com.clevertap.apns

Class CertificateUtils

java.lang.Object

com.clevertap.apns.CertificateUtils

public class CertificateUtils
extends java.lang.Object

Utilities around .p12 certificates.

Constructor Summary

Constructors

Constructor and Description
CertificateUtils()

Method Summary

Modifier and Type	Method and Description
static java.security.cert.X509Certificate	getCertificate(java.io.InputStream certificate, java.lang.String password) Reads the certificate from the input stream, and returns an instance of X509Certificate.
static java.util.Map<java.lang.String,java.lang.String>	splitCertificateSubject(java.io.InputStream certificate, java.lang.String password) Split the subject into it's components such as UID, C, OU, CN.
static java.util.Map<java.lang.String,java.lang.String>	splitCertificateSubject(java.lang.String subject) Split the subject into it's components such as UID, C, OU, DN.
static void	validateCertificate(boolean production, java.security.cert.X509Certificate certificate) Checks a certificate for it's validity, as well as that it's a push certificate.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateUtils

public CertificateUtils()

Method Detail

splitCertificateSubject

public static java.util.Map<java.lang.String,java.lang.String> splitCertificateSubject(java.io.InputStream certificate,
                                                                                       java.lang.String password)
                                                                                throws java.security.KeyStoreException,
                                                                                       java.security.cert.CertificateException,
                                                                                       java.security.NoSuchAlgorithmException,
                                                                                       java.io.IOException

Split the subject into it's components such as UID, C, OU, CN.

Example: {UID=com.wizrocket.BeardedRobot, C=US, OU=PNEY234A6B, CN=Apple Production IOS Push Services: com.wizrocket.BeardedRobot}

Parameters:

certificate - The certificate

password - The password

Returns:

A map containing the components of the subject

Throws:

java.security.cert.CertificateException - if any of the certificates in the keystore could not be loaded

java.security.NoSuchAlgorithmException - if the algorithm used to check the integrity of the keystore cannot be found

java.io.IOException - if there is an I/O or format problem with the keystore data, if a password is required but not given, or if the given password was incorrect

java.security.KeyStoreException - if no Provider supports a KeyStoreSpi implementation for the specified type

getCertificate

public static java.security.cert.X509Certificate getCertificate(java.io.InputStream certificate,
                                                                java.lang.String password)
                                                         throws java.security.cert.CertificateException,
                                                                java.security.NoSuchAlgorithmException,
                                                                java.io.IOException,
                                                                java.security.KeyStoreException

Reads the certificate from the input stream, and returns an instance of X509Certificate.

Parameters:

certificate - The certificate

password - The password

Returns:

The certificate

Throws:

java.security.cert.CertificateException - if any of the certificates in the keystore could not be loaded

java.security.NoSuchAlgorithmException - if the algorithm used to check the integrity of the keystore cannot be found

java.io.IOException - if there is an I/O or format problem with the keystore data, if a password is required but not given, or if the given password was incorrect

java.security.KeyStoreException - if no Provider supports a KeyStoreSpi implementation for the specified type

splitCertificateSubject

public static java.util.Map<java.lang.String,java.lang.String> splitCertificateSubject(java.lang.String subject)

Split the subject into it's components such as UID, C, OU, DN.

Example: {UID=com.wizrocket.BeardedRobot, C=US, OU=PNEY234A6B, CN=Apple Production IOS Push Services: com.wizrocket.BeardedRobot}

Parameters:

subject - The subject of the certificate

Returns:

A map containing the components of the subject

validateCertificate

public static void validateCertificate(boolean production,
                                       java.security.cert.X509Certificate certificate)
                                throws java.security.cert.CertificateException

Checks a certificate for it's validity, as well as that it's a push certificate.

Parameters:

production - Validate the certificate environment, if required

certificate - The certificate to be validated

Throws:

java.security.cert.CertificateException - When the certificate is not valid, or if it's expired, or if it's not a push certificate