org.nhindirect.common.crypto.impl

Class DynamicPKCS11TokenKeyStoreProtectionManager

java.lang.Object

org.nhindirect.common.crypto.impl.AbstractPKCS11TokenKeyStoreProtectionManager

org.nhindirect.common.crypto.impl.DynamicPKCS11TokenKeyStoreProtectionManager

All Implemented Interfaces:

KeyStoreProtectionManager, MutableKeyStoreProtectionManager, WrappableKeyProtectionManager

public class DynamicPKCS11TokenKeyStoreProtectionManager
extends AbstractPKCS11TokenKeyStoreProtectionManager

A more dynamic implementation than the StaticPKCS11TokenKeyStoreProtectionManager that allows for swap-able tokens and plug-able methods for different logging into the token as described by the CallbackHandler class. Instances must provide a CallbackHander implementation for providing credential information.

Since:

1.3

Author:

Greg Meyer

Field Summary

Fields inherited from class org.nhindirect.common.crypto.impl.AbstractPKCS11TokenKeyStoreProtectionManager

DEFAULT_KESTORE_TYPE, IV_BYTES, SUNPKCS11_KEYSTORE_PROVIDER_NAME, WRAP_ALGO

Constructor Summary

Constructors

Constructor and Description
DynamicPKCS11TokenKeyStoreProtectionManager() Default Constructor
DynamicPKCS11TokenKeyStoreProtectionManager(String keyStorePassPhraseAlias, String privateKeyPassPhraseAlias, CallbackHandler handler) Constructs the store with the aliases and a callback handler.
DynamicPKCS11TokenKeyStoreProtectionManager(String keyStorePassPhraseAlias, String privateKeyPassPhraseAlias, CallbackHandler handler, String keyStoreType, InputStream inputStream)

Method Summary

Modifier and Type	Method and Description
void	initTokenStore()
void	setCallbackHandler(CallbackHandler handler) Sets the callback handler used obtain credential information.

Methods inherited from class org.nhindirect.common.crypto.impl.AbstractPKCS11TokenKeyStoreProtectionManager

clearEntry, clearKey, clearKeyStoreProtectionKey, clearPrivateKeyProtectionKey, getAllEntries, getAllKeys, getEntry, getKey, getKeyStoreProtectionKey, getKS, getPrivateKeyProtectionKey, setCredential, setEntry, setKey, setKeyStorePassPhraseAlias, setKeyStoreProtectionKey, setKeyStoreProtectionKeyAsBytes, setKeyStoreProtectionKeyAsString, setKeyStoreProviderName, setKeyStoreSource, setKeyStoreSourceAsString, setKeyStoreType, setPcks11ConfigFile, setPrivateKeyPassPhraseAlias, setPrivateKeyProtectionKey, setPrivateKeyProtectionKeyAsBytes, setPrivateKeyProtectionKeyAsString, unwrapWithSecretKey, wrapWithSecretKey

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DynamicPKCS11TokenKeyStoreProtectionManager

public DynamicPKCS11TokenKeyStoreProtectionManager()
                                            throws CryptoException

Default Constructor

Throws:

CryptoException

DynamicPKCS11TokenKeyStoreProtectionManager

public DynamicPKCS11TokenKeyStoreProtectionManager(String keyStorePassPhraseAlias,
                                                   String privateKeyPassPhraseAlias,
                                                   CallbackHandler handler)
                                            throws CryptoException

Constructs the store with the aliases and a callback handler.

Parameters:

keyStorePassPhraseAlias - The alias name of the key store key in the PKCS11 token.

privateKeyPassPhraseAlias - The alias name of the private key protection key in the PKCS11 token.

handler - A callback handler implementation used to obtain credential information.

Throws:

CryptoException

DynamicPKCS11TokenKeyStoreProtectionManager

public DynamicPKCS11TokenKeyStoreProtectionManager(String keyStorePassPhraseAlias,
                                                   String privateKeyPassPhraseAlias,
                                                   CallbackHandler handler,
                                                   String keyStoreType,
                                                   InputStream inputStream)
                                            throws CryptoException

Throws:

CryptoException

Method Detail

setCallbackHandler

public void setCallbackHandler(CallbackHandler handler)

Sets the callback handler used obtain credential information.

Parameters:

handler - The callback handler used obtain credential information.

initTokenStore

public void initTokenStore()
                    throws CryptoException

Specified by:

initTokenStore in class AbstractPKCS11TokenKeyStoreProtectionManager

Throws:

CryptoException