java.security.cert
Class CertificateFactory
java.lang.Object
|
+--java.security.cert.CertificateFactory
public class
CertificateFactoryextends
ObjectThis class implments the CertificateFactory class interface
used to generate certificates and certificate revocation
list (CRL) objects from their encodings.
A certifcate factory for X.509 returns certificates of the
java.security.cert.X509Certificate class, and CRLs of the
java.security.cert.X509CRL class.
Since:Author:CertificateFactory
protected CertificateFactory(java.security.cert.CertificateFactorySpi certFacSpi, java.security.Provider provider, java.lang.String type)
Creates an instance of CertificateFactory
Parameters:
generateCRL
public final CRL generateCRL(java.io.InputStream inStream)
Generates a CRL based on the encoded data read
from the InputStream.
The input stream must contain only one CRL.
If there exists a specialized CRL class for the
CRL format handled by the certificate factory
then the return CRL should be a typecast of it.
Ex: A X.509 CertificateFactory should return X509CRL.
Parameters:
Returns:
- a CRL initialized with InputStream data.
Throws:
generateCRLs
public final Collection generateCRLs(java.io.InputStream inStream)
Generates CRLs based on the encoded data read
from the InputStream.
For a X.509 certificate factory, the stream may contain a
single DER encoded CRL or a PKCS#7 CRL set. This is a
PKCS#7 SignedData object with the most significant
field being crls. If no CRLs are present, then an
empty collection is returned.
Parameters:
Returns:
- a collection of CRLs initialized with
the InputStream data.
Throws:
generateCertPath
public final CertPath generateCertPath(java.io.InputStream inStream)
Parameters:
generateCertificate
public final Certificate generateCertificate(java.io.InputStream inStream)
Generates a Certificate based on the encoded data read
from the InputStream.
The input stream must contain only one certificate.
If there exists a specialized certificate class for the
certificate format handled by the certificate factory
then the return Ceritificate should be a typecast of it.
Ex: A X.509 CertificateFactory should return X509Certificate.
For X.509 certificates, the certificate in inStream must be
DER encoded and supplied in binary or printable (Base64)
encoding. If the certificate is in Base64 encoding, it must be
bounded by -----BEGINCERTIFICATE-----, and
-----END CERTIFICATE-----.
Parameters:
Returns:
- a certificate initialized with InputStream data.
Throws:
generateCertificates
public final Collection generateCertificates(java.io.InputStream inStream)
Returns a collection of certificates that were read from the
input stream. It may be empty, have only one, or have
multiple certificates.
For a X.509 certificate factory, the stream may contain a
single DER encoded certificate or a PKCS#7 certificate
chain. This is a PKCS#7 SignedData object with the
most significant field being certificates. If no
CRLs are present, then an empty collection is returned.
Parameters:
Returns:
- a collection of certificates initialized with
the InputStream data.
Throws:
getInstance
public static final CertificateFactory getInstance(java.lang.String type)
Gets an instance of the CertificateFactory class representing
the specified certificate factory. If the type is not
found then, it throws CertificateException.
Parameters:
Returns:
- a CertificateFactory repesenting the desired type
Throws:
getInstance
public static final CertificateFactory getInstance(java.lang.String type, java.lang.String provider)
Gets an instance of the CertificateFactory class representing
the specified certificate factory from the specified provider.
If the type is not found then, it throws CertificateException.
If the provider is not found, then it throws
NoSuchProviderException.
Parameters:
Returns:
- a CertificateFactory repesenting the desired type
Throws:
getProvider
public final Provider getProvider()
Gets the provider that the class is from.
Returns:
- the provider of this class
getType
public final String getType()
Returns the type of the certificate supported
Returns:
- A string with the type of certificate