com.goldencode.p2j.security

Class SelfSignedCertGen

java.lang.Object

com.goldencode.p2j.security.SelfSignedCertGen

public class SelfSignedCertGen
extends java.lang.Object

Generate a new root CA and a server certificates and save them and the associated private keys in external key stores. This utility does not integrate with the directory at all. It is a helper to create a single certificate that can be used for a standalone web server.

Field Summary

Fields

Modifier and Type	Field and Description
private java.util.Map<java.lang.String,java.lang.String>	company Map identifying the company attributes.
private SSLCertFactory	factory Factory to generate the SSL certificate.
private java.util.Map<java.lang.String,java.lang.String>	keyEntryPasswords The random passwords used to encrypt the private keys in their KeyStore, per each alias.
private static CentralLogger	LOG Logger
private java.lang.String	masterPassword The master password to encrypt all private keys, in the directory.
private java.io.BufferedReader	reader Read data from the standard input.
private java.lang.String	rootCAAlias Alias for the root CA.
private java.lang.String	serverAlias Server alias.
private java.security.KeyStore	trustCertStore Store where to add the trusted certificates (servers and CAs).
private java.security.KeyStore	trustKeyStore Store where to add the private keys for the trusted certificates.
private int	validity The certificate's validity, in years.
private static java.lang.String[]	YES_NO Valid entries for yes/no options.

Constructor Summary

Constructors

Constructor and Description
SelfSignedCertGen() Create a new utility instance.

Method Summary

Modifier and Type	Method and Description
private java.lang.String	createAES256BitKey() Create a random 256-bit password to be used as an AES encryption key.
private java.security.KeyStore	createEmptyStore() Create an empty store, to hold either private keys or certificates.
void	generate() Main method to (re)generate the root CA, peer certificates and private keys.
private void	generateRootCA() Generate the root CA.
private void	generateServerCertificate() Generate peer certificate for the server.
static void	main(java.lang.String[] args) Command line driver.
private void	readConfiguration() Read the existing configuration from the standard input.
private java.lang.String	readLine(java.lang.String txt) Read a line of text using the created reader.
private java.lang.String	readOption(java.lang.String msg, java.lang.String[] valid) Ask the user to enter one of the specified valid options, using the given message.
private void	saveRootCAPrivateKey() Save the root CA private key in an external key store.
private void	saveServerCertificates() Save the server certificates in an external store.
private void	saveServerPrivateKey() Save the private keys in external key store(s).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final CentralLogger LOG

Logger

YES_NO

private static final java.lang.String[] YES_NO

Valid entries for yes/no options.

reader

private final java.io.BufferedReader reader

Read data from the standard input.

company

private final java.util.Map<java.lang.String,java.lang.String> company

Map identifying the company attributes.

factory

private final SSLCertFactory factory

Factory to generate the SSL certificate.

trustCertStore

private final java.security.KeyStore trustCertStore

Store where to add the trusted certificates (servers and CAs).

trustKeyStore

private final java.security.KeyStore trustKeyStore

Store where to add the private keys for the trusted certificates.

keyEntryPasswords

private final java.util.Map<java.lang.String,java.lang.String> keyEntryPasswords

The random passwords used to encrypt the private keys in their KeyStore, per each alias.

validity

private int validity

The certificate's validity, in years.

rootCAAlias

private java.lang.String rootCAAlias

Alias for the root CA.

serverAlias

private java.lang.String serverAlias

Server alias.

masterPassword

private java.lang.String masterPassword

The master password to encrypt all private keys, in the directory.

Constructor Detail

SelfSignedCertGen

public SelfSignedCertGen()
                  throws java.io.IOException,
                         SSLCertGenException

Create a new utility instance.

Throws:

SSLCertGenException - If the utility could not be instantiated.

java.io.IOException

Method Detail

generate

public void generate()
              throws java.io.IOException,
                     SSLCertGenException

Main method to (re)generate the root CA, peer certificates and private keys.

Throws:

java.io.IOException - If standard input can not be accessed.

SSLCertGenException - In case of problems during the generation of root CA or peer certificates.

saveRootCAPrivateKey

private void saveRootCAPrivateKey()
                           throws java.io.IOException,
                                  SSLCertGenException

Save the root CA private key in an external key store.

Throws:

java.io.IOException - If standard input can not be accessed.

SSLCertGenException - In case of problems during key store access.

saveServerCertificates

private void saveServerCertificates()
                             throws java.io.IOException,
                                    SSLCertGenException

Save the server certificates in an external store.

Throws:

java.io.IOException - If standard input can not be accessed.

SSLCertGenException - In case of problems during key store access.

saveServerPrivateKey

private void saveServerPrivateKey()
                           throws java.io.IOException,
                                  SSLCertGenException

Save the private keys in external key store(s).

Throws:

java.io.IOException - If standard input can not be accessed.

SSLCertGenException - In case of problems during key store access.

generateServerCertificate

private void generateServerCertificate()
                                throws SSLCertGenException

Generate peer certificate for the server.

Throws:

SSLCertGenException - If the SSL certificates could not be generated.

generateRootCA

private void generateRootCA()
                     throws SSLCertGenException,
                            java.io.IOException

Generate the root CA.

Throws:

SSLCertGenException - If the root CA could not be generated.

java.io.IOException - If the alias for the root CA could not be read from standard input.

readConfiguration

private void readConfiguration()
                        throws java.io.IOException,
                               SSLCertGenException

Read the existing configuration from the standard input.

Throws:

java.io.IOException - In case of problems during reading.

SSLCertGenException - If the SSLCertFactory factory could not be initialized.

readLine

private java.lang.String readLine(java.lang.String txt)
                           throws java.io.IOException

Read a line of text using the created reader.

Parameters:

txt - Description to be written to standard output.

Returns:

The line of text from standard input.

Throws:

java.io.IOException - If data could not be read.

readOption

private java.lang.String readOption(java.lang.String msg,
                                    java.lang.String[] valid)
                             throws java.io.IOException

Ask the user to enter one of the specified valid options, using the given message.

Parameters:

msg - The message shown to the user.

valid - An array of valid options.

Throws:

java.io.IOException

createEmptyStore

private java.security.KeyStore createEmptyStore()
                                         throws SSLCertGenException

Create an empty store, to hold either private keys or certificates.

Returns:

An empty KeyStore instance.

Throws:

SSLCertGenException - If the store could not be generated.

createAES256BitKey

private java.lang.String createAES256BitKey()

Create a random 256-bit password to be used as an AES encryption key.

Returns:

See above.

main

public static void main(java.lang.String[] args)
                 throws java.io.IOException,
                        SSLCertGenException

Command line driver.

Parameters:

args - Application command line parameters. File name is the only one expected.

Throws:

java.io.IOException - If standard input can not be accessed.

SSLCertGenException - In case of problems during the generation of root CA or peer certificates.