Serializable
X509Certificate
public abstract class Certificate extends Object implements Serializable
Abstract class for managing a variety of identity certificates. An identity certificate is a binding of a principal to a public key which is vouched for by another principal. (A principal represents an entity such as an individual user, a group, or a corporation.)
This class is an abstraction for certificates that have different formats but important common uses. For example, different types of certificates, such as X.509 and PGP, share general certificate functionality (like encoding and verifying) and some types of information (like a public key).
X.509, PGP, and SDSI certificates can all be implemented by subclassing the Certificate class, even though they contain different sets of information, and they store and retrieve the information in different ways.
Modifier and Type | Class | Description |
---|---|---|
protected static class |
Certificate.CertificateRep |
Alternate Certificate class for serialization. |
Modifier | Constructor | Description |
---|---|---|
protected |
Creates a certificate of the specified type. |
Modifier and Type | Method | Description |
---|---|---|
boolean |
equals |
Compares this certificate for equality with the specified object. |
abstract byte[] |
getEncoded() |
Returns the encoded form of this certificate. |
abstract PublicKey |
getPublicKey() |
Gets the public key from this certificate. |
final String |
getType() |
Returns the type of this certificate. |
int |
hashCode() |
Returns a hashcode value for this certificate from its encoded form. |
abstract String |
toString() |
Returns a string representation of this certificate. |
abstract void |
verify |
Verifies that this certificate was signed using the private key that corresponds to the specified public key. |
abstract void |
verify |
Verifies that this certificate was signed using the private key that corresponds to the specified public key. |
void |
verify |
Verifies that this certificate was signed using the private key that corresponds to the specified public key. |
protected Object |
writeReplace() |
Replace the Certificate to be serialized with a CertificateRep object containing the type and encoded bytes of the Certificate . |
protected Certificate(String type)
type
- the standard name of the certificate type. See the CertificateFactory section in the Java Security Standard Algorithm Names Specification for information about standard certificate types.public final String getType()
public boolean equals(Object other)
other
object is an instanceof
Certificate
, then its encoded form is retrieved and compared with the encoded form of this certificate.public int hashCode()
public abstract byte[] getEncoded() throws CertificateEncodingException
CertificateEncodingException
- if an encoding error occurs.public abstract void verify(PublicKey key) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException
key
- the PublicKey used to carry out the verification.NoSuchAlgorithmException
- on unsupported signature algorithms.InvalidKeyException
- on incorrect key.NoSuchProviderException
- if there's no default provider.SignatureException
- on signature errors.CertificateException
- on encoding errors.public abstract void verify(PublicKey key, String sigProvider) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException
key
- the PublicKey used to carry out the verification.sigProvider
- the name of the signature provider.NoSuchAlgorithmException
- on unsupported signature algorithms.InvalidKeyException
- on incorrect key.NoSuchProviderException
- on incorrect provider.SignatureException
- on signature errors.CertificateException
- on encoding errors.public void verify(PublicKey key, Provider sigProvider) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, SignatureException
This method was added to version 1.8 of the Java Platform Standard Edition. In order to maintain backwards compatibility with existing service providers, this method cannot be abstract
and by default throws an UnsupportedOperationException
.
key
- the PublicKey used to carry out the verification.sigProvider
- the signature provider.NoSuchAlgorithmException
- on unsupported signature algorithms.InvalidKeyException
- on incorrect key.SignatureException
- on signature errors.CertificateException
- on encoding errors.UnsupportedOperationException
- if the method is not supportedpublic abstract String toString()
public abstract PublicKey getPublicKey()
protected Object writeReplace() throws ObjectStreamException
Certificate
to be serialized with a CertificateRep
object containing the type and encoded bytes of the Certificate
.CertificateRep
object containing the type and encoded bytes of the Certificate
ObjectStreamException
- if a CertificateRep
object representing this Certificate
could not be created
© 1993, 2023, Oracle and/or its affiliates. All rights reserved.
Documentation extracted from Debian's OpenJDK Development Kit package.
Licensed under the GNU General Public License, version 2, with the Classpath Exception.
Various third party code in OpenJDK is licensed under different licenses (see Debian package).
Java and OpenJDK are trademarks or registered trademarks of Oracle and/or its affiliates.
https://docs.oracle.com/en/java/javase/21/docs/api/java.base/java/security/cert/Certificate.html