public interface KeyAndCertContainer
User,
KeyAndCertificateSource| Modifier and Type | Method and Description |
|---|---|
X509Certificate[] |
getCaCertificateChain()
Returns an array of CA certificates forming a chain to the user's root
CA.
|
CollectionCS |
getCertificateStore()
Returns the main certificate store used for certificate validation.
|
java.security.PrivateKey |
getDecryptionKey(Name issuer,
java.lang.String serialNumber)
Returns the decryption private key and serial number for the given issuer.
|
X509Certificate |
getEncryptionCertificate()
Returns the encryption certificate.
|
java.security.PrivateKey |
getSigningKey()
Returns the signing key stored in the KeyAndCertContainer
|
X509Certificate |
getVerificationCertificate()
Returns the verification certificate.
|
java.security.PrivateKey getSigningKey()
throws UserNotLoggedInException
PrivateKey object, or null
if the user does not have a signing key.UserNotLoggedInException - if the user is not logged in.java.security.PrivateKey getDecryptionKey(Name issuer, java.lang.String serialNumber) throws UserNotLoggedInException
issuer - the issuer of the certificateserialNumber - the serial number of the certificatePrivateKey object.UserNotLoggedInException - if the user is not logged in.X509Certificate[] getCaCertificateChain() throws UserFatalException, UserNotLoggedInException
The first element of the array is the immediate CA certificate and the last element is the top level trusted root certificate.
UserFatalException - thrown if the chain cannot be built.UserNotLoggedInException - thrown if the user is not logged in.X509Certificate getVerificationCertificate() throws UserNotLoggedInException
The verification certificate is used to verify signatures that are created with the user's private signing key. This key/certificate pair can be used together to provide data integrity (assurance that data has not changed over time).
UserNotLoggedInException - thrown if the user has not yet been logged inX509Certificate getEncryptionCertificate() throws UserNotLoggedInException
The encryption certificate is used to protect information that can only be unprotected with the user's private decryption key. This key/certificate pair can be used together to provide data protection (assurance that protected data cannot be read by anyone other than the user).
UserNotLoggedInException - thrown if the user has not yet been logged inCollectionCS getCertificateStore() throws UserNotLoggedInException
UserNotLoggedInException - thrown if the user is not logged in.