summaryrefslogtreecommitdiffstats
path: root/base/common/src/com/netscape/cmscore/security/OCSPSigningCert.java
diff options
context:
space:
mode:
Diffstat (limited to 'base/common/src/com/netscape/cmscore/security/OCSPSigningCert.java')
-rw-r--r--base/common/src/com/netscape/cmscore/security/OCSPSigningCert.java139
1 files changed, 0 insertions, 139 deletions
diff --git a/base/common/src/com/netscape/cmscore/security/OCSPSigningCert.java b/base/common/src/com/netscape/cmscore/security/OCSPSigningCert.java
deleted file mode 100644
index 08cdd92e8..000000000
--- a/base/common/src/com/netscape/cmscore/security/OCSPSigningCert.java
+++ /dev/null
@@ -1,139 +0,0 @@
-// --- BEGIN COPYRIGHT BLOCK ---
-// This program is free software; you can redistribute it and/or modify
-// it under the terms of the GNU General Public License as published by
-// the Free Software Foundation; version 2 of the License.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU General Public License for more details.
-//
-// You should have received a copy of the GNU General Public License along
-// with this program; if not, write to the Free Software Foundation, Inc.,
-// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
-//
-// (C) 2007 Red Hat, Inc.
-// All rights reserved.
-// --- END COPYRIGHT BLOCK ---
-package com.netscape.cmscore.security;
-
-import java.io.IOException;
-import java.math.BigInteger;
-import java.security.KeyPair;
-
-import netscape.security.x509.KeyUsageExtension;
-
-import org.mozilla.jss.crypto.PQGParamGenException;
-import org.mozilla.jss.crypto.PQGParams;
-
-import com.netscape.certsrv.apps.CMS;
-import com.netscape.certsrv.base.EBaseException;
-import com.netscape.certsrv.base.IConfigStore;
-import com.netscape.certsrv.common.ConfigConstants;
-import com.netscape.certsrv.common.Constants;
-import com.netscape.certsrv.security.KeyCertData;
-
-/**
- * OCSP signing certificate.
- *
- * @author Christine Ho
- * @version $Revision$, $Date$
- */
-public class OCSPSigningCert extends CertificateInfo {
- public static final String SUBJECT_NAME =
- "CN=Certificate Authority, O=Netscape Communications, C=US";
-
- public OCSPSigningCert(KeyCertData properties) {
- this(properties, null);
- }
-
- public OCSPSigningCert(KeyCertData properties, KeyPair pair) {
- super(properties, pair);
- /* included in console UI
- try {
- if (mProperties.get(Constants.PR_OCSP_SIGNING) == null) {
- mProperties.put(Constants.PR_OCSP_SIGNING, Constants.TRUE);
- }
- if (mProperties.get(Constants.PR_OCSP_NOCHECK) == null) {
- mProperties.put(Constants.PR_OCSP_NOCHECK, Constants.TRUE);
- }
- } catch (Exception e) {
- mProperties.put(Constants.PR_OCSP_SIGNING, Constants.TRUE);
- mProperties.put(Constants.PR_OCSP_NOCHECK, Constants.TRUE);
- }
- */
- }
-
- public String getSubjectName() {
- return (String) mProperties.get(Constants.PR_SUBJECT_NAME);
- }
-
- // get PQG params from the configuration file
- public PQGParams getPQGParams() throws EBaseException, IOException, PQGParamGenException {
-
- byte[] p = mConfig.getByteArray("ca.dsaP", null);
- byte[] q = mConfig.getByteArray("ca.dsaQ", null);
- byte[] g = mConfig.getByteArray("ca.dsaG", null);
- byte[] seed = mConfig.getByteArray("ca.dsaSeed", null);
- byte[] H = mConfig.getByteArray("ca.dsaH", null);
- int counter = mConfig.getInteger("ca.dsaCounter", 0);
-
- if (p != null && q != null && g != null) {
- BigInteger P = new BigInteger(p);
- BigInteger Q = new BigInteger(q);
- BigInteger G = new BigInteger(g);
- BigInteger pqgSeed = new BigInteger(seed);
- BigInteger pqgH = new BigInteger(H);
-
- return new PQGParams(P, Q, G, pqgSeed, counter, pqgH);
- }
- return null;
- }
-
- public void updateConfig(IConfigStore cmsFileTmp) throws EBaseException {
- String tokenname = (String) mProperties.get(Constants.PR_TOKEN_NAME);
- String nickname = getNickname();
-
- cmsFileTmp.putString("ca.signing.tokenname", tokenname);
- String keyType = (String) mProperties.get(Constants.PR_KEY_TYPE);
- String alg;
-
- if (keyType.equals("RSA"))
- alg = "SHA1withRSA";
- else if (keyType.equals("DSA"))
- alg = "SHA1withDSA";
- else
- throw new EBaseException(CMS.getUserMessage("CMS_BASE_ALG_NOT_SUPPORTED", keyType));
-
- cmsFileTmp.putString("ca.signing.defaultSigningAlgorithm", alg);
- if (tokenname.equals(Constants.PR_INTERNAL_TOKEN_NAME))
- cmsFileTmp.putString("ca.signing.cacertnickname", nickname);
- else
- cmsFileTmp.putString("ca.signing.cacertnickname",
- tokenname + ":" + nickname);
- cmsFileTmp.commit(false);
- }
-
- public String getNickname() {
- String name = (String) mProperties.get(Constants.PR_NICKNAME);
- String instanceName = (String) mProperties.get(ConfigConstants.PR_CERT_INSTANCE_NAME);
-
- if (name != null)
- return name;
- return "ocspSigningCert " + instanceName;
- }
-
- public String getKeyAlgorithm() {
- return (String) mProperties.get(Constants.PR_KEY_TYPE);
- }
-
- protected KeyUsageExtension getKeyUsageExtension() throws IOException {
- KeyUsageExtension extension = new KeyUsageExtension();
-
- extension.set(KeyUsageExtension.DIGITAL_SIGNATURE, Boolean.valueOf(true));
- extension.set(KeyUsageExtension.NON_REPUDIATION, Boolean.valueOf(true));
- extension.set(KeyUsageExtension.KEY_CERTSIGN, Boolean.valueOf(true));
- extension.set(KeyUsageExtension.CRL_SIGN, Boolean.valueOf(true));
- return extension;
- }
-}