All Classes

General finder for converting OIDs and AlgorithmIdentifiers into strings.

Exception thrown if an Archive TimeStamp according to RFC4998 fails to containsHashValue.

Carrying class for an attribute certificate issuer.

OCSP RFC 2560, RFC 6960

Lightweight CRMFOutputEncryptor builder.

Lightweight convenience class for EncryptedValueBuilder

An encrypted value padder that uses MGF1 as the basis of the padding.

JCA helper class to allow BC lightweight objects to be used in the construction of a Version 3 certificate.

Holder class for a SimplePKIResponse containing the details making up /cacerts response.

Data piece of DVCRequest for CCPD service (Certify Claim of Possession of Data).

General IOException thrown in the cert package and its sub-packages.

BC bug test case.

a class representing null or absent content.

containing class for an CMS Authenticated Data object

Parsing class for an CMS Authenticated Data object from an input stream.

containing class for an CMS Compressed Data object

Class for reading a CMS Compressed Data stream.

containing class for an CMS Digested Data object

General class for generating a CMS encrypted-data message.

containing class for an CMS Enveloped Data object

Parsing class for an CMS Enveloped Data object from an input stream.

General class for generating a CMS enveloped-data message.

Toolkit methods for dealing with common errors in CMS classes.

a holding class for a byte array of data to be processed.

general class for handling a pkcs7-signature message.

Parsing class for an CMS Signed Data object from an input stream.

General interface for an operator that is able to create a signature from a stream of output.

General interface for providers of ContentVerifier objects.

Builder of DVCSRequests to CPD service (Certify Possession of Data).

Holder class for a response containing the details making up /csrattrs response.

Carrier class for a DANE entry.

Class storing DANEEntry objects.

General checked Exception thrown in the DANE package.

Representation of data groups according to the description provided in RFC4998.

Default authenticated attributes generator.

Default signed attributes generator.

General interface for an operator that is able to calculate a digest from a stream of output.

Exception thrown when failed to initialize some DVCS-related staff.

DVCS parsing exception - thrown when failed to parse DVCS message.

Common base class for client DVCRequest builders.

Information piece of DVCS requests.

General IOException thrown in the cert package and its sub-packages.

An encrypted value padder is used to make sure that prior to a value been encrypted the data is padded to a standard length.

ESTClient implement connection to the server.

ESTClientSourceProvider, implementations of this are expected to return a source.

ESTHijacker can take control of the source after the initial http request has been sent and a response received.

Implements a basic http request.

A basic http response.

Build an RFC7030 (EST) service.

General wrapper for a generic PKIMessage

Provides stock implementations for basic auth and digest auth.

Base interface for an input consuming AEAD Decryptor supporting associated text.

Builder to create a CertStore from certificate and CRL stores.

Builder for HttpAuth operator that handles digest auth using a JCA provider.

PEM generator for the original set of PEM objects used in Open SSL.

General purpose writer for OpenSSL PEM objects based on JCA/JCE classes.

Extension of the PKCS#10 builder to support PublicKey and X500Principal objects.

Builder for a private/public identity object representing a "user"

Converter for producing X509Certificate objects tied to a specific provider from X509CertificateHolder objects.

Class for converting an X509CRLHolder into a corresponding X509CRL object tied to a particular JCA provider.

Builder for the content encryptor in EnvelopedData - used to encrypt the actual transmitted content.

A generic decryptor provider for IETF style algorithms.

the KeyTransRecipientInformation class for a recipient who has been sent a secret key encrypted using their public key that needs to be used to extract the message.

the KeyTransRecipient class for a recipient who has been sent secret key material encrypted using their public key that needs to be used to derive a key and authenticate a message.

DecryptorProviderBuilder for producing DecryptorProvider for use with PKCS8EncryptedPrivateKeyInfo.

the RecipientInfo class for a recipient who has been sent a message encrypted using a password.

A typical hostname authorizer for verifying a hostname against the available certificates.

Verify the host name is as expected after the SSL Handshake has been completed.

the RecipientInfo class for a recipient who has been sent a message encrypted using a secret key known to the other side.

the RecipientInfo class for a recipient who has been sent a message encrypted using key agreement.

the KeyTransRecipientInformation class for a recipient who has been sent a secret key encrypted using their public key that needs to be used to extract the message.

Interface for a Source which can only produce up to a certain number of bytes.

PEM generator for the original set of PEM objects used in Open SSL.

OCSPRequest ::= SEQUENCE { tbsRequest TBSRequest, optionalSignature [0] EXPLICIT Signature OPTIONAL } TBSRequest ::= SEQUENCE { version [0] EXPLICIT Version DEFAULT v1, requestorName [1] EXPLICIT GeneralName OPTIONAL, requestList SEQUENCE OF Request, requestExtensions [2] EXPLICIT Extensions OPTIONAL } Signature ::= SEQUENCE { signatureAlgorithm AlgorithmIdentifier, signature BIT STRING, certs [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL} Version ::= INTEGER { v1(0) } Request ::= SEQUENCE { reqCert CertID, singleRequestExtensions [0] EXPLICIT Extensions OPTIONAL } CertID ::= SEQUENCE { hashAlgorithm AlgorithmIdentifier, issuerNameHash OCTET STRING, -- Hash of Issuer's DN issuerKeyHash OCTET STRING, -- Hash of Issuers public key serialNumber CertificateSerialNumber }

General interface for an operator that is able to produce an OutputStream that will output compressed data.

Test Cases

Holding class for a PKCS#10 certification request.

A holding class for the PKCS12 Pfx structure.

A class for creating EncryptedPrivateKeyInfo structures.

General IOException thrown in the cert package and its sub-packages.

Builder for a PKIArchiveControl structure.

Wrapper for a PKIMessage with protection attached to it.

Interface for ContentVerifiers that also support raw signatures that can be verified using the digest of the calculated data.

Carrier for a ResponderID.

wrapper for the RevokedInfo object

This is designed to parse the SignedPublicKeyAndChallenge created by the KEYGEN tag included by Mozilla based browsers.

an expanded SignerInfo block from a CMS Signed message

Basic generator that just returns a preconstructed attribute table

Used to Wrap a socket and to provide access to the underlying session.

Implementations provide SSL socket factories.

Generator for RFC 3161 Time Stamp Request objects.

Generator for RFC 3161 Time Stamp Responses.

Currently the class supports ESSCertID by if a digest calculator based on SHA1 is passed in, otherwise it uses ESSCertIDv2.

A calculator which produces a truncated digest from a regular one, with the truncation achieved by dropping off the right most octets.

Exception thrown if a TSP request or response fails to validate.

Data piece of DVCS request to VPKC service (Verify Public Key Certificates).

Data piece of DVCS request to VSD service (Verify Signed Document).

Holding class for an X.509 AttributeCertificate structure.

This class builds selectors according to the set criteria.

a basic index for a X509CertificateHolder class

Holding class for an X.509 CRL Entry structure.

General utility class for creating calculated extensions using the standard methods.

X.509 Certificate Revocation Checker - still lacks OCSP support and support for delta CRLs.

Holder for an OpenSSL trusted certificate block.

class to produce an X.509 Version 2 AttributeCertificate.

class to produce an X.509 Version 3 certificate.