org.jmrtd.cert

Class CardVerifiableCertificate

java.lang.Object

java.security.cert.Certificate

org.jmrtd.cert.CardVerifiableCertificate

All Implemented Interfaces:

Serializable

public class CardVerifiableCertificate
extends Certificate

Card verifiable certificates as specified in TR 03110. Just a wrapper around org.ejbca.cvc.CVCertificate by Keijo Kurkinen of EJBCA.org, so that we can subclass java.security.cert.Certificate. We also hide some of the internal structure (no more calls to get the "body" just to get some attributes).

Version:

$Revision: $

Author:

The JMRTD team (info@jmrtd.org)

See Also:

Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from class java.security.cert.Certificate

Certificate.CertificateRep

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	CardVerifiableCertificate(org.ejbca.cvc.CVCertificate cvCertificate) Constructs a wrapper.

Method Summary

Methods

Modifier and Type	Method and Description
boolean	equals(Object otherObj)
CVCPrincipal	getAuthorityReference() Gets the authority reference.
CVCAuthorizationTemplate	getAuthorizationTemplate() Gets the holder authorization template.
byte[]	getCertBodyData() The DER encoded certificate body.
byte[]	getEncoded() Returns the encoded form of this certificate.
CVCPrincipal	getHolderReference() Gets the holder reference.
Date	getNotAfter() Returns 'Expiration Date'.
Date	getNotBefore() Returns 'Effective Date'.
PublicKey	getPublicKey() Gets the public key from this certificate.
byte[]	getSignature() Returns the signature (just the value, without the 0x5F37 tag).
int	hashCode()
String	toString() Returns a string representation of this certificate.
void	verify(PublicKey key) Verifies that this certificate was signed using the private key that corresponds to the specified public key.
void	verify(PublicKey key, String provider) Verifies that this certificate was signed using the private key that corresponds to the specified public key.

Methods inherited from class java.security.cert.Certificate

getType, writeReplace

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

CardVerifiableCertificate

protected CardVerifiableCertificate(org.ejbca.cvc.CVCertificate cvCertificate)

Constructs a wrapper.

Parameters:

cvCertificate - the EJCBA CVC to wrap

Method Detail

getEncoded

public byte[] getEncoded()
                  throws CertificateEncodingException

Returns the encoded form of this certificate. It is assumed that each certificate type would have only a single form of encoding; for example, X.509 certificates would be encoded as ASN.1 DER.

Specified by:

getEncoded in class Certificate

Returns:

the encoded form of this certificate

Throws:

CertificateEncodingException - if an encoding error occurs.

getPublicKey

public PublicKey getPublicKey()

Gets the public key from this certificate.

Specified by:

getPublicKey in class Certificate

Returns:

the public key.

toString

public String toString()

Returns a string representation of this certificate.

Specified by:

toString in class Certificate

Returns:

a string representation of this certificate.

verify

public void verify(PublicKey key)
            throws CertificateException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException

Verifies that this certificate was signed using the private key that corresponds to the specified public key.

Specified by:

verify in class Certificate

Parameters:

key - the PublicKey used to carry out the verification.

Throws:

NoSuchAlgorithmException - on unsupported signature algorithms.

InvalidKeyException - on incorrect key.

NoSuchProviderException - if there's no default provider.

SignatureException - on signature errors.

CertificateException - on encoding errors.

verify

public void verify(PublicKey key,
          String provider)
            throws CertificateException,
                   NoSuchAlgorithmException,
                   InvalidKeyException,
                   NoSuchProviderException,
                   SignatureException

Verifies that this certificate was signed using the private key that corresponds to the specified public key. This method uses the signature verification engine supplied by the specified provider.

Specified by:

verify in class Certificate

Parameters:

key - the PublicKey used to carry out the verification.

provider - the name of the signature provider.

Throws:

NoSuchAlgorithmException - on unsupported signature algorithms.

InvalidKeyException - on incorrect key.

NoSuchProviderException - on incorrect provider.

SignatureException - on signature errors.

CertificateException - on encoding errors.

getCertBodyData

public byte[] getCertBodyData()
                       throws CertificateException,
                              IOException

The DER encoded certificate body.

Returns:

DER encoded certificate body

Throws:

CertificateException - on error

IOException - on error

getNotBefore

public Date getNotBefore()
                  throws CertificateException

Returns 'Effective Date'.

Returns:

the effective date

Throws:

CertificateException

getNotAfter

public Date getNotAfter()
                 throws CertificateException

Returns 'Expiration Date'.

Returns:

the expiration date

Throws:

CertificateException

getAuthorityReference

public CVCPrincipal getAuthorityReference()
                                   throws CertificateException

Gets the authority reference.

Returns:

the authority reference

Throws:

CertificateException - if the authority reference field is not present

getHolderReference

public CVCPrincipal getHolderReference()
                                throws CertificateException

Gets the holder reference.

Returns:

the holder reference

Throws:

CertificateException - if the authority reference field is not present

getAuthorizationTemplate

public CVCAuthorizationTemplate getAuthorizationTemplate()
                                                  throws CertificateException

Gets the holder authorization template.

Returns:

the holder authorization template

Throws:

CertificateException

getSignature

public byte[] getSignature()
                    throws CertificateException

Returns the signature (just the value, without the 0x5F37 tag).

Returns:

the signature bytes

Throws:

CertificateException - if certificate doesn't contain a signature

equals

public boolean equals(Object otherObj)

Overrides:

equals in class Certificate

hashCode

public int hashCode()

Overrides:

hashCode in class Certificate