Class CVCCA

Object
   |
   +--CVCCA

class CVCCA

Class supporting a certification authority that can issue CVC certificates for the EAC protocol.
Defined in cvcca.js

Field Detail

certstore

Object certstore

countryseq

Object countryseq

crypto

Object crypto

holderId

Object holderId

keyspec

Object keyspec

parentId

Object parentId

path

Object path

taAlgorithmIdentifier

Object taAlgorithmIdentifier

testPath

<static> Object testPath

CVCCA

CVCCA(<Crypto> crypto, <CVCertificateStore> certstore, holderId, parentId, <String> path)

Creates a new CVC-CA instance

Parameters:
crypto - the crypto provider to use
certstore - the certificate store to use
path - the path of holderIDs (eg. "/UTCVCA/UTDVCA/UTTERM")

counterSignRequest

CVC counterSignRequest(request)

Counter-sign a request

Parameters:
req - the initial request

Returns:
the certificate request

generateCertificate

CVC generateCertificate(<CVC> req, <Object> policy)

Generate certificate for certificate request

Certificate contents is defined through the policy object:

  	var policy = { certificateValidityDays: 2,
 				   chatRoleOID: new ByteString("id-IS", OID),
 				   chatRights: new ByteString("E3", HEX),
 				   includeDomainParameter: true,
 				   extensions: []
 				 };
 

Parameters:
req - the certificate request
policy - the object with policy settings

Returns:
the certificate

generateInitialRequest

CVC generateInitialRequest(<PublicKeyReference> car)

Generate an initial certificate request

Parameters:
car - the CA at which this request is addressed

Returns:
the certificate request

generateRequest

CVC generateRequest(<PublicKeyReference> car, forceinitial, <boolean> signinitial)

Generate a certificate request

Parameters:
car - the CA at which this request is addressed
signinitial - sign with initial key (sequence = 00000)
forceInitial - force an initial request, even if a current certificate is available

Returns:
the certificate request

generateRequestHSM

CVC generateRequestHSM(<PublicKeyReference> car, forceinitial, <boolean> signinitial)

Generate a certificate request using a SmartCard-HSM based private key

Parameters:
car - the CA at which this request is addressed
signinitial - sign with initial key (sequence = 00000)
forceInitial - force an initial request, even if a current certificate is available

Returns:
the certificate request

generateRequestPKCS8

CVC generateRequestPKCS8(<PublicKeyReference> car, forceinitial, <boolean> signinitial)

Generate a certificate request using a PKCS#8 based private key

Parameters:
car - the CA at which this request is addressed
signinitial - sign with initial key (sequence = 00000)
forceInitial - force an initial request, even if a current certificate is available

Returns:
the certificate request

generateSignedInitialRequest

CVC generateSignedInitialRequest(<PublicKeyReference> car)

Generate a signed initial certificate request

Parameters:
car - the CA at which this request is addressed

Returns:
the certificate request

getAuthenticPublicKey

Key getAuthenticPublicKey(<PublicKeyReference> chr)

Return authentic public key with domain parameter for a given CHR subordinate to the CA

Parameters:
chr - the certificate holder reference

Returns:
the public key or null

getCertificateList

Object getCertificateList(<PublicKeyReference> fromCAR)

Returns a list of relevant certificates.

If the CA is the root CA, then all self-signed and link certificates are returned.

If the CA is a DVCA, then all certificates of the associated root and the current DVCA certificate is returned.

Parameters:
fromCAR - the optional starting point for the list if not a root CA

getIssuedCertificate

CVC getIssuedCertificate(<PublicKeyReference> chr)

Return certificate issued by this CA

Parameters:
chr - the certificate holder reference

Returns:
the certificate or null if not found

importCertificate

void importCertificate(<CVC> cert)

Import a certificate into the certificate store and make it the current certificate

Parameters:
cert - the certificate

importCertificates

Object importCertificates(<CVC[]> certs)

Import a list of certificates into the certificate store

Parameters:
certs - the list of certificates

isOperational

boolean isOperational()

Returns true if this CA is operational.

Returns:
true if this CA is operational

isRootCA

boolean isRootCA()

Returns true if this is a root CA

Returns:
true if this is a root CA

setCountryCodeForSequence

void setCountryCodeForSequence(<String> countryseq)

Set country code to be included in sequence number of public key reference

Parameters:
countryseq - the two character country code

setKeySpec

void setKeySpec(<Key> keyparam, <ByteString> algorithm)

Sets the key specification for generating requests

Parameters:
keyparam - a key object containing key parameters (e.g. EC Curve)
algorithm - the terminal authentication algorithm object identifier

setRemovePreviousKey

void setRemovePreviousKey(<boolean> removePreviousKey)

Set flags that controls the removal of the previous key if the certificate for the new key is imported

Parameters:
removePreviousKey - true to remove, false to keep

storeCertificate

void storeCertificate(<CVC> cert)

Store issued certificate

Parameters:
cert - a newly issued certificate

test

<static> void test()