Channels ▼
RSS

Security

Java Cryptography & Attribute Certificate Management

Source Code Accompanies This Article. Download It Now.


The Role Specification Attribute Certificate could contain privileges as plaintext or XML files, while field RSACHolder is of String type. In our application, RAAC has been implemented in package jace1.*, while RSAC has been implemented in package jace2.*.

Package acgen.* contains two applications:

  • ACGenApplication, which generates role assignment attribute certificates (Figure 1).
  • ACReadApplication, which reads role assignment attribute certificates (Figure 2).

[Click image to view at full size]

Figure 1: acgen.ACGenApplication frame.

[Click image to view at full size]

Figure 2: acgen.ACReadApplication frame.

Package acgen2.* also contains two applications:

  • ACGenApplication, which generates role-specification attribute certificates (Figure 3).
  • ACReadApplication, which reads role specification attribute certificates (Figure 4).

[Click image to view at full size]

Figure 3: acgen2.ACGenApplication frame.

[Click image to view at full size]

Figure 4: acgen2.ACReadApplication frame.

It is also necessary to generate CA keys. This can be done using AppletGenerateCAKeys (see our article "Java Cryptography & X.509 Authentication," http://www.ddj.com/184405961).

The IMPCS provider can be installed by adding classes to CLASSPATH.

Class IMPCS extends the java.security .Provider class and provides mapping of service name to the name of class that implements service (Listing Three). Therefore, service RAAC certificate type generation uses class jace1.X509RAACFactory, while service RSAC certificate type generation uses class jace2.X509RSACFactory.


package jace1;
import java.io.*;
import java.util.*;
import java.security.*;
import sun.security.provider.*;

public class IMPCS extends Provider {
    private static final String INFO = 
        "IMPCS " + "Attribute Certificates Management";
    public IMPCS() {
        super("IMPCS", 1.0, INFO);
        AccessController.doPrivileged(
            new java.security.PrivilegedAction()
            {
                public Object run() {
                    put("CertificateFactory.RAC", 
                        "jace1.X509RAACFactory");
                    put("CertificateFactory.RSC", 
                        "jace2.X509RSACFactory");
                    return null;
                }
            }
        );
    }
}
Listing Three


Related Reading


More Insights






Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dr. Dobb's encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dr. Dobb's moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing or spam. Dr. Dobb's further reserves the right to disable the profile of any commenter participating in said activities.

 
Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
 

Video