Package io.netty.handler.ssl.util

Class SelfSignedCertificate

java.lang.Object

io.netty.handler.ssl.util.SelfSignedCertificate

@Deprecated
public final class SelfSignedCertificate
extends java.lang.Object

Deprecated.

Use the CertificateBuilder from netty-pkitesting instead.

Generates a temporary self-signed certificate for testing purposes.

NOTE: Never use the certificate and private key generated by this class in production. It is purely for testing purposes, and thus it is very insecure. It even uses an insecure pseudo-random generator for faster generation internally.

An X.509 certificate file and a EC/RSA private key file are generated in a system's temporary directory using File.createTempFile(String, String), and they are deleted when the JVM exits using File.deleteOnExit().

At first, this method tries to use OpenJDK's X.509 implementation (the sun.security.x509 package). If it fails, it tries to use Bouncy Castle as a fallback.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SelfSignedCertificate.Builder	Deprecated.

Field Summary

Fields

Modifier and Type	Field	Description
private java.security.cert.X509Certificate	cert	Deprecated.
private java.io.File	certificate	Deprecated.
private static int	DEFAULT_KEY_LENGTH_BITS	Deprecated. FIPS 140-2 encryption requires the RSA key length to be 2048 bits or greater.
private static java.util.Date	DEFAULT_NOT_AFTER	Deprecated. The maximum possible value in X.509 specification: 9999-12-31 23:59:59
private static java.util.Date	DEFAULT_NOT_BEFORE	Deprecated. Current time minus 1 year, just in case software clock goes back due to time synchronization
private java.security.PrivateKey	key	Deprecated.
private static InternalLogger	logger	Deprecated.
private java.io.File	privateKey	Deprecated.

Constructor Summary

Constructors

Modifier	Constructor	Description
	SelfSignedCertificate()	Deprecated. Creates a new instance.
private	SelfSignedCertificate(SelfSignedCertificate.Builder builder)	Deprecated.
	SelfSignedCertificate(java.lang.String fqdn)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.lang.String fqdn, java.lang.String algorithm, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, int bits, java.util.Date notBefore, java.util.Date notAfter)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, int bits, java.util.Date notBefore, java.util.Date notAfter, java.lang.String algorithm)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.lang.String fqdn, java.security.SecureRandom random, java.lang.String algorithm, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.lang.String fqdn, java.util.Date notBefore, java.util.Date notAfter)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.lang.String fqdn, java.util.Date notBefore, java.util.Date notAfter, java.lang.String algorithm, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.util.Date notBefore, java.util.Date notAfter)	Deprecated. Creates a new instance.
	SelfSignedCertificate(java.util.Date notBefore, java.util.Date notAfter, java.lang.String algorithm, int bits)	Deprecated. Creates a new instance.

Method Summary

Modifier and Type	Method	Description
static SelfSignedCertificate.Builder	builder()	Deprecated.
java.security.cert.X509Certificate	cert()	Deprecated. Returns the generated X.509 certificate.
java.io.File	certificate()	Deprecated. Returns the generated X.509 certificate file in PEM format.
void	delete()	Deprecated. Deletes the generated X.509 certificate file and EC/RSA private key file.
private static boolean	isBouncyCastleAvailable()	Deprecated.
java.security.PrivateKey	key()	Deprecated. Returns the generated EC/RSA private key.
(package private) static java.lang.String[]	newSelfSignedCertificate(java.lang.String fqdn, java.security.PrivateKey key, java.security.cert.X509Certificate cert)	Deprecated.
java.io.File	privateKey()	Deprecated. Returns the generated EC/RSA private key file in PEM format.
private static void	safeClose(java.io.File keyFile, java.io.OutputStream keyOut)	Deprecated.
private static void	safeDelete(java.io.File certFile)	Deprecated.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

private static final InternalLogger logger

Deprecated.

DEFAULT_NOT_BEFORE

private static final java.util.Date DEFAULT_NOT_BEFORE

Deprecated.

Current time minus 1 year, just in case software clock goes back due to time synchronization

DEFAULT_NOT_AFTER

private static final java.util.Date DEFAULT_NOT_AFTER

Deprecated.

The maximum possible value in X.509 specification: 9999-12-31 23:59:59

DEFAULT_KEY_LENGTH_BITS

private static final int DEFAULT_KEY_LENGTH_BITS

Deprecated.

FIPS 140-2 encryption requires the RSA key length to be 2048 bits or greater. Let's use that as a sane default but allow the default to be set dynamically for those that need more stringent security requirements.

certificate

private final java.io.File certificate

Deprecated.

privateKey

private final java.io.File privateKey

Deprecated.

cert

private final java.security.cert.X509Certificate cert

Deprecated.

key

private final java.security.PrivateKey key

Deprecated.

Constructor Detail

SelfSignedCertificate

public SelfSignedCertificate()
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.util.Date notBefore,
                             java.util.Date notAfter)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.util.Date notBefore,
                             java.util.Date notAfter,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Parameters:

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.util.Date notBefore,
                             java.util.Date notAfter)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.util.Date notBefore,
                             java.util.Date notAfter,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             int bits)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             java.lang.String algorithm,
                             int bits)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             int bits,
                             java.util.Date notBefore,
                             java.util.Date notAfter)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

public SelfSignedCertificate(java.lang.String fqdn,
                             java.security.SecureRandom random,
                             int bits,
                             java.util.Date notBefore,
                             java.util.Date notAfter,
                             java.lang.String algorithm)
                      throws java.security.cert.CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

Throws:

java.security.cert.CertificateException

SelfSignedCertificate

private SelfSignedCertificate(SelfSignedCertificate.Builder builder)
                       throws java.security.cert.CertificateException

Deprecated.

Throws:

java.security.cert.CertificateException

Method Detail

builder

public static SelfSignedCertificate.Builder builder()

Deprecated.

certificate

public java.io.File certificate()

Deprecated.

Returns the generated X.509 certificate file in PEM format.

privateKey

public java.io.File privateKey()

Deprecated.

Returns the generated EC/RSA private key file in PEM format.

cert

public java.security.cert.X509Certificate cert()

Deprecated.

Returns the generated X.509 certificate.

key

public java.security.PrivateKey key()

Deprecated.

Returns the generated EC/RSA private key.

delete

public void delete()

Deprecated.

Deletes the generated X.509 certificate file and EC/RSA private key file.

newSelfSignedCertificate

static java.lang.String[] newSelfSignedCertificate(java.lang.String fqdn,
                                                   java.security.PrivateKey key,
                                                   java.security.cert.X509Certificate cert)
                                            throws java.io.IOException,
                                                   java.security.cert.CertificateEncodingException

Deprecated.

Throws:

java.io.IOException

java.security.cert.CertificateEncodingException

safeDelete

private static void safeDelete(java.io.File certFile)

Deprecated.

safeClose

private static void safeClose(java.io.File keyFile,
                              java.io.OutputStream keyOut)

Deprecated.

isBouncyCastleAvailable

private static boolean isBouncyCastleAvailable()

Deprecated.