Class X509CA
Class implementing a certification authority issuing X.509 certificates and CRLs
Defined in: ca.js.
| Constructor Attributes | Constructor Name and Description |
|---|---|
|
X509CA(crypto)
Create a certification authority that issues X.509 certificates and CRLs
|
| Method Attributes | Method Name and Description |
|---|---|
|
addCRLDistributionPoint(crldp)
Add a CRL distribution point to issued certificates
|
|
|
issueCertificate(publicKey, subject, profile, extvalues)
Issuer a certificate
|
|
|
issueCRL()
Issue a CRL
|
|
| <static> |
X509CA.setup()
Setup the CA instance
|
| <static> |
X509CA.test()
Test the CA setup
|
Class Detail
X509CA(crypto)
Create a certification authority that issues X.509 certificates and CRLs
- Parameters:
- {Crypto} crypto
- the crypto provider
Method Detail
addCRLDistributionPoint(crldp)
Add a CRL distribution point to issued certificates
- Parameters:
- {String} crldp
- the URL of the distribution point
{X509}
issueCertificate(publicKey, subject, profile, extvalues)
Issuer a certificate
- Parameters:
- {Key} publicKey
- the public key
- {Object[]} subject
- an array of RDN objects in the form [ { C:"DE" }, { O:"CardContact" }, { OU:"CardContact Demo CA 1" }, { CN:"TLS client" } ]. See pkixcommon.js for details
- {String} profile
- an extension profile name for which a addExtFor
method is defined. Predefined profiles are TLSServer, TLSClient and EmailAndTLSClient. - {Object} extvalues
- JSON object containing extension values
- Returns:
- the new X.509 certificate
{ByteString}
issueCRL()
Issue a CRL
- Returns:
- the encoded CRL
<static>
X509CA.setup()
Setup the CA instance
<static>
X509CA.test()
Test the CA setup