A B C D E F G I K M N P R S T V X
All Classes All Packages

A

addAcmeIdentifierExtension(byte[]) - Method in class io.netty.pkitesting.CertificateBuilder

Add an acmeIdentifier extension marked critical, with the given authorization SHA-256 value.

addCrlDistributionPoint(URI) - Method in class io.netty.pkitesting.CertificateBuilder

Add a URI distribution point for a certificate revocation list.

addCrlDistributionPoint(URI, X500Principal) - Method in class io.netty.pkitesting.CertificateBuilder

Add a URI distribution point for a certificate revocation list.

addExtendedKeyUsage(CertificateBuilder.ExtendedKeyUsage) - Method in class io.netty.pkitesting.CertificateBuilder

Add the given CertificateBuilder.ExtendedKeyUsage to the list of extended key usages.

addExtendedKeyUsage(String) - Method in class io.netty.pkitesting.CertificateBuilder

Add the given OID to the list of extended key usages.

addExtendedKeyUsageClientAuth() - Method in class io.netty.pkitesting.CertificateBuilder

Add client-authentication to the list of extended key usages.

addExtendedKeyUsageCodeSigning() - Method in class io.netty.pkitesting.CertificateBuilder

Add code signing to the list of extended key usages.

addExtendedKeyUsageEmailProtection() - Method in class io.netty.pkitesting.CertificateBuilder

Add email protection to the list of extended key usages.

addExtendedKeyUsageKerberosClientAuth() - Method in class io.netty.pkitesting.CertificateBuilder

Add Kerberos client authentication to the list of extended key usages.

addExtendedKeyUsageMicrosoftSmartcardLogin() - Method in class io.netty.pkitesting.CertificateBuilder

Add Microsoft smartcard login to the list of extended key usages.

addExtendedKeyUsageOcspSigning() - Method in class io.netty.pkitesting.CertificateBuilder

Add OCSP signing to the list of extended key usages.

addExtendedKeyUsageServerAuth() - Method in class io.netty.pkitesting.CertificateBuilder

Add server-authentication to the list of extended key usages.

addExtendedKeyUsageTimeStamping() - Method in class io.netty.pkitesting.CertificateBuilder

Add time-stamping to the list of extended key usages.

addExtensionAsciiString(String, boolean, String) - Method in class io.netty.pkitesting.CertificateBuilder

Add a custom DER-encoded ASN.1 IA5String (an ASCII string) extension to the certificate, with the given OID, criticality, and string value.

addExtensionOctetString(String, boolean, byte[]) - Method in class io.netty.pkitesting.CertificateBuilder

Add a custom extension to the certificate, with the given OID, criticality flag, and DER-encoded contents.

addExtensionUtf8String(String, boolean, String) - Method in class io.netty.pkitesting.CertificateBuilder

Add a custom DER-encoded ASN.1 UTF-8 string extension to the certificate, with the given OID, criticality, and string value.

addSanDirectoryName(String) - Method in class io.netty.pkitesting.CertificateBuilder

Add a Directory Name to the Subject Alternative Names.

addSanDnsName(String) - Method in class io.netty.pkitesting.CertificateBuilder

Add a DNS name to the Subject Alternate Names.

addSanIpAddress(String) - Method in class io.netty.pkitesting.CertificateBuilder

Add an IP address to the Subject Alternative Names.

addSanIpAddress(InetAddress) - Method in class io.netty.pkitesting.CertificateBuilder

Add an IP address to the Subject Alternative Names.

addSanOtherName(String, byte[]) - Method in class io.netty.pkitesting.CertificateBuilder

Add an Other Name to the Subject Alternative Names, of the given OID type, and with the given encoded value.

addSanRegisteredId(String) - Method in class io.netty.pkitesting.CertificateBuilder

Add a registeredID to the Subject Alternative Names.

addSanRfc822Name(String) - Method in class io.netty.pkitesting.CertificateBuilder

Add an RFC 822 name to the Subject Alternative Names.

addSanUriName(String) - Method in class io.netty.pkitesting.CertificateBuilder

Add a URI name to the Subject Alternative Names.

addSanUriName(URI) - Method in class io.netty.pkitesting.CertificateBuilder

Add a URI name to the Subject Alternative Names.

algorithm(CertificateBuilder.Algorithm) - Method in class io.netty.pkitesting.CertificateBuilder

Set the key algorithm to use.

B

buildIssuedBy(X509Bundle) - Method in class io.netty.pkitesting.CertificateBuilder

Build a X509Bundle with a certificate signed by the given issuer bundle.

buildIssuedBy(X509Bundle, String) - Method in class io.netty.pkitesting.CertificateBuilder

Build a X509Bundle with a certificate signed by the given issuer bundle, using the specified signing algorithm.

buildSelfSigned() - Method in class io.netty.pkitesting.CertificateBuilder

Build a X509Bundle with a self-signed certificate.

C

CertificateBuilder - Class in io.netty.pkitesting

The CertificateBuilder produce X509Bundle instances, where the keys use the specified algorithm, and the certificate have the specified data.

CertificateBuilder() - Constructor for class io.netty.pkitesting.CertificateBuilder

Create a new certificate builder with a default configuration.

CertificateBuilder.Algorithm - Enum in io.netty.pkitesting

The CertificateBuilder.Algorithm enum encapsulates both the key type, key generation parameters, and the signature algorithm to use.

CertificateBuilder.ExtendedKeyUsage - Enum in io.netty.pkitesting

The extended key usage field specify what the certificate and key is allowed to be used for.

CertificateBuilder.KeyUsage - Enum in io.netty.pkitesting

The key usage field specify what the certificate and key is allowed to be used for.

contentCommitment - io.netty.pkitesting.CertificateBuilder.KeyUsage

This key usage is deprecated by X.509, and commitment may instead be derived from the actual use of the keys.

copy() - Method in class io.netty.pkitesting.CertificateBuilder

Produce a copy of the current state in this certificate builder.

cRLSign - io.netty.pkitesting.CertificateBuilder.KeyUsage

For verifying the Certificate Authority's signature on a Certificate Revocation List.

D

dataEncipherment - io.netty.pkitesting.CertificateBuilder.KeyUsage

For enciphering user data, but not keys or security information.

decipherOnly - io.netty.pkitesting.CertificateBuilder.KeyUsage

For use with CertificateBuilder.KeyUsage.keyAgreement to limit the key to deciphering only.

digitalSignature - io.netty.pkitesting.CertificateBuilder.KeyUsage

For verifying digital signatures, for entity authentication, for entity authentication, or for integrity verification.

E

ecp256 - io.netty.pkitesting.CertificateBuilder.Algorithm

The NIST P-256 elliptic curve algorithm, offer fast key generation, signing, and verification, with small keys and signatures, at 128-bits of security strength.

ecp256() - Method in class io.netty.pkitesting.CertificateBuilder

Make this certificate builder use the NIST EC-P 256 elliptic curve key algorithm.

ecp384 - io.netty.pkitesting.CertificateBuilder.Algorithm

The NIST P-384 elliptic curve algorithm, offer fast key generation, signing, and verification, with small keys and signatures, at 192-bits of security strength.

ed25519 - io.netty.pkitesting.CertificateBuilder.Algorithm

The Ed25519 algorithm offer fast key generation, signing, and verification, with very small keys and signatures, at 128-bits of security strength.

ed448 - io.netty.pkitesting.CertificateBuilder.Algorithm

The Ed448 algorithm offer fast key generation, signing, and verification, with small keys and signatures, at 224-bits of security strength.

encipherOnly - io.netty.pkitesting.CertificateBuilder.KeyUsage

For use with CertificateBuilder.KeyUsage.keyAgreement to limit the key to enciphering only.

F

fromCertificatePath(X509Certificate[], X509Certificate, KeyPair) - Static method in class io.netty.pkitesting.X509Bundle

Construct a bundle from a given certificate path, root certificate, and KeyPair.

fromRootCertificateAuthority(X509Certificate, KeyPair) - Static method in class io.netty.pkitesting.X509Bundle

Construct a bundle for a certificate authority.

G

generateKeyPair(SecureRandom) - Method in enum io.netty.pkitesting.CertificateBuilder.Algorithm

Generate a new KeyPair using this algorithm, and the given SecureRandom generator.

generateKeyPair(SecureRandom, Provider) - Method in enum io.netty.pkitesting.CertificateBuilder.Algorithm

Generate a new KeyPair using this algorithm, and the given SecureRandom generator.

getCertificate() - Method in class io.netty.pkitesting.X509Bundle

Get the leaf certificate of the bundle.

getCertificatePath() - Method in class io.netty.pkitesting.X509Bundle

Get the certificate path, starting with the leaf certificate up to but excluding the root certificate.

getCertificatePathList() - Method in class io.netty.pkitesting.X509Bundle

Get the certificate path as a list, starting with the leaf certificate up to but excluding the root certificate.

getCertificatePathPEM() - Method in class io.netty.pkitesting.X509Bundle

Get the certificate path as a PEM encoded string.

getCertificatePathWithRoot() - Method in class io.netty.pkitesting.X509Bundle

Get the certificate path, starting with the leaf certificate up to and including the root certificate.

getCertificatePEM() - Method in class io.netty.pkitesting.X509Bundle

Get the PEM encoded string of the leaf certificate.

getCrlUri(X509Bundle) - Method in class io.netty.pkitesting.RevocationServer

Get the URI of the Certificate Revocation List for the given issuer.

getInstance() - Static method in class io.netty.pkitesting.RevocationServer

Get the shared revocation server instance.

getKeyPair() - Method in class io.netty.pkitesting.X509Bundle

Get the key pair.

getOid() - Method in enum io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

getPrivateKeyPEM() - Method in class io.netty.pkitesting.X509Bundle

Get the private key as a PEM encoded PKCS#8 string.

getRootCertificate() - Method in class io.netty.pkitesting.X509Bundle

Get the root certificate that anchors the certificate path.

getRootCertificatePEM() - Method in class io.netty.pkitesting.X509Bundle

Get the root certificate as a PEM encoded string.

getTrustAnchor() - Method in class io.netty.pkitesting.X509Bundle

Get the root certificate as a new TrustAnchor object.

I

io.netty.pkitesting - package io.netty.pkitesting

Tools for generating X.509 certificates for testing.

isCertificateAuthority() - Method in class io.netty.pkitesting.X509Bundle

Query if this bundle is for a certificate authority root certificate.

isSelfSigned() - Method in class io.netty.pkitesting.X509Bundle

Query if this bundle is for a self-signed certificate.

isSupported() - Method in enum io.netty.pkitesting.CertificateBuilder.Algorithm

Tell whether this algorithm is supported in the current JVM.

K

KERBEROS_KEY_PURPOSE_CLIENT_AUTH - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used for Kerberos client authentication.

keyAgreement - io.netty.pkitesting.CertificateBuilder.KeyUsage

For use in public key agreement.

keyCertSign - io.netty.pkitesting.CertificateBuilder.KeyUsage

For verifying the Certificate Authority's signature on a public-key certificate.

keyEncipherment - io.netty.pkitesting.CertificateBuilder.KeyUsage

For enciphering keys or other security information.

keyPair(KeyPair) - Method in class io.netty.pkitesting.CertificateBuilder

Instruct the certificate builder to not generate its own key pair, but to instead create a certificate that uses the given key pair.

M

mergeIntermediates(X509Bundle) - Method in class io.netty.pkitesting.X509Bundle

Create a new X509Bundle that has the leaf and root certificates of this bundle, but a certificate path that is the combination all the intermediate certificates of both this and the given bundle.

MICROSOFT_SMARTCARD_LOGIN - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used for Microsoft smartcard logins.

mlDsa44 - io.netty.pkitesting.CertificateBuilder.Algorithm

The ML-DSA-44 algorithm is the NIST FIPS 204 version of the post-quantum Dilithium algorithm.

mlDsa65 - io.netty.pkitesting.CertificateBuilder.Algorithm

The ML-DSA-65 algorithm is the NIST FIPS 204 version of the post-quantum Dilithium algorithm.

mlDsa87 - io.netty.pkitesting.CertificateBuilder.Algorithm

The ML-DSA-87 algorithm is the NIST FIPS 204 version of the post-quantum Dilithium algorithm.

mlKem1024 - io.netty.pkitesting.CertificateBuilder.Algorithm

The ML-KEM-1024 algorithm is the NIST FIPS 203 version of the post-quantum Kyber algorithm.

mlKem512 - io.netty.pkitesting.CertificateBuilder.Algorithm

The ML-KEM-512 algorithm is the NIST FIPS 203 version of the post-quantum Kyber algorithm.

mlKem768 - io.netty.pkitesting.CertificateBuilder.Algorithm

The ML-KEM-768 algorithm is the NIST FIPS 203 version of the post-quantum Kyber algorithm.

N

notAfter(Instant) - Method in class io.netty.pkitesting.CertificateBuilder

Set the not-after field of the certificate.

notBefore(Instant) - Method in class io.netty.pkitesting.CertificateBuilder

Set the not-before field of the certificate.

P

PKIX_KP_CLIENT_AUTH - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used on the client-side of a TLS connection.

PKIX_KP_CODE_SIGNING - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used for code signing.

PKIX_KP_EMAIL_PROTECTION - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used for protecting email.

PKIX_KP_OCSP_SIGNING - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used to sign OCSP replies.

PKIX_KP_SERVER_AUTH - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used on the server-side of a TLS connection.

PKIX_KP_TIME_STAMPING - io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

The certificate can be used for time-stamping.

provider(Provider) - Method in class io.netty.pkitesting.CertificateBuilder

Set the Provider instance to use when generating keys.

publicKey(PublicKey) - Method in class io.netty.pkitesting.CertificateBuilder

Instruct the certificate builder to not generate its own key pair, but to instead create a certificate that uses the given public key.

R

register(X509Bundle) - Method in class io.netty.pkitesting.RevocationServer

Register an issuer with the revocation server.

register(X509Bundle, Provider) - Method in class io.netty.pkitesting.RevocationServer

Register an issuer with the revocation server.

RevocationServer - Class in io.netty.pkitesting

A simple HTTP server that serves Certificate Revocation Lists.

revoke(X509Bundle, Instant) - Method in class io.netty.pkitesting.RevocationServer

Revoke the given certificate with the given revocation time.

rsa2048 - io.netty.pkitesting.CertificateBuilder.Algorithm

The 2048-bit RSA algorithm offer roughly 112-bits of security strength, at the cost of large keys and slightly expensive key generation.

rsa2048() - Method in class io.netty.pkitesting.CertificateBuilder

Make this certificate builder use the 2048-bit RSA encryption and signing algorithm.

rsa3072 - io.netty.pkitesting.CertificateBuilder.Algorithm

The 3072-bit RSA algorithm offer roughly 128-bits of security strength, at the cost of large keys and fairly expensive key generation.

rsa4096 - io.netty.pkitesting.CertificateBuilder.Algorithm

The 4096-bit RSA algorithm offer roughly greater than 128-bits of security strength, at the cost of large keys and very expensive key generation.

rsa8192 - io.netty.pkitesting.CertificateBuilder.Algorithm

The 8192-bit RSA algorithm offer roughly greater than 192-bits of security strength, at the cost of very large keys and extremely expensive key generation.

S

secureRandom(SecureRandom) - Method in class io.netty.pkitesting.CertificateBuilder

Set the SecureRandom instance to use when generating keys.

serial(BigInteger) - Method in class io.netty.pkitesting.CertificateBuilder

Set the specific serial number to use in the certificate.

setIsCertificateAuthority(boolean) - Method in class io.netty.pkitesting.CertificateBuilder

Set the certificate authority field.

setKeyUsage(boolean, CertificateBuilder.KeyUsage...) - Method in class io.netty.pkitesting.CertificateBuilder

The key usage specify the intended usages for which the certificate has been issued.

setPathLengthConstraint(OptionalInt) - Method in class io.netty.pkitesting.CertificateBuilder

Certificate Authority certificates may impose a limit to the length of the verified certificate path they permit.

slhDsaSha2_128f - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHA2-128f algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaSha2_128s - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHA2-128s algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaSha2_192f - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHA2-192f algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaSha2_192s - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHA2-192 algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaSha2_256f - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHA2-256f algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaSha2_256s - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHA2-256s algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaShake_128f - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHAKE-128f algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaShake_128s - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHAKE-128s algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaShake_192f - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHAKE-192f algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaShake_192s - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHAKE-192s algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaShake_256f - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHAKE-256f algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

slhDsaShake_256s - io.netty.pkitesting.CertificateBuilder.Algorithm

The SLH-DSA-SHAKE-256s algorithm is the NIST FIPS 205 of the post-quantum SPHINCS+ algorithm.

subject(String) - Method in class io.netty.pkitesting.CertificateBuilder

Set the fully-qualified domain name (an X.500 name) as the subject of the certificate.

subject(X500Principal) - Method in class io.netty.pkitesting.CertificateBuilder

Set the subject name of the certificate to the given X500Principal.

supportSigning() - Method in enum io.netty.pkitesting.CertificateBuilder.Algorithm

Discern if this algorithm can be used for signing.

T

toKeyManagerFactory() - Method in class io.netty.pkitesting.X509Bundle

Create a KeyManagerFactory from this bundle.

toKeyManagerFactory(String) - Method in class io.netty.pkitesting.X509Bundle

Create a KeyManagerFactory from this bundle, using the given algorithm.

toKeyStore(char[]) - Method in class io.netty.pkitesting.X509Bundle

Create a KeyStore with the contents of this bundle.

toKeyStore(String, char[]) - Method in class io.netty.pkitesting.X509Bundle

Create a KeyStore with the contents of this bundle.

toTempCertChainPem() - Method in class io.netty.pkitesting.X509Bundle

Create a temporary PEM file with the certificate chain of this bundle.

toTempKeyStoreFile(char[]) - Method in class io.netty.pkitesting.X509Bundle

Create a temporary PKCS#12 file with the key store of this bundle.

toTempKeyStoreFile(char[], char[]) - Method in class io.netty.pkitesting.X509Bundle

Create a temporary PKCS#12 file with the key store of this bundle.

toTempPrivateKeyPem() - Method in class io.netty.pkitesting.X509Bundle

Create a temporary PEM file with the private key of this bundle.

toTempRootCertPem() - Method in class io.netty.pkitesting.X509Bundle

Create a temporary PEM file with the root certificate of this bundle.

toTrustManager() - Method in class io.netty.pkitesting.X509Bundle

Create a TrustManager instance that trusts the root certificate in this bundle.

toTrustManagerFactory() - Method in class io.netty.pkitesting.X509Bundle

Create TrustManagerFactory instance that trusts the root certificate in this bundle.

toTrustManagerFactory(String) - Method in class io.netty.pkitesting.X509Bundle

Create TrustManagerFactory instance that trusts the root certificate in this bundle, with the given algorithm.

V

valueOf(String) - Static method in enum io.netty.pkitesting.CertificateBuilder.Algorithm

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum io.netty.pkitesting.CertificateBuilder.KeyUsage

Returns the enum constant of this type with the specified name.

values() - Static method in enum io.netty.pkitesting.CertificateBuilder.Algorithm

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum io.netty.pkitesting.CertificateBuilder.ExtendedKeyUsage

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum io.netty.pkitesting.CertificateBuilder.KeyUsage

Returns an array containing the constants of this enum type, in the order they are declared.

X

X509Bundle - Class in io.netty.pkitesting

A certificate bundle is a private key and a full certificate path, all the way to the root certificate.

A B C D E F G I K M N P R S T V X
All Classes All Packages