net.jsign.jca

Class AmazonSigningService

java.lang.Object

net.jsign.jca.AmazonSigningService

All Implemented Interfaces:

SigningService

public class AmazonSigningService
extends Object
implements SigningService

Signing service using the AWS API.

Since:

5.0

See Also:

AWS Key Management Service API Reference, Signing AWS API Requests

Constructor Summary

Constructors

Constructor and Description
AmazonSigningService(String region, AmazonCredentials credentials, Function<String,Certificate[]> certificateStore) Creates a new AWS signing service.
AmazonSigningService(String region, String credentials, Function<String,Certificate[]> certificateStore) Deprecated.
AmazonSigningService(String region, Supplier<AmazonCredentials> credentials, Function<String,Certificate[]> certificateStore) Creates a new AWS signing service.

Method Summary

Modifier and Type	Method and Description
List<String>	aliases() Returns the certificate aliases available.
Certificate[]	getCertificateChain(String alias) Returns the certificate chain for the alias specified.
String	getName() Returns the name of the service.
SigningServicePrivateKey	getPrivateKey(String alias, char[] password) Returns the private key for the certificate alias specified.
byte[]	sign(SigningServicePrivateKey privateKey, String algorithm, byte[] data) Sign the data with the private key specified.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.jsign.jca.SigningService

getPrivateKey

Constructor Detail

AmazonSigningService

public AmazonSigningService(String region,
                            AmazonCredentials credentials,
                            Function<String,Certificate[]> certificateStore)

Creates a new AWS signing service.

Parameters:

region - the AWS region holding the keys (for example eu-west-3)

credentials - the AWS credentials

certificateStore - provides the certificate chain for the keys

AmazonSigningService

@Deprecated
public AmazonSigningService(String region,
                                         String credentials,
                                         Function<String,Certificate[]> certificateStore)

Deprecated.

Creates a new AWS signing service.

Parameters:

region - the AWS region holding the keys (for example eu-west-3)

credentials - the AWS credentials: accessKey|secretKey|sessionToken (the session token is optional)

certificateStore - provides the certificate chain for the keys

AmazonSigningService

public AmazonSigningService(String region,
                            Supplier<AmazonCredentials> credentials,
                            Function<String,Certificate[]> certificateStore)

Creates a new AWS signing service.

Parameters:

region - the AWS region holding the keys (for example eu-west-3)

credentials - the AWS credentials provider

certificateStore - provides the certificate chain for the keys

Since:

6.0

Method Detail

aliases

public List<String> aliases()
                     throws KeyStoreException

Description copied from interface: SigningService

Returns the certificate aliases available.

Specified by:

aliases in interface SigningService

Throws:

KeyStoreException

getCertificateChain

public Certificate[] getCertificateChain(String alias)
                                  throws KeyStoreException

Description copied from interface: SigningService

Returns the certificate chain for the alias specified.

Specified by:

getCertificateChain in interface SigningService

Parameters:

alias - the name of the certificate

Throws:

KeyStoreException

getName

public String getName()

Description copied from interface: SigningService

Returns the name of the service.

Specified by:

getName in interface SigningService

getPrivateKey

public SigningServicePrivateKey getPrivateKey(String alias,
                                              char[] password)
                                       throws UnrecoverableKeyException

Description copied from interface: SigningService

Returns the private key for the certificate alias specified.

Specified by:

getPrivateKey in interface SigningService

Parameters:

alias - the name of the certificate

password - the secret required to access the key

Throws:

UnrecoverableKeyException

sign

public byte[] sign(SigningServicePrivateKey privateKey,
                   String algorithm,
                   byte[] data)
            throws GeneralSecurityException

Description copied from interface: SigningService

Sign the data with the private key specified.

Specified by:

sign in interface SigningService

Parameters:

privateKey - the private key

algorithm - the signing algorithm (for example SHA256withRSA)

data - the data to be signed

Throws:

GeneralSecurityException