io.netty.handler.ssl.util

类 SelfSignedCertificate

java.lang.Object

io.netty.handler.ssl.util.SelfSignedCertificate

public final class SelfSignedCertificate
extends java.lang.Object

Generates a temporary self-signed certificate for testing purposes.

NOTE: Never use the certificate and private key generated by this class in production. It is purely for testing purposes, and thus it is very insecure. It even uses an insecure pseudo-random generator for faster generation internally.

An X.509 certificate file and a EC/RSA private key file are generated in a system's temporary directory using File.createTempFile(String, String), and they are deleted when the JVM exits using File.deleteOnExit().

At first, this method tries to use OpenJDK's X.509 implementation (the sun.security.x509 package). If it fails, it tries to use Bouncy Castle as a fallback.

构造器概要

构造器

构造器和说明
SelfSignedCertificate() Creates a new instance.
SelfSignedCertificate(java.util.Date notBefore, java.util.Date notAfter) Creates a new instance.
SelfSignedCertificate(java.util.Date notBefore, java.util.Date notAfter, java.lang.String algorithm, int bits) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn, java.util.Date notBefore, java.util.Date notAfter) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn, java.util.Date notBefore, java.util.Date notAfter, java.lang.String algorithm, int bits) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, int bits) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, int bits, java.util.Date notBefore, java.util.Date notAfter) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, int bits, java.util.Date notBefore, java.util.Date notAfter, java.lang.String algorithm) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, java.lang.String algorithm, int bits) Creates a new instance.
SelfSignedCertificate(java.lang.String fqdn, java.lang.String algorithm, int bits) Creates a new instance.

方法概要

限定符和类型	方法和说明
java.security.cert.X509Certificate	cert() Returns the generated X.509 certificate.
java.io.File	certificate() Returns the generated X.509 certificate file in PEM format.
void	delete() Deletes the generated X.509 certificate file and EC/RSA private key file.
java.security.PrivateKey	key() Returns the generated EC/RSA private key.
java.io.File	privateKey() Returns the generated EC/RSA private key file in PEM format.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

SelfSignedCertificate

public SelfSignedCertificate()
                      throws java.security.cert.CertificateException

Creates a new instance.

Algorithm: RSA

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.util.Date notBefore,
                             java.util.Date notAfter)
                      throws java.security.cert.CertificateException

Creates a new instance.

Algorithm: RSA

参数:

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.util.Date notBefore,
                             java.util.Date notAfter,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Creates a new instance.

参数:

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn)
                      throws java.security.cert.CertificateException

Creates a new instance.

Algorithm: RSA

参数:

fqdn - a fully qualified domain name

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Creates a new instance.

参数:

fqdn - a fully qualified domain name

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.util.Date notBefore,
                             java.util.Date notAfter)
                      throws java.security.cert.CertificateException

Creates a new instance.

Algorithm: RSA

参数:

fqdn - a fully qualified domain name

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.util.Date notBefore,
                             java.util.Date notAfter,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Creates a new instance.

参数:

fqdn - a fully qualified domain name

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             int bits)
                      throws java.security.cert.CertificateException

Creates a new instance.

Algorithm: RSA

参数:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Creates a new instance.

参数:

fqdn - a fully qualified domain name

random - the SecureRandom to use

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             int bits,
                             java.util.Date notBefore,
                             java.util.Date notAfter)
                      throws java.security.cert.CertificateException

Creates a new instance.

Algorithm: RSA

参数:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

抛出:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             int bits,
                             java.util.Date notBefore,
                             java.util.Date notAfter,
                             java.lang.String algorithm)
                      throws java.security.cert.CertificateException

Creates a new instance.

参数:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

抛出:

java.security.cert.CertificateException

方法详细资料

certificate

public java.io.File certificate()

Returns the generated X.509 certificate file in PEM format.

privateKey

public java.io.File privateKey()

Returns the generated EC/RSA private key file in PEM format.

cert

public java.security.cert.X509Certificate cert()

Returns the generated X.509 certificate.

key

public java.security.PrivateKey key()

Returns the generated EC/RSA private key.

delete

public void delete()

Deletes the generated X.509 certificate file and EC/RSA private key file.