Class SelfSignedCertificate

java.lang.Object

io.netty.handler.ssl.util.SelfSignedCertificate

@Deprecated
public final class SelfSignedCertificate
extends Object

Deprecated.

Use the CertificateBuilder from netty-pkitesting instead.

Generates a temporary self-signed certificate for testing purposes.

NOTE: Never use the certificate and private key generated by this class in production. It is purely for testing purposes, and thus it is very insecure. It even uses an insecure pseudo-random generator for faster generation internally.

An X.509 certificate file and a EC/RSA private key file are generated in a system's temporary directory using File.createTempFile(String, String), and they are deleted when the JVM exits using File.deleteOnExit().

At first, this method tries to use OpenJDK's X.509 implementation (the sun.security.x509 package). If it fails, it tries to use Bouncy Castle as a fallback.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	SelfSignedCertificate.Builder	Deprecated.

Field Summary

Fields

Modifier and Type	Field	Description
private final X509Certificate	cert	Deprecated.
private final File	certificate	Deprecated.
private static final int	DEFAULT_KEY_LENGTH_BITS	Deprecated. FIPS 140-2 encryption requires the RSA key length to be 2048 bits or greater.
private static final Date	DEFAULT_NOT_AFTER	Deprecated. The maximum possible value in X.509 specification: 9999-12-31 23:59:59
private static final Date	DEFAULT_NOT_BEFORE	Deprecated. Current time minus 1 year, just in case software clock goes back due to time synchronization
private final PrivateKey	key	Deprecated.
private static final InternalLogger	logger	Deprecated.
private final File	privateKey	Deprecated.

Constructor Summary

Constructors

Modifier	Constructor	Description
	SelfSignedCertificate()	Deprecated. Creates a new instance.
private	SelfSignedCertificate(SelfSignedCertificate.Builder builder)	Deprecated.
	SelfSignedCertificate(String fqdn)	Deprecated. Creates a new instance.
	SelfSignedCertificate(String fqdn, String algorithm, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(String fqdn, SecureRandom random, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(String fqdn, SecureRandom random, int bits, Date notBefore, Date notAfter)	Deprecated. Creates a new instance.
	SelfSignedCertificate(String fqdn, SecureRandom random, int bits, Date notBefore, Date notAfter, String algorithm)	Deprecated. Creates a new instance.
	SelfSignedCertificate(String fqdn, SecureRandom random, String algorithm, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(String fqdn, Date notBefore, Date notAfter)	Deprecated. Creates a new instance.
	SelfSignedCertificate(String fqdn, Date notBefore, Date notAfter, String algorithm, int bits)	Deprecated. Creates a new instance.
	SelfSignedCertificate(Date notBefore, Date notAfter)	Deprecated. Creates a new instance.
	SelfSignedCertificate(Date notBefore, Date notAfter, String algorithm, int bits)	Deprecated. Creates a new instance.

Method Summary

Modifier and Type	Method	Description
static SelfSignedCertificate.Builder	builder()	Deprecated.
X509Certificate	cert()	Deprecated. Returns the generated X.509 certificate.
File	certificate()	Deprecated. Returns the generated X.509 certificate file in PEM format.
void	delete()	Deprecated. Deletes the generated X.509 certificate file and EC/RSA private key file.
private static boolean	isBouncyCastleAvailable()	Deprecated.
PrivateKey	key()	Deprecated. Returns the generated EC/RSA private key.
(package private) static String[]	newSelfSignedCertificate(String fqdn, PrivateKey key, X509Certificate cert)	Deprecated.
File	privateKey()	Deprecated. Returns the generated EC/RSA private key file in PEM format.
private static void	safeClose(File keyFile, OutputStream keyOut)	Deprecated.
private static void	safeDelete(File certFile)	Deprecated.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

private static final InternalLogger logger

Deprecated.

DEFAULT_NOT_BEFORE

private static final Date DEFAULT_NOT_BEFORE

Deprecated.

Current time minus 1 year, just in case software clock goes back due to time synchronization

DEFAULT_NOT_AFTER

private static final Date DEFAULT_NOT_AFTER

Deprecated.

The maximum possible value in X.509 specification: 9999-12-31 23:59:59

DEFAULT_KEY_LENGTH_BITS

private static final int DEFAULT_KEY_LENGTH_BITS

Deprecated.

FIPS 140-2 encryption requires the RSA key length to be 2048 bits or greater. Let's use that as a sane default but allow the default to be set dynamically for those that need more stringent security requirements.

certificate

private final File certificate

Deprecated.

privateKey

private final File privateKey

Deprecated.

cert

private final X509Certificate cert

Deprecated.

key

private final PrivateKey key

Deprecated.

Constructor Details

SelfSignedCertificate

public SelfSignedCertificate()
                      throws CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(Date notBefore,
 Date notAfter)
                      throws CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(Date notBefore,
 Date notAfter,
 String algorithm,
 int bits)
                      throws CertificateException

Deprecated.

Creates a new instance.

Parameters:

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn)
                      throws CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn,
 String algorithm,
 int bits)
                      throws CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn,
 Date notBefore,
 Date notAfter)
                      throws CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn,
 Date notBefore,
 Date notAfter,
 String algorithm,
 int bits)
                      throws CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn,
 SecureRandom random,
 int bits)
                      throws CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn,
 SecureRandom random,
 String algorithm,
 int bits)
                      throws CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

algorithm - Key pair algorithm

bits - the number of bits of the generated private key

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn,
 SecureRandom random,
 int bits,
 Date notBefore,
 Date notAfter)
                      throws CertificateException

Deprecated.

Creates a new instance.

Algorithm: RSA

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

Throws:

CertificateException

SelfSignedCertificate

public SelfSignedCertificate(String fqdn,
 SecureRandom random,
 int bits,
 Date notBefore,
 Date notAfter,
 String algorithm)
                      throws CertificateException

Deprecated.

Creates a new instance.

Parameters:

fqdn - a fully qualified domain name

random - the SecureRandom to use

bits - the number of bits of the generated private key

notBefore - Certificate is not valid before this time

notAfter - Certificate is not valid after this time

algorithm - Key pair algorithm

Throws:

CertificateException

SelfSignedCertificate

private SelfSignedCertificate(SelfSignedCertificate.Builder builder)
                       throws CertificateException

Deprecated.

Throws:

CertificateException

Method Details

builder

public static SelfSignedCertificate.Builder builder()

Deprecated.

certificate

public File certificate()

Deprecated.

Returns the generated X.509 certificate file in PEM format.

privateKey

public File privateKey()

Deprecated.

Returns the generated EC/RSA private key file in PEM format.

cert

public X509Certificate cert()

Deprecated.

Returns the generated X.509 certificate.

key

public PrivateKey key()

Deprecated.

Returns the generated EC/RSA private key.

delete

public void delete()

Deprecated.

Deletes the generated X.509 certificate file and EC/RSA private key file.

newSelfSignedCertificate

static String[] newSelfSignedCertificate(String fqdn,
 PrivateKey key,
 X509Certificate cert)
                                  throws IOException,
CertificateEncodingException

Deprecated.

Throws:

IOException

CertificateEncodingException

safeDelete

private static void safeDelete(File certFile)

Deprecated.

safeClose

private static void safeClose(File keyFile,
 OutputStream keyOut)

Deprecated.

isBouncyCastleAvailable

private static boolean isBouncyCastleAvailable()

Deprecated.