AI-generated Key Takeaways
-
KeyStore.PrivateKeyEntrysecurely stores a private key and its corresponding certificate chain within a Java KeyStore. -
It provides methods to retrieve the private key, certificate chain, end-entity certificate, and associated attributes.
-
Two constructors allow creating entries with or without custom attributes.
-
The certificate chain must be ordered, starting with the end-entity certificate that matches the private key's algorithm.
-
PrivateKeyEntryimplementsKeyStore.Entryand inherits methods fromjava.lang.Object.
A KeyStore entry that holds a PrivateKey
and corresponding certificate chain.
Public Constructor Summary
|
PrivateKeyEntry(PrivateKey privateKey, Certificate[] chain)
Constructs a
PrivateKeyEntry with a
PrivateKey and corresponding certificate chain. |
|
|
PrivateKeyEntry(PrivateKey privateKey, Certificate[] chain, Set<KeyStore.Entry.Attribute> attributes)
Constructs a
PrivateKeyEntry with a PrivateKey and
corresponding certificate chain and associated entry attributes. |
Public Method Summary
| Set<KeyStore.Entry.Attribute> |
getAttributes()
Retrieves the attributes associated with an entry.
|
| Certificate |
getCertificate()
Gets the end entity
Certificate
from the certificate chain in this entry. |
| Certificate[] |
getCertificateChain()
Gets the
Certificate chain from this entry. |
| PrivateKey |
getPrivateKey()
Gets the
PrivateKey from this entry. |
| String |
toString()
Returns a string representation of this PrivateKeyEntry.
|
Inherited Method Summary
Public Constructors
public PrivateKeyEntry (PrivateKey privateKey, Certificate[] chain)
Constructs a PrivateKeyEntry with a
PrivateKey and corresponding certificate chain.
The specified chain is cloned before it is stored
in the new PrivateKeyEntry object.
Parameters
| privateKey | the PrivateKey |
|---|---|
| chain | an array of Certificates
representing the certificate chain.
The chain must be ordered and contain a
Certificate at index 0
corresponding to the private key. |
Throws
| NullPointerException | if
privateKey or chain
is null |
|---|---|
| IllegalArgumentException | if the specified chain has a
length of 0, if the specified chain does not contain
Certificates of the same type,
or if the PrivateKey algorithm
does not match the algorithm of the PublicKey
in the end entity Certificate (at index 0)
|
public PrivateKeyEntry (PrivateKey privateKey, Certificate[] chain, Set<KeyStore.Entry.Attribute> attributes)
Constructs a PrivateKeyEntry with a PrivateKey and
corresponding certificate chain and associated entry attributes.
The specified chain and attributes are cloned
before they are stored in the new PrivateKeyEntry object.
Parameters
| privateKey | the PrivateKey |
|---|---|
| chain | an array of Certificates
representing the certificate chain.
The chain must be ordered and contain a
Certificate at index 0
corresponding to the private key. |
| attributes | the attributes |
Throws
| NullPointerException | if privateKey, chain
or attributes is null |
|---|---|
| IllegalArgumentException | if the specified chain has a
length of 0, if the specified chain does not contain
Certificates of the same type,
or if the PrivateKey algorithm
does not match the algorithm of the PublicKey
in the end entity Certificate (at index 0) |
Public Methods
public Set<KeyStore.Entry.Attribute> getAttributes ()
Retrieves the attributes associated with an entry.
Returns
- an unmodifiable
Setof attributes, possibly empty
public Certificate getCertificate ()
Gets the end entity Certificate
from the certificate chain in this entry.
Returns
- the end entity
Certificate(at index 0) from the certificate chain in this entry. If the certificate is of type X.509, the runtime type of the returned certificate isX509Certificate.
public Certificate[] getCertificateChain ()
Gets the Certificate chain from this entry.
The stored chain is cloned before being returned.
Returns
- an array of
Certificates corresponding to the certificate chain for the public key. If the certificates are of type X.509, the runtime type of the returned array isX509Certificate[].
public PrivateKey getPrivateKey ()
Gets the PrivateKey from this entry.
Returns
- the
PrivateKeyfrom this entry
public String toString ()
Returns a string representation of this PrivateKeyEntry.
Returns
- a string representation of this PrivateKeyEntry.