Class X509CA

Object
   |
   +--X509Signer
         |
         +--X509CA

class X509CA

extends X509Signer

Class implementing a certification authority issuing X.509 certificates and CRLs
Defined in ca.js

Field Detail

crldp

Object crldp

dir

<static> Object dir

X509CA

X509CA(<Crypto> crypto)

Create a certification authority that issues X.509 certificates and CRLs

Parameters:
crypto - the crypto provider

addCRLDistributionPoint

void addCRLDistributionPoint(<String> crldp)

Add a CRL distribution point to issued certificates

Parameters:
crldp - the URL of the distribution point

issueCertificate

X509 issueCertificate(<Key> publicKey, <Object[]> subject, <String> profile, <Object> extvalues)

Issuer a certificate

Parameters:
publicKey - the public key
subject - an array of RDN objects in the form [ { C:"DE" }, { O:"CardContact" }, { OU:"CardContact Demo CA 1" }, { CN:"TLS client" } ]. See pkixcommon.js for details
profile - an extension profile name for which a addExtFor method is defined. Predefined profiles are TLSServer, TLSClient and EmailAndTLSClient.
extvalues - JSON object containing extension values

Returns:
the new X.509 certificate

issueCRL

ByteString issueCRL()

Issue a CRL

Returns:
the encoded CRL

setup

<static> void setup()

Setup the CA instance

test

<static> void test()

Test the CA setup