Package org.italiangrid.voms.asn1
Class VOMSACGenerator
java.lang.Object
org.italiangrid.voms.asn1.VOMSACGenerator
- All Implemented Interfaces:
VOMSConstants
A generator for VOMS Attribute Certificates (ACs).
This class provides methods for creating VOMS ACs with customizable properties, including optional extensions and fake signature bits for testing purposes.
It uses BouncyCastle for cryptographic operations and supports various extensions required for VOMS attribute certificates.
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic enum
Enumeration defining various properties that can influence the generation of VOMS Attribute Certificates.(package private) static class
A ContentSigner implementation that generates random signature bits. -
Field Summary
FieldsModifier and TypeFieldDescriptionprivate eu.emi.security.authn.x509.X509Credential
static final EnumSet
<VOMSACGenerator.ACGenerationProperties> Default generation properties (none enabled).static final org.bouncycastle.asn1.ASN1ObjectIdentifier
Fake extension OID used in testing.private org.bouncycastle.operator.ContentSigner
Fields inherited from interface org.italiangrid.voms.asn1.VOMSConstants
VOMS_CERTS_OID, VOMS_EXTENSION_OID, VOMS_FQANS_OID, VOMS_GENERIC_ATTRS_OID, VOMS_HANDLED_EXTENSIONS
-
Constructor Summary
ConstructorsConstructorDescriptionVOMSACGenerator
(eu.emi.security.authn.x509.X509Credential aaCredential) Constructs a VOMSACGenerator with the given credential. -
Method Summary
Modifier and TypeMethodDescriptionprivate org.bouncycastle.asn1.ASN1Encodable
private org.bouncycastle.asn1.x509.AuthorityKeyIdentifier
private org.bouncycastle.asn1.ASN1Encodable
buildFQANsAttributeContent
(List<String> fqans, org.bouncycastle.asn1.x509.GeneralName policyAuthorityInfo) private org.bouncycastle.asn1.ASN1Encodable
buildGAExtensionContent
(EnumSet<VOMSACGenerator.ACGenerationProperties> properties, List<VOMSGenericAttribute> gas, org.bouncycastle.asn1.x509.GeneralName policyAuthorityInfo) private org.bouncycastle.cert.AttributeCertificateHolder
buildHolder
(X509Certificate holderCert) private org.bouncycastle.cert.AttributeCertificateIssuer
private org.bouncycastle.asn1.x509.GeneralName
buildPolicyAuthorityInfo
(String voName, String host, int port) private org.bouncycastle.asn1.DERSequence
private org.bouncycastle.asn1.ASN1Encodable
buildTargetsExtensionContent
(EnumSet<VOMSACGenerator.ACGenerationProperties> properties, List<String> targets) private String
buildVOURI
(String voName, String host, int port) Builds a VOMS URI.org.bouncycastle.cert.X509AttributeCertificateHolder
generateVOMSAttributeCertificate
(EnumSet<VOMSACGenerator.ACGenerationProperties> generationProperties, List<String> fqans, List<VOMSGenericAttribute> gas, List<String> targets, X509Certificate holderCert, BigInteger serialNumber, Date notBefore, Date notAfter, String voName, String host, int port) Generates a VOMS attribute certificate with the specified properties.org.bouncycastle.cert.X509AttributeCertificateHolder
generateVOMSAttributeCertificate
(List<String> fqans, List<VOMSGenericAttribute> gas, List<String> targets, X509Certificate holderCert, BigInteger serialNumber, Date notBefore, Date notAfter, String voName, String host, int port) Generates a VOMS attribute certificate with the given properties.eu.emi.security.authn.x509.proxy.CertificateExtension
generateVOMSExtension
(List<org.bouncycastle.cert.X509AttributeCertificateHolder> acs) Generates a VOMS certificate extension.private org.bouncycastle.asn1.ASN1Encodable
private org.bouncycastle.asn1.DEROctetString
private org.bouncycastle.operator.ContentSigner
getSigner
(EnumSet<VOMSACGenerator.ACGenerationProperties> properties) Retrieves the appropriate ContentSigner based on the provided properties.
-
Field Details
-
defaultGenerationProperties
Default generation properties (none enabled). -
FAKE_EXT_OID
public static final org.bouncycastle.asn1.ASN1ObjectIdentifier FAKE_EXT_OIDFake extension OID used in testing. -
aaCredential
private eu.emi.security.authn.x509.X509Credential aaCredential -
signer
private org.bouncycastle.operator.ContentSigner signer
-
-
Constructor Details
-
VOMSACGenerator
public VOMSACGenerator(eu.emi.security.authn.x509.X509Credential aaCredential) Constructs a VOMSACGenerator with the given credential.- Parameters:
aaCredential
- the attribute authority credential
-
-
Method Details
-
getSigner
private org.bouncycastle.operator.ContentSigner getSigner(EnumSet<VOMSACGenerator.ACGenerationProperties> properties) Retrieves the appropriate ContentSigner based on the provided properties.- Parameters:
properties
- the properties influencing AC generation- Returns:
- a ContentSigner instance
- Throws:
VOMSError
- if an error occurs during signer creation
-
buildVOURI
Builds a VOMS URI.- Parameters:
voName
- the VO namehost
- the host nameport
- the port number- Returns:
- a formatted VOMS URI
-
buildACCertsExtensionContent
private org.bouncycastle.asn1.ASN1Encodable buildACCertsExtensionContent(EnumSet<VOMSACGenerator.ACGenerationProperties> properties) -
buildAuthorityKeyIdentifier
private org.bouncycastle.asn1.x509.AuthorityKeyIdentifier buildAuthorityKeyIdentifier() throws CertificateEncodingException, NoSuchAlgorithmException -
buildFQANsAttributeContent
-
buildGAExtensionContent
private org.bouncycastle.asn1.ASN1Encodable buildGAExtensionContent(EnumSet<VOMSACGenerator.ACGenerationProperties> properties, List<VOMSGenericAttribute> gas, org.bouncycastle.asn1.x509.GeneralName policyAuthorityInfo) -
buildHolder
private org.bouncycastle.cert.AttributeCertificateHolder buildHolder(X509Certificate holderCert) throws CertificateEncodingException - Throws:
CertificateEncodingException
-
buildIssuer
private org.bouncycastle.cert.AttributeCertificateIssuer buildIssuer() throws CertificateEncodingException- Throws:
CertificateEncodingException
-
buildPolicyAuthorityInfo
-
buildTagSequence
-
buildTargetsExtensionContent
private org.bouncycastle.asn1.ASN1Encodable buildTargetsExtensionContent(EnumSet<VOMSACGenerator.ACGenerationProperties> properties, List<String> targets) -
generateVOMSAttributeCertificate
public org.bouncycastle.cert.X509AttributeCertificateHolder generateVOMSAttributeCertificate(List<String> fqans, List<VOMSGenericAttribute> gas, List<String> targets, X509Certificate holderCert, BigInteger serialNumber, Date notBefore, Date notAfter, String voName, String host, int port) throws VOMSError Generates a VOMS attribute certificate with the given properties.- Parameters:
fqans
- the list of Fully Qualified Attribute Names (FQANs)gas
- the list of generic attributestargets
- the list of target restrictionsholderCert
- the X.509 certificate of the holderserialNumber
- the serial number of the ACnotBefore
- the start of the AC validity periodnotAfter
- the end of the AC validity periodvoName
- the VO namehost
- the VOMS server hostnameport
- the VOMS server port- Returns:
- the generated X.509 attribute certificate
- Throws:
VOMSError
- if certificate generation fails
-
generateVOMSAttributeCertificate
public org.bouncycastle.cert.X509AttributeCertificateHolder generateVOMSAttributeCertificate(EnumSet<VOMSACGenerator.ACGenerationProperties> generationProperties, List<String> fqans, List<VOMSGenericAttribute> gas, List<String> targets, X509Certificate holderCert, BigInteger serialNumber, Date notBefore, Date notAfter, String voName, String host, int port) throws VOMSError Generates a VOMS attribute certificate with the specified properties.- Parameters:
generationProperties
- the properties influencing AC generationfqans
- the list of Fully Qualified Attribute Names (FQANs)gas
- the list of generic attributestargets
- the list of target restrictionsholderCert
- the X.509 certificate of the holderserialNumber
- the serial number of the ACnotBefore
- the start of the AC validity periodnotAfter
- the end of the AC validity periodvoName
- the VO namehost
- the VOMS server hostnameport
- the VOMS server port- Returns:
- the generated X.509 attribute certificate
- Throws:
VOMSError
- if certificate generation fails
-
generateVOMSExtension
public eu.emi.security.authn.x509.proxy.CertificateExtension generateVOMSExtension(List<org.bouncycastle.cert.X509AttributeCertificateHolder> acs) Generates a VOMS certificate extension.- Parameters:
acs
- the list of X.509 attribute certificates- Returns:
- the generated certificate extension
-
getCertAsDEREncodable
-
getDEROctetString
-