Examples of BouncyCastlePKIUtility

org.candlepin.pki.impl.BouncyCastlePKIUtility

The default {@link PKIUtility} for Candlepin.This class implements methods to create X509 Certificates, X509 CRLs, encode objects in PEM format (for saving to the db or sending to the client), and decode raw ASN.1 DER values (as read from a Certificate/CRL). All code that imports bouncycastle should live either in this module, or in {@link BouncyCastlePKIReader}(March 24, 2011) Notes on implementing a PKIUtility with NSS/JSS: JSS provides classes and functions to generate X509Certificates (see CertificateInfo, for example). PEM encoding requires us to determine the object type (which we know), add the correct header and footer to the output, base64 encode the DER for the object, and line wrap the base64 encoding. decodeDERValue should be simple, as JSS provides code to parse ASN.1, but I wasn't able to get it to work. The big one is CRL generation. JSS has no code to generate CRLs in any format. We'll have to use the raw ASN.1 libraries to build up our own properly formatted CRL DER representation, then PEM encode it. See also {@link BouncyCastlePKIReader} for more notes on using NSS/JSS, and a noteabout not using bouncycastle as the JSSE provider.

        return "CN=test, UID=" + UUID.randomUUID();
    }


    @Before
    public void init() throws Exception {
        this.pkiUtility = new BouncyCastlePKIUtility(pkiReader,
            new DefaultSubjectKeyIdentifierWriter());
        this.generator = new CrlGenerator(curator, pkiUtility);


        when(pkiReader.getCaKey()).thenReturn(KP.getPrivate());
        when(pkiReader.getCACert()).thenReturn(CERT);


    @Test
    public void testDetachedEntitlementDataNotAddedToCertV1()
        throws Exception {


        KeyPair keyPair = new BouncyCastlePKIUtility(null, null).generateNewKeyPair();
        when(keyPairCurator.getConsumerKeyPair(any(Consumer.class))).thenReturn(keyPair);


        when(mockedPKI.getPemEncoded(any(X509Certificate.class))).thenReturn(
            "".getBytes());
        when(mockedPKI.getPemEncoded(any(Key.class))).thenReturn("".getBytes());

    }


    @Test
    public void importConsumer() throws Exception {
        Security.addProvider(new BouncyCastleProvider());
        PKIUtility pki = new BouncyCastlePKIUtility(null,
            new DefaultSubjectKeyIdentifierWriter());


        OwnerCurator oc = mock(OwnerCurator.class);
        ConsumerTypeCurator ctc = mock(ConsumerTypeCurator.class);
        ConsumerType type = new ConsumerType(ConsumerTypeEnum.CANDLEPIN);

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of BouncyCastlePKIUtility

Examples of org.candlepin.pki.impl.BouncyCastlePKIUtility

Examples of org.candlepin.pki.impl.BouncyCastlePKIUtility

Examples of org.candlepin.pki.impl.BouncyCastlePKIUtility