceV1KeyPair

Methods inherited from class com.entrust.toolkit.credentials.CredentialReader

checkPwd

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CapiCredentialCreatorOrRecoverer

public CapiCredentialCreatorOrRecoverer(SecureStringBuffer referenceNumber,
                                        AuthorizationCode authorizationCode)

A constructor; creates a new CapiCredentialCreatorOrRecoverer object.

Using the reference number and authentication code, the user's Digital Identity is created/recovered using the PKIX-CMP protocol. Any keys that are to be client generated are generated in MSCAPI. All other information is retrieved from the Security Manager and written to the MSCAPI-based Digital Identity store.

Parameters:

referenceNumber - the reference number assigned to the user; an 8 digit integer obtained from the Security Manager by the PKI Administrator

authorizationCode - the authorization code assigned to the user; an alphanumeric string (of the form ABCD-EFGH-IJKL) obtained from the Security Manager by the PKI Administrator

Throws:

java.lang.IllegalArgumentException - thrown if any of the required parameters are null

Method Detail

getType

public java.lang.String getType()

Description copied from class: CredentialReader

Returns the type (name) of this specific credential reader.

Specified by:

getType in class CredentialReader

Returns:

the type (name) of credential reader