org.nhindirect.common.crypto.impl

Class StaticPKCS11TokenKeyStoreProtectionManager

java.lang.Object

org.nhindirect.common.crypto.impl.AbstractPKCS11TokenKeyStoreProtectionManager

org.nhindirect.common.crypto.impl.StaticPKCS11TokenKeyStoreProtectionManager

All Implemented Interfaces:

KeyStoreProtectionManager, MutableKeyStoreProtectionManager, WrappableKeyProtectionManager

Direct Known Subclasses:

StaticCachedPKCS11TokenKeyStoreProtectionManager

public class StaticPKCS11TokenKeyStoreProtectionManager
extends AbstractPKCS11TokenKeyStoreProtectionManager

Implementation of PKCS11 token store that generally does not get detached from the system. Credentials are accessed via a PKCS11Credential implementation.

Since:

1.3

Author:

Greg Meyer

Field Summary

Fields inherited from class org.nhindirect.common.crypto.impl.AbstractPKCS11TokenKeyStoreProtectionManager

DEFAULT_KESTORE_TYPE, IV_BYTES, SUNPKCS11_KEYSTORE_PROVIDER_NAME, WRAP_ALGO

Constructor Summary

Constructors

Constructor and Description
StaticPKCS11TokenKeyStoreProtectionManager() Empty constructor
StaticPKCS11TokenKeyStoreProtectionManager(PKCS11Credential credential, String keyStorePassPhraseAlias, String privateKeyPassPhraseAlias) Constructs the store with a credential manager and aliases.

Method Summary

Modifier and Type	Method and Description
void	initTokenStore() Initializes access to the token.

Methods inherited from class org.nhindirect.common.crypto.impl.AbstractPKCS11TokenKeyStoreProtectionManager

clearEntry, clearKey, clearKeyStoreProtectionKey, clearPrivateKeyProtectionKey, getAllEntries, getAllKeys, getEntry, getKey, getKeyStoreProtectionKey, getKS, getPrivateKeyProtectionKey, setCredential, setEntry, setKey, setKeyStorePassPhraseAlias, setKeyStoreProtectionKey, setKeyStoreProtectionKeyAsBytes, setKeyStoreProtectionKeyAsString, setKeyStoreProviderName, setKeyStoreSource, setKeyStoreSourceAsString, setKeyStoreType, setPcks11ConfigFile, setPrivateKeyPassPhraseAlias, setPrivateKeyProtectionKey, setPrivateKeyProtectionKeyAsBytes, setPrivateKeyProtectionKeyAsString, unwrapWithSecretKey, wrapWithSecretKey

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

StaticPKCS11TokenKeyStoreProtectionManager

public StaticPKCS11TokenKeyStoreProtectionManager()
                                           throws CryptoException

Empty constructor

Throws:

CryptoException

StaticPKCS11TokenKeyStoreProtectionManager

public StaticPKCS11TokenKeyStoreProtectionManager(PKCS11Credential credential,
                                                  String keyStorePassPhraseAlias,
                                                  String privateKeyPassPhraseAlias)
                                           throws CryptoException

Constructs the store with a credential manager and aliases.

Parameters:

credential - The credentials to log into the store.

keyStorePassPhraseAlias - The alias name of the key store key in the PKCS11 token.

privateKeyPassPhraseAlias - The alias name of the private key protection key in the PKCS11 token.

Throws:

CryptoException

Method Detail

initTokenStore

public void initTokenStore()
                    throws CryptoException

Initializes access to the token. This is implementation specific and may require user interaction.

Specified by:

initTokenStore in class AbstractPKCS11TokenKeyStoreProtectionManager

Throws:

CryptoException