java.security

Class KeyStoreSpi

Known Direct Subclasses:
GnuKeyring

public abstract class KeyStoreSpi
extends Object

KeyStoreSpi is the Service Provider Interface (SPI) for the KeyStore class. This is the interface for providers to supply to implement a keystore for a particular keystore type.
Since:
1.2

Constructor Summary

KeyStoreSpi()
Constructs a new KeyStoreSpi

Method Summary

abstract Enumeration
engineAliases()
Generates a list of all the aliases in the keystore.
abstract boolean
engineContainsAlias(String alias)
Determines if the keystore contains the specified alias.
abstract void
engineDeleteEntry(String alias)
Deletes the entry for the specified entry.
abstract Certificate
engineGetCertificate(String alias)
Gets a Certificate for the specified alias.
abstract String
engineGetCertificateAlias(Certificate cert)
Determines if the keystore contains the specified certificate entry and returns the alias.
abstract Certificate[]
engineGetCertificateChain(String alias)
Gets a Certificate chain for the specified alias.
abstract Date
engineGetCreationDate(String alias)
Gets entry creation date for the specified alias.
abstract Key
engineGetKey(String alias, char[] password)
Returns the key associated with given alias using the supplied password.
abstract boolean
engineIsCertificateEntry(String alias)
Determines if the keystore contains a certificate entry for the specified alias.
abstract boolean
engineIsKeyEntry(String alias)
Determines if the keystore contains a key entry for the specified alias.
abstract void
engineLoad(InputStream stream, char[] password)
Loads the keystore from the specified input stream and it uses the specified password to check for integrity if supplied.
abstract void
engineSetCertificateEntry(String alias, Certificate cert)
Assign the certificate to the alias in the keystore.
abstract void
engineSetKeyEntry(String alias, byte[] key, Certificate[] chain)
Assign the key to the alias in the keystore.
abstract void
engineSetKeyEntry(String alias, Key key, char[] password, Certificate[] chain)
Assign the key to the alias in the keystore, protecting it with the given password.
abstract int
engineSize()
Returns the number of entries in the keystore.
abstract void
engineStore(OutputStream stream, char[] password)
Stores the keystore in the specified output stream and it uses the specified key it keep it secure.

Methods inherited from class java.lang.Object

clone, equals, extends Object> getClass, finalize, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

KeyStoreSpi

public KeyStoreSpi()
Constructs a new KeyStoreSpi

Method Details

engineAliases

public abstract Enumeration engineAliases()
Generates a list of all the aliases in the keystore.
Returns:
an Enumeration of the aliases

engineContainsAlias

public abstract boolean engineContainsAlias(String alias)
Determines if the keystore contains the specified alias.
Parameters:
alias - the alias name
Returns:
true if it contains the alias, false otherwise

engineDeleteEntry

public abstract void engineDeleteEntry(String alias)
            throws KeyStoreException
Deletes the entry for the specified entry.
Parameters:
alias - the alias name
Throws:
KeyStoreException - if it fails

engineGetCertificate

public abstract Certificate engineGetCertificate(String alias)
Gets a Certificate for the specified alias. If there is a trusted certificate entry then that is returned. it there is a key entry with a certificate chain then the first certificate is return or else null.
Parameters:
alias - the alias name
Returns:
a Certificate or null if the alias does not exist or there is no certificate for the alias

engineGetCertificateAlias

public abstract String engineGetCertificateAlias(Certificate cert)
Determines if the keystore contains the specified certificate entry and returns the alias. It checks every entry and for a key entry checks only the first certificate in the chain.
Parameters:
cert - Certificate to look for
Returns:
alias of first matching certificate, null if it does not exist.

engineGetCertificateChain

public abstract Certificate[] engineGetCertificateChain(String alias)
Gets a Certificate chain for the specified alias.
Parameters:
alias - the alias name
Returns:
a chain of Certificates ( ordered from the user's certificate to the Certificate Authority's ) or null if the alias does not exist or there is no certificate chain for the alias ( the alias refers to a trusted certificate entry or there is no entry).

engineGetCreationDate

public abstract Date engineGetCreationDate(String alias)
Gets entry creation date for the specified alias.
Parameters:
alias - the alias name

engineGetKey

public abstract Key engineGetKey(String alias,
                                 char[] password)
            throws NoSuchAlgorithmException,
                   UnrecoverableKeyException
Returns the key associated with given alias using the supplied password.
Parameters:
alias - an alias for the key to get
password - password to access key with
Returns:
the requested key, or null otherwise
Throws:
NoSuchAlgorithmException - if there is no algorithm for recovering the key
UnrecoverableKeyException - key cannot be reocovered (wrong password).

engineIsCertificateEntry

public abstract boolean engineIsCertificateEntry(String alias)
Determines if the keystore contains a certificate entry for the specified alias.
Parameters:
alias - the alias name
Returns:
true if it is a certificate entry, false otherwise

engineIsKeyEntry

public abstract boolean engineIsKeyEntry(String alias)
Determines if the keystore contains a key entry for the specified alias.
Parameters:
alias - the alias name
Returns:
true if it is a key entry, false otherwise

engineLoad

public abstract void engineLoad(InputStream stream,
                                char[] password)
            throws IOException,
                   NoSuchAlgorithmException,
                   CertificateException
Loads the keystore from the specified input stream and it uses the specified password to check for integrity if supplied.
Parameters:
stream - the input stream to load the keystore from
password - the password to check the keystore integrity with
Throws:
IOException - if an I/O error occurs.
NoSuchAlgorithmException - the data integrity algorithm used cannot be found.
CertificateException - if any certificates could not be stored in the output stream.

engineSetCertificateEntry

public abstract void engineSetCertificateEntry(String alias,
                                               Certificate cert)
            throws KeyStoreException
Assign the certificate to the alias in the keystore. It will overwrite an existing entry.
Parameters:
alias - the alias name
cert - the certificate to add
Throws:
KeyStoreException - if it fails

engineSetKeyEntry

public abstract void engineSetKeyEntry(String alias,
                                       byte[] key,
                                       Certificate[] chain)
            throws KeyStoreException
Assign the key to the alias in the keystore. It will overwrite an existing entry and if the key is a PrivateKey, also add the certificate chain representing the corresponding public key.
Parameters:
alias - the alias name
key - the key to add
chain - the certificate chain for the corresponding public key
Throws:
KeyStoreException - if it fails

engineSetKeyEntry

public abstract void engineSetKeyEntry(String alias,
                                       Key key,
                                       char[] password,
                                       Certificate[] chain)
            throws KeyStoreException
Assign the key to the alias in the keystore, protecting it with the given password. It will overwrite an existing entry and if the key is a PrivateKey, also add the certificate chain representing the corresponding public key.
Parameters:
alias - the alias name
key - the key to add
chain - the certificate chain for the corresponding public key
Throws:
KeyStoreException - if it fails

engineSize

public abstract int engineSize()
Returns the number of entries in the keystore.

engineStore

public abstract void engineStore(OutputStream stream,
                                 char[] password)
            throws IOException,
                   NoSuchAlgorithmException,
                   CertificateException
Stores the keystore in the specified output stream and it uses the specified key it keep it secure.
Parameters:
stream - the output stream to save the keystore to
password - the password to protect the keystore integrity with
Throws:
IOException - if an I/O error occurs.
NoSuchAlgorithmException - the data integrity algorithm used cannot be found.
CertificateException - if any certificates could not be stored in the output stream.

KeyStoreSpi.java --- Key Store Service Provider Interface Copyright (C) 1999, 2004 Free Software Foundation, Inc. This file is part of GNU Classpath. GNU Classpath is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version. GNU Classpath is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with GNU Classpath; see the file COPYING. If not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. Linking this library statically or dynamically with other modules is making a combined work based on this library. Thus, the terms and conditions of the GNU General Public License cover the whole combination. As a special exception, the copyright holders of this library give you permission to link this library with independent modules to produce an executable, regardless of the license terms of these independent modules, and to copy and distribute the resulting executable under terms of your choice, provided that you also meet, for each linked independent module, the terms and conditions of the license of that module. An independent module is a module which is not derived from or based on this library. If you modify this library, you may extend this exception to your version of the library, but you are not obligated to do so. If you do not wish to do so, delete this exception statement from your version.