org.apache.nifi.security.util

Class CertificateUtils

java.lang.Object

org.apache.nifi.security.util.CertificateUtils

public final class CertificateUtils
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
private static org.slf4j.Logger	logger

Constructor Summary

Constructors

Modifier	Constructor and Description
private	CertificateUtils()

Method Summary

Modifier and Type	Method and Description
static String	extractUsername(String dn) Extracts the username from the specified DN.
static List<String>	getSubjectAlternativeNames(X509Certificate certificate) Returns a list of subject alternative names.
static boolean	isStoreValid(URL keystore, KeystoreType keystoreType, char[] password) Returns true if the given keystore can be loaded using the given keystore type and password.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

private static final org.slf4j.Logger logger

Constructor Detail

CertificateUtils

private CertificateUtils()

Method Detail

isStoreValid

public static boolean isStoreValid(URL keystore,
                                   KeystoreType keystoreType,
                                   char[] password)

Returns true if the given keystore can be loaded using the given keystore type and password. Returns false otherwise.

Parameters:

keystore - the keystore to validate

keystoreType - the type of the keystore

password - the password to access the keystore

Returns:

true if valid; false otherwise

extractUsername

public static String extractUsername(String dn)

Extracts the username from the specified DN. If the username cannot be extracted because the CN is in an unrecognized format, the entire CN is returned. If the CN cannot be extracted because the DN is in an unrecognized format, the entire DN is returned.

Parameters:

dn - the dn to extract the username from

Returns:

the exatracted username

getSubjectAlternativeNames

public static List<String> getSubjectAlternativeNames(X509Certificate certificate)
                                               throws CertificateParsingException

Returns a list of subject alternative names. Any name that is represented as a String by X509Certificate.getSubjectAlternativeNames() is converted to lowercase and returned.

Parameters:

certificate - a certificate

Returns:

a list of subject alternative names; list is never null

Throws:

CertificateParsingException - if parsing the certificate failed