org.apache.james.security
Class SMIMEKeyHolder

java.lang.Object
  org.apache.james.security.SMIMEKeyHolder

All Implemented Interfaces:

KeyHolder

public class SMIMEKeyHolder
extends java.lang.Object
implements KeyHolder

Loads a KeyStore in memory and keeps it ready for the cryptographic activity.

It has the role of being a simpler intermediate to the crypto libraries. Uses specifically the Legion of the Bouncy Castle libraries, particularly for the SMIME activity.

Since:

3.0

Version:

CVS $Revision: 647925 $ $Date: 2008-04-14 19:38:17 +0100 (Mon, 14 Apr 2008) $

Constructor Summary

SMIMEKeyHolder(java.lang.String keyStoreFileName, java.lang.String keyStorePassword, java.lang.String keyAlias, java.lang.String keyAliasPassword, java.lang.String keyStoreType)
Creates a new instance of KeyHolder using KeyStore related parameters.

Method Summary

org.bouncycastle.mail.smime.SMIMESignedGenerator	createGenerator() Creates an SMIMESignedGenerator.
javax.mail.internet.MimeMultipart	generate(javax.mail.internet.MimeBodyPart content) Generates a signed MimeMultipart from a MimeBodyPart.
javax.mail.internet.MimeMultipart	generate(javax.mail.internet.MimeMessage message) Generates a signed MimeMultipart from a MimeMessage.
java.security.cert.X509Certificate	getCertificate() Getter for property certificate.
java.security.cert.CertStore	getCertStore() Getter for property certStore.
static java.lang.String	getDefaultType() Returns the default keystore type as specified in the Java security properties file, or the string "jks" (acronym for "Java keystore") if no such property exists.
java.security.PrivateKey	getPrivateKey() Getter for property privateKey.
java.lang.String	getSignerAddress() Getter for property signerAddress.
static java.lang.String	getSignerAddress(java.security.cert.X509Certificate certificate) Extracts the signer email address (EMAILADDRESS=) from an X509Certificate distinguished name.
java.lang.String	getSignerCN() Getter for property signerCN.
static java.lang.String	getSignerCN(java.security.cert.X509Certificate certificate) Extracts the signer common name (CN=) from an X509Certificate distinguished name.
java.lang.String	getSignerDistinguishedName() Getter for property signerDistinguishedName.
static java.lang.String	getSignerDistinguishedName(java.security.cert.X509Certificate certificate) Extracts the signer distinguished name (DN) from an X509Certificate.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SMIMEKeyHolder

public SMIMEKeyHolder(java.lang.String keyStoreFileName,
                      java.lang.String keyStorePassword,
                      java.lang.String keyAlias,
                      java.lang.String keyAliasPassword,
                      java.lang.String keyStoreType)
               throws java.security.KeyStoreException,
                      java.io.FileNotFoundException,
                      java.io.IOException,
                      java.security.NoSuchAlgorithmException,
                      java.security.InvalidAlgorithmParameterException,
                      java.security.cert.CertificateException,
                      java.security.UnrecoverableKeyException,
                      java.security.NoSuchProviderException

Creates a new instance of KeyHolder using KeyStore related parameters.

Parameters:

keyStoreFileName - The (absolute) file name of the .keystore file to load the keystore from.

keyStorePassword - The (optional) password used to check the integrity of the keystore. If given, it is used to check the integrity of the keystore data, otherwise, if null, the integrity of the keystore is not checked.

keyAlias - The alias name of the key. If missing (is null) and if there is only one key in the keystore, will default to it.

keyAliasPassword - The password of the alias for recovering the key. If missing (is null) will default to keyStorePassword. At least one of the passwords must be provided.

keyStoreType - The type of keystore. If missing (is null) will default to the keystore type as specified in the Java security properties file, or the string "jks" (acronym for "Java keystore") if no such property exists.

Throws:

java.security.KeyStoreException - Thrown when the keyAlias is specified and not found, or is not specified and either no alias is found or more than one is found.

java.io.FileNotFoundException

java.io.IOException

java.security.NoSuchAlgorithmException

java.security.InvalidAlgorithmParameterException

java.security.cert.CertificateException

java.security.UnrecoverableKeyException

java.security.NoSuchProviderException

See Also:

KeyStore.getDefaultType(), KeyStore.getInstance(String), KeyStore.load(java.io.InputStream, char[]), KeyStore.getKey(java.lang.String, char[]), KeyStore.getCertificate(java.lang.String)

Method Detail

getDefaultType

public static java.lang.String getDefaultType()

Returns the default keystore type as specified in the Java security properties file, or the string "jks" (acronym for "Java keystore") if no such property exists.

Returns:

The defaultType, issuing a KeyStore.getDefaultType().

getPrivateKey

public java.security.PrivateKey getPrivateKey()

Getter for property privateKey.

Returns:

Value of property privateKey.

getCertificate

public java.security.cert.X509Certificate getCertificate()

Getter for property certificate.

Returns:

Value of property certificate.

getCertStore

public java.security.cert.CertStore getCertStore()

Getter for property certStore.

Returns:

Value of property certStore.

createGenerator

public org.bouncycastle.mail.smime.SMIMESignedGenerator createGenerator()
                                                                 throws java.security.cert.CertStoreException,
                                                                        org.bouncycastle.mail.smime.SMIMEException

Creates an SMIMESignedGenerator. Includes a signer private key and certificate, and a pool of certs and cerls (if any) to go with the signature.

Returns:

The generated SMIMESignedGenerator.

Throws:

java.security.cert.CertStoreException

org.bouncycastle.mail.smime.SMIMEException

generate

public javax.mail.internet.MimeMultipart generate(javax.mail.internet.MimeMessage message)
                                           throws java.security.cert.CertStoreException,
                                                  java.security.NoSuchAlgorithmException,
                                                  java.security.NoSuchProviderException,
                                                  org.bouncycastle.mail.smime.SMIMEException

Generates a signed MimeMultipart from a MimeMessage.

Specified by:

generate in interface KeyHolder

Parameters:

message - The message to sign.

Returns:

The signed MimeMultipart.

Throws:

java.security.cert.CertStoreException

java.security.NoSuchAlgorithmException

java.security.NoSuchProviderException

org.bouncycastle.mail.smime.SMIMEException

generate

public javax.mail.internet.MimeMultipart generate(javax.mail.internet.MimeBodyPart content)
                                           throws java.security.cert.CertStoreException,
                                                  java.security.NoSuchAlgorithmException,
                                                  java.security.NoSuchProviderException,
                                                  org.bouncycastle.mail.smime.SMIMEException

Generates a signed MimeMultipart from a MimeBodyPart.

Specified by:

generate in interface KeyHolder

Parameters:

content - The content to sign.

Returns:

The signed MimeMultipart.

Throws:

java.security.cert.CertStoreException

java.security.NoSuchAlgorithmException

java.security.NoSuchProviderException

org.bouncycastle.mail.smime.SMIMEException

getSignerDistinguishedName

public static java.lang.String getSignerDistinguishedName(java.security.cert.X509Certificate certificate)

Extracts the signer distinguished name (DN) from an X509Certificate.

Parameters:

certificate - The certificate to extract the information from.

Returns:

The requested information.

getSignerCN

public static java.lang.String getSignerCN(java.security.cert.X509Certificate certificate)

Extracts the signer common name (CN=) from an X509Certificate distinguished name.

Parameters:

certificate - The certificate to extract the information from.

Returns:

The requested information.

See Also:

getSignerDistinguishedName(X509Certificate)

getSignerAddress

public static java.lang.String getSignerAddress(java.security.cert.X509Certificate certificate)

Extracts the signer email address (EMAILADDRESS=) from an X509Certificate distinguished name.

Parameters:

certificate - The certificate to extract the information from.

Returns:

The requested information.

See Also:

getSignerDistinguishedName(X509Certificate)

getSignerDistinguishedName

public java.lang.String getSignerDistinguishedName()

Getter for property signerDistinguishedName.

Specified by:

getSignerDistinguishedName in interface KeyHolder

Returns:

Value of property signerDistinguishedName.

See Also:

getSignerDistinguishedName(X509Certificate)

getSignerCN

public java.lang.String getSignerCN()

Getter for property signerCN.

Specified by:

getSignerCN in interface KeyHolder

Returns:

Value of property signerCN.

See Also:

getSignerCN(X509Certificate)

getSignerAddress

public java.lang.String getSignerAddress()

Getter for property signerAddress.

Specified by:

getSignerAddress in interface KeyHolder

Returns:

Value of property signerMailAddress.

See Also:

getSignerAddress(X509Certificate)