generator/at.asitplus.attestation.generator/CertifiedKey

CertifiedKey

class CertifiedKey(val certificate: X509Certificate, val signer: Signer)(source)

A private key together with the certificate that binds it: the unit an issuer actually signs with.

This is issuing material, private key included -- which is the point of a fake-attestation generator.

Constructors

CertifiedKey

constructor(certificate: X509Certificate, signer: Signer)

Properties

certificate

val certificate: X509Certificate

signer

val signer: Signer

subject

val subject: List<RelativeDistinguishedName>

Functions

certify

fun certify(subject: List<RelativeDistinguishedName>, subjectKey: CryptoPublicKey, validity: Validity, role: Role, extensions: List<X509CertificateExtension> = emptyList()): X509Certificate

certifySubordinateCa

fun certifySubordinateCa(subject: List<RelativeDistinguishedName>, validity: Validity, pathLength: Int?): CertifiedKey

Generates a fresh key and certifies it as a CA under this one.

export

fun export(): RootSpec

This key as reusable configuration.