com.entrust.toolkit.credentials

Class CredentialCreatorOrRecoverer

java.lang.Object

com.entrust.toolkit.credentials.CredentialReader

com.entrust.toolkit.credentials.CMPCredentialReader

com.entrust.toolkit.credentials.CMPSoftwareCredentialReader

com.entrust.toolkit.credentials.CredentialCreatorOrRecoverer

public final class CredentialCreatorOrRecoverer
extends CMPSoftwareCredentialReader

This credential reader is capable of creating or recovering an Entrust user's Digital Identity in software (not on a PKCS#11 device) using Entrust profile format version 4.

The operation to be performed (user creation or user recovery) is determined automatically based on the user's state. This class performs the services offered by both the CredentialCreator class and the CredentialRecoverer class and can be used in place of either. For additional details on user creation or user recovery, please refer to the class documentation of the aforementioned classes.

Note: This credential reader is not supported with Security Manager version 6.0.1 and earlier; with these older versions the user's state cannot be retrieved over PKIX-CMP.

Since:

8.0

Field Summary

Fields inherited from class com.entrust.toolkit.credentials.CMPCredentialReader

DSASignature, ECDSASignature, PKIX4Version, PKIX5Version, RSASignature

Constructor Summary

Constructors

Constructor and Description
CredentialCreatorOrRecoverer(SecureStringBuffer referenceNumber, AuthorizationCode authorizationCode) A constructor; creates a new CredentialCreatorOrRecoverer object.

Method Summary

Methods

Modifier and Type	Method and Description
java.lang.String	getType() Returns the type (name) of this specific credential reader.

Methods inherited from class com.entrust.toolkit.credentials.CMPSoftwareCredentialReader

setClientKeyGenerationUtil

Methods inherited from class com.entrust.toolkit.credentials.CMPCredentialReader

setClientKeyGenParams, setForceV1KeyPair

Methods inherited from class com.entrust.toolkit.credentials.CredentialReader

checkPwd

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CredentialCreatorOrRecoverer

public CredentialCreatorOrRecoverer(SecureStringBuffer referenceNumber,
                            AuthorizationCode authorizationCode)

A constructor; creates a new CredentialCreatorOrRecoverer object.

Using the reference number and authentication code, the user's Digital Identity is created/recovered using the PKIX-CMP protocol. Any keys that are to be client generated are generated in software. All other information is retrieved from the Security Manager and written to the software-based Digital Identity store.

Parameters:

referenceNumber - the reference number assigned to the user; an 8 digit integer obtained from the Security Manager by the PKI Administrator

authorizationCode - the authorization code assigned to the user; an alphanumeric string (of the form ABCD-EFGH-IJKL) obtained from the Security Manager by the PKI Administrator

Throws:

java.lang.IllegalArgumentException - thrown if any of the required parameters are null

Method Detail

getType

public java.lang.String getType()

Description copied from class: CredentialReader

Returns the type (name) of this specific credential reader.

Specified by:

getType in class CredentialReader

Returns:

the type (name) of credential reader