Examples of org.bouncycastle.asn1.x509.KeyUsage

org.bouncycastle.asn1.x509.KeyUsage

The KeyUsage object.

 id-ce-keyUsage OBJECT IDENTIFIER ::=  { id-ce 15 } KeyUsage ::= BIT STRING { digitalSignature        (0), nonRepudiation          (1), keyEncipherment         (2), dataEncipherment        (3), keyAgreement            (4), keyCertSign             (5), cRLSign                 (6), encipherOnly            (7), decipherOnly            (8) }

                                 true,
                                 new BasicConstraints(false));


        this.certGen.addExtension(X509Extensions.KeyUsage,
                                  true,
                                  new KeyUsage(KeyUsage.digitalSignature |
                                               KeyUsage.keyEncipherment));
    }

View Full Code Here

                                  false,
                                  aki);


        this.certGen.addExtension(X509Extensions.KeyUsage,
                                 false,
                                 new KeyUsage(KeyUsage.cRLSign |
                                              KeyUsage.keyCertSign));


        return this.certGen.generateX509Certificate(keyPair.getPrivate());
    }

View Full Code Here

                                 true,
                                 new BasicConstraints(false));


        this.certGen.addExtension(X509Extensions.KeyUsage,
                                  true,
                                  new KeyUsage(KeyUsage.digitalSignature |
                                               KeyUsage.keyEncipherment));
    }

View Full Code Here

                                  false,
                                  aki);


        this.certGen.addExtension(X509Extensions.KeyUsage,
                                 false,
                                 new KeyUsage(KeyUsage.cRLSign |
                                              KeyUsage.keyCertSign));


        return this.certGen.generateX509Certificate(keyPair.getPrivate());
    }

View Full Code Here

                                 true,
                                 new BasicConstraints(false));


        this.certGen.addExtension(X509Extensions.KeyUsage,
                                  true,
                                  new KeyUsage(KeyUsage.digitalSignature |
                                               KeyUsage.keyEncipherment));
    }

View Full Code Here

            keyPair = PkiTestUtils.generateKeyPair();
            Calendar cal = Calendar.getInstance();
            Date notBefore = cal.getTime();
            cal.add(Calendar.YEAR, 1);
            Date notAfter = cal.getTime();
            KeyUsage keyUsage = new KeyUsage(KeyUsage.digitalSignature);
            
            x509 = PkiTestUtils.generateCertificate(keyPair.getPublic(), subjectDN
                , notBefore, notAfter, null, keyPair.getPrivate(), true, 0, null, null, keyUsage);


            keystore.setKeyEntry(alias, keyPair.getPrivate(), password, new Certificate[]{x509});

View Full Code Here

        new BasicConstraints(0));


    v3CertGen.addExtension(
        X509Extensions.KeyUsage,
        false,
        new KeyUsage(KeyUsage.cRLSign | KeyUsage.keyCertSign) );


    DEREncodableVector typicalCAExtendedKeyUsages = new DEREncodableVector();


    typicalCAExtendedKeyUsages.add(new DERObjectIdentifier(ExtendedKeyUsageConstants.serverAuth));
    typicalCAExtendedKeyUsages.add(new DERObjectIdentifier(ExtendedKeyUsageConstants.OCSPSigning));

View Full Code Here

    JcaX509ExtensionUtils extensionUtils = new JcaX509ExtensionUtils();
    certGen.addExtension(Extension.subjectKeyIdentifier, false, extensionUtils.createSubjectKeyIdentifier(kp.getPublic()));
    certGen.addExtension(Extension.basicConstraints, false, new BasicConstraints(isCertAuthority));
    certGen.addExtension(Extension.authorityKeyIdentifier, false, extensionUtils.createAuthorityKeyIdentifier(signerPublicKey));
    if (isCertAuthority) {
      certGen.addExtension(Extension.keyUsage, true, new KeyUsage(KeyUsage.keyCertSign));
    }
    X509CertificateHolder cert = certGen.build(new JcaContentSignerBuilder(signingAlgorithm).build(signerPrivateKey));
    return new X509CertificateObject(cert.toASN1Structure());
  }

View Full Code Here

        certGen.setSubjectDN(subjectPrincipal);
        certGen.setPublicKey(clientKeyPair.getPublic());
        certGen.setSignatureAlgorithm(SIGNATURE_ALGO);


        // set key usage - required for proper x509 function
        KeyUsage keyUsage = new KeyUsage(KeyUsage.digitalSignature |
            KeyUsage.keyEncipherment | KeyUsage.dataEncipherment);


        // add SSL extensions - required for proper x509 function
        NetscapeCertType certType = new NetscapeCertType(
            NetscapeCertType.sslClient | NetscapeCertType.smime);

View Full Code Here

                        {
                            buf.append(new BasicConstraints((ASN1Sequence)dIn.readObject())).append(nl);
                        }
                        else if (oid.equals(X509Extensions.KeyUsage))
                        {
                            buf.append(new KeyUsage((DERBitString)dIn.readObject())).append(nl);
                        }
                        else if (oid.equals(MiscObjectIdentifiers.netscapeCertType))
                        {
                            buf.append(new NetscapeCertType((DERBitString)dIn.readObject())).append(nl);
                        }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.bouncycastle.asn1.x509.KeyUsage

com.drighetto.essai.bouncycastle.certificate.CertificateGenerator

com.gitblit.utils.X509Utils

net.sf.libpdfsign.CRLDownloader

net.sf.libpdfsign.OCSPClient

org.apache.accumulo.test.util.CertUtils

org.apache.geronimo.crypto.jce.provider.X509CertificateObject

org.apache.geronimo.util.jce.provider.X509CertificateObject

org.bouncycastle.asn1.ASN1Encodable

org.bouncycastle.asn1.ASN1EncodableVector

org.bouncycastle.asn1.ASN1Enumerated

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.