Channels ▼
RSS

JVM Languages

Java Cryptography & Attribute Certificate Management

Source Code Accompanies This Article. Download It Now.


To implement a cryptographic service, you need to create a subclass of the appropriate Service Provider Interface (SPI) class. SPI defines methods that cryptographic service providers must implement. This includes SignatureSpi, MessageDigestSpi, KeyPairGeneratorSpi, SecureRandomSpi, AlgorithmParameterGeneratorSpi, AlgorithmParametersSpi, KeyFactorySpi, CertificateFactorySpi, and KeyStoreSpi. Class X509RAACFactory extends X509Factory, which extends CertificateFactorySPI.

The IMPCS provider is added dynamically:

Security.addProvider 	      (new jace1.IMPCS());

while the RAAC type of certificate generation from file attributeCertificate1 has these calls:

CertificateFactory cf = 
   CertificateFactory.getInstance
    ("RAAC", "IMPCS");
Certificate cert = 
  (X509RoleAssignmentCertificate) 
   cf.generateCertificate(new File     ("attributeCertificate1"));


The method Security.addProvider() in class Security.java invokes method Provider.loadProvider(name). Class java.security.Provider extends class java.util.Properties. Properties are used to find where a particular service is implemented. For example, service CertificateFactory.RAAC is implemented in jace1.X509RAACFactory.

Conclusion

In this article and the accompanying code, we present the implementation of attribute certificate functionality, which has been defined in the fourth edition of the ITU-T X509 Standard. Attribute certificates cannot be stored in default Sun's keystore because they are parsed according to PKC format before they are stored. Therefore, they should be placed in an LDAP server. Attribute Certificates could be pulled and pushed to an LDAP server using JNDI API.

DDJ


Related Reading


More Insights






Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dr. Dobb's encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dr. Dobb's moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing or spam. Dr. Dobb's further reserves the right to disable the profile of any commenter participating in said activities.

 
Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
 

Video