indispensable/at.asitplus.signum.indispensable.pki

Package-level declarations

Types

AlternativeNames

data class AlternativeNames

RFC 5280 {Subject||Issuer}AlternativeNames (SANs, IANs) container class constructed from a certificate's extensions (i.e. TbsCertificate.extensions filtered by OID). Hence, this class is not intended to be used for constructing SANs or IANs, but used to extract them from a certificate.

AttributeTypeAndValue

@Serializable

sealed class AttributeTypeAndValue : Asn1Encodable<Asn1Sequence> , Identifiable

CertificateChain

typealias CertificateChain = List<X509Certificate>

Pkcs10CertificationRequest

@Serializable

data class Pkcs10CertificationRequest(val tbsCsr: TbsCertificationRequest, val signatureAlgorithm: X509SignatureAlgorithm, val signature: CryptoSignature) : Asn1Encodable<Asn1Sequence>

Very simple implementation of a PKCS#10 Certification Request

Pkcs10CertificationRequestAttribute

@Serializable

data class Pkcs10CertificationRequestAttribute(val oid: ObjectIdentifier, val value: List<Asn1Element>) : Asn1Encodable<Asn1Sequence> , Identifiable

RelativeDistinguishedName

@Serializable

data class RelativeDistinguishedName(val attrsAndValues: List<AttributeTypeAndValue>) : Asn1Encodable<Asn1Set>

X.500 Name (used in X.509 Certificates)

SubjectAltNameImplicitTags

object SubjectAltNameImplicitTags

Enumeration of implicit tags used to indicate different SubjectAltNames

@Serializable

data class TbsCertificate constructor(val version: Int = 2, val serialNumber: ByteArray, val signatureAlgorithm: X509SignatureAlgorithm, val issuerName: List<RelativeDistinguishedName>, val validFrom: Asn1Time, val validUntil: Asn1Time, val subjectName: List<RelativeDistinguishedName>, val publicKey: CryptoPublicKey, val issuerUniqueID: BitSet? = null, val subjectUniqueID: BitSet? = null, val extensions: List<X509CertificateExtension>? = null) : Asn1Encodable<Asn1Sequence>

Very simple implementation of the meat of an X.509 Certificate: The structure that gets signed

TbsCertificationRequest

@Serializable

data class TbsCertificationRequest(val version: Int = 0, val subjectName: List<RelativeDistinguishedName>, val publicKey: CryptoPublicKey, val attributes: List<Pkcs10CertificationRequestAttribute> = listOf()) : Asn1Encodable<Asn1Sequence>

The meat of a PKCS#10 Certification Request: The structure that gets signed

X509Certificate

@Serializable

data class X509Certificate constructor(val tbsCertificate: TbsCertificate, val signatureAlgorithm: X509SignatureAlgorithm, val signature: CryptoSignature) : Asn1Encodable<Asn1Sequence>

Very simple implementation of an X.509 Certificate

X509CertificateExtension

@Serializable

data class X509CertificateExtension : Asn1Encodable<Asn1Sequence> , Identifiable

X.509 Certificate Extension

Properties

val CertificateChain.leaf: X509Certificate

val CertificateChain.root: X509Certificate

val CryptoSignature.x509Encoded: Asn1Primitive

Signature encoded as per X.509:

Functions

fromX509Encoded

fun CryptoSignature.Companion.fromX509Encoded(alg: X509SignatureAlgorithm, it: Asn1Primitive): CryptoSignature

Decode a X.509-encoded signature