indispensable/at.asitplus.signum.indispensable.pki

Package-level declarations

Types

AlternativeNames

data class AlternativeNames

RFC 5280 {Subject||Issuer}AlternativeNames (SANs, IANs) container class constructed from a certificate's extensions (i.e. TbsCertificate.extensions filtered by OID). Hence, this class is not intended to be used for constructing SANs or IANs, but used to extract them from a certificate.

AttributeTypeAndValue

sealed class AttributeTypeAndValue : Asn1Encodable<Asn1Sequence> , Identifiable

CertificateChain

typealias CertificateChain = List<X509Certificate>

Pkcs10CertificationRequest

data class Pkcs10CertificationRequest : PemEncodable<Asn1Sequence>

Very simple implementation of a PKCS#10 Certification Request

Pkcs10CertificationRequestAttribute

data class Pkcs10CertificationRequestAttribute(val oid: ObjectIdentifier, val value: List<Asn1Element>) : Asn1Encodable<Asn1Sequence> , Identifiable

RelativeDistinguishedName

data class RelativeDistinguishedName(val attrsAndValues: List<AttributeTypeAndValue>) : Asn1Encodable<Asn1Set>

X.500 Name (used in X.509 Certificates)

SubjectAltNameImplicitTags

object SubjectAltNameImplicitTags

Enumeration of implicit tags used to indicate different SubjectAltNames

data class TbsCertificate(val version: Int? = 2, val serialNumber: ByteArray, val signatureAlgorithm: X509SignatureAlgorithmDescription, val issuerName: List<RelativeDistinguishedName>, val validFrom: Asn1Time, val validUntil: Asn1Time, val subjectName: List<RelativeDistinguishedName>, val rawPublicKey: Asn1Sequence, val issuerUniqueID: Asn1BitString? = null, val subjectUniqueID: Asn1BitString? = null, val extensions: List<X509CertificateExtension>? = null) : Asn1Encodable<Asn1Sequence>

Very simple implementation of the meat of an X.509 Certificate: The structure that gets signed

TbsCertificationRequest

data class TbsCertificationRequest(val version: Int = 0, val subjectName: List<RelativeDistinguishedName>, val publicKey: CryptoPublicKey, val attributes: List<Pkcs10CertificationRequestAttribute> = listOf()) : Asn1Encodable<Asn1Sequence>

The meat of a PKCS#10 Certification Request: The structure that gets signed

X509Certificate

data class X509Certificate : PemEncodable<Asn1Sequence>

Very simple implementation of an X.509 Certificate

X509CertificateExtension

data class X509CertificateExtension : Asn1Encodable<Asn1Sequence> , Identifiable

X.509 Certificate Extension

Properties

val CertificateChain.leaf: X509Certificate

val CertificateChain.root: X509Certificate

val CryptoSignature.x509Encoded: Asn1Primitive

Signature encoded as per X.509:

Functions

fromX509Encoded

fun CryptoSignature.Companion.fromX509Encoded(alg: X509SignatureAlgorithm, it: Asn1Primitive): CryptoSignature

Decode a X.509-encoded signature