Modul org.shredzone.acme4j
Package org.shredzone.acme4j.util

Klasse CSRBuilder

java.lang.Object
org.shredzone.acme4j.util.CSRBuilder
public class CSRBuilder extends Object
Generator for a CSR (Certificate Signing Request) suitable for ACME servers.

Requires Bouncy Castle. The BouncyCastleProvider must be added as security provider.

  • Konstruktordetails

  • Methodendetails

    • addDomain

      public void addDomain(String domain)
      Adds a domain name to the CSR. All domain names will be added as Subject Alternative Name.

      IDN domain names are ACE encoded automatically.

      For wildcard certificates, the domain name must be prefixed with "*.".

      Parameter:
      domain - Domain name to add

    • addDomains

      public void addDomains(Collection<String> domains)
      Adds a Collection of domains.

      IDN domain names are ACE encoded automatically.

      Parameter:
      domains - Collection of domain names to add

    • addDomains

      public void addDomains(String... domains)
      Adds multiple domain names.

      IDN domain names are ACE encoded automatically.

      Parameter:
      domains - Domain names to add

    • addIP

      public void addIP(InetAddress address)
      Adds an InetAddress. All IP addresses will be set as iPAddress Subject Alternative Name.
      Parameter:
      address - InetAddress to add
      Seit:
      2.4

    • addIPs

      public void addIPs(Collection<InetAddress> ips)
      Adds a Collection of IP addresses.
      Parameter:
      ips - Collection of IP addresses to add
      Seit:
      2.4

    • addIPs

      public void addIPs(InetAddress... ips)
      Adds multiple IP addresses.
      Parameter:
      ips - IP addresses to add
      Seit:
      2.4

    • addIdentifier

      public void addIdentifier(Identifier id)
      Adds an Identifier. Only DNS and IP types are supported.
      Parameter:
      id - Identifier to add
      Seit:
      2.7

    • addIdentifiers

      public void addIdentifiers(Collection<Identifier> ids)
      Adds a Collection of Identifier.
      Parameter:
      ids - Collection of Identifiers to add
      Seit:
      2.7

    • addIdentifiers

      public void addIdentifiers(Identifier... ids)
      Adds multiple Identifier.
      Parameter:
      ids - Identifiers to add
      Seit:
      2.7

    • addValue

      public void addValue(String attName, String value)
      Sets an entry of the subject used for the CSR.

      This method is meant as "expert mode" for setting attributes that are not covered by the other methods. It is at the discretion of the ACME server to accept this parameter.

      Parameter:
      attName - The BCStyle attribute name
      value - The value
      Seit:
      2.14

    • addValue

      public void addValue(org.bouncycastle.asn1.ASN1ObjectIdentifier oid, String value)
      Sets an entry of the subject used for the CSR.

      This method is meant as "expert mode" for setting attributes that are not covered by the other methods. It is at the discretion of the ACME server to accept this parameter.

      Parameter:
      oid - The OID of the attribute to be added
      value - The value
      Seit:
      2.14

    • setCommonName

      public void setCommonName(String cn)
      Sets the common name.

      Note that it is at the discretion of the ACME server to accept this parameter.

      Seit:
      3.2.0

    • setOrganization

      public void setOrganization(String o)
      Sets the organization.

      Note that it is at the discretion of the ACME server to accept this parameter.

    • setOrganizationalUnit

      public void setOrganizationalUnit(String ou)
      Sets the organizational unit.

      Note that it is at the discretion of the ACME server to accept this parameter.

    • setLocality

      public void setLocality(String l)
      Sets the city or locality.

      Note that it is at the discretion of the ACME server to accept this parameter.

    • setState

      public void setState(String st)
      Sets the state or province.

      Note that it is at the discretion of the ACME server to accept this parameter.

    • setCountry

      public void setCountry(String c)
      Sets the country.

      Note that it is at the discretion of the ACME server to accept this parameter.

    • sign

      public void sign(KeyPair keypair) throws IOException
      Signs the completed CSR.
      Parameter:
      keypair - KeyPair to sign the CSR with
      Löst aus:
      IOException

    • getCSR

      public org.bouncycastle.pkcs.PKCS10CertificationRequest getCSR()
      Gets the PKCS#10 certification request.

    • getEncoded

      public byte[] getEncoded() throws IOException
      Gets an encoded PKCS#10 certification request.
      Löst aus:
      IOException

    • write

      public void write(Writer w) throws IOException
      Writes the signed certificate request to a Writer.
      Parameter:
      w - Writer to write the PEM file to. The Writer is closed after use.
      Löst aus:
      IOException

    • write

      public void write(OutputStream out) throws IOException
      Writes the signed certificate request to an OutputStream.
      Parameter:
      out - OutputStream to write the PEM file to. The OutputStream is closed after use.
      Löst aus:
      IOException

    • toString

      public String toString()
      Setzt außer Kraft:
      toString in Klasse Object