Class crypt

java.lang.Object
cryptlib.crypt

public class crypt extends Object

This class represents all data structures, constant values and methods that cryptlib makes available via the nio interface.

Author: Peter Gutmann

  • Field Details

    • ALGO_NONE

      public static final int ALGO_NONE
      No encryption
      See Also:
    • ALGO_DES

      public static final int ALGO_DES
      DES
      See Also:
    • ALGO_3DES

      public static final int ALGO_3DES
      Triple DES
      See Also:
    • ALGO_IDEA

      public static final int ALGO_IDEA
      IDEA (only used for PGP 2.x)
      See Also:
    • ALGO_CAST

      public static final int ALGO_CAST
      CAST-128 (only used for OpenPGP)
      See Also:
    • ALGO_RC2

      public static final int ALGO_RC2
      RC2 (disabled by default, used for PKCS #12)
      See Also:
    • ALGO_RC4

      public static final int ALGO_RC4
      RC4 (insecure, disabled by default)
      See Also:
    • ALGO_RESERVED1

      public static final int ALGO_RESERVED1
      Formerly RC5
      See Also:
    • ALGO_AES

      public static final int ALGO_AES
      AES
      See Also:
    • ALGO_RESERVED2

      public static final int ALGO_RESERVED2
      Formerly Blowfish
      See Also:
    • ALGO_CHACHA20

      public static final int ALGO_CHACHA20
      ChaCha20
      See Also:
    • ALGO_DH

      public static final int ALGO_DH
      Diffie-Hellman
      See Also:
    • ALGO_RSA

      public static final int ALGO_RSA
      RSA
      See Also:
    • ALGO_DSA

      public static final int ALGO_DSA
      DSA
      See Also:
    • ALGO_ELGAMAL

      public static final int ALGO_ELGAMAL
      ElGamal
      See Also:
    • ALGO_RESERVED3

      public static final int ALGO_RESERVED3
      Formerly KEA
      See Also:
    • ALGO_ECDSA

      public static final int ALGO_ECDSA
      ECDSA
      See Also:
    • ALGO_ECDH

      public static final int ALGO_ECDH
      ECDH
      See Also:
    • ALGO_25519

      public static final int ALGO_25519
      X25519
      See Also:
    • ALGO_ED25519

      public static final int ALGO_ED25519
      Ed25519
      See Also:
    • ALGO_MLKEM

      public static final int ALGO_MLKEM
      ML-KEM
      See Also:
    • ALGO_RESERVED4

      public static final int ALGO_RESERVED4
      Formerly MD2
      See Also:
    • ALGO_RESERVED5

      public static final int ALGO_RESERVED5
      Formerly MD4
      See Also:
    • ALGO_MD5

      public static final int ALGO_MD5
      MD5 (only used internally for TLS 1.0/1.1)
      See Also:
    • ALGO_SHA1

      public static final int ALGO_SHA1
      SHA/SHA1
      See Also:
    • ALGO_RESERVED6

      public static final int ALGO_RESERVED6
      Formerly RIPE-MD 160
      See Also:
    • ALGO_SHA2

      public static final int ALGO_SHA2
      SHA-256
      See Also:
    • ALGO_SHA256

      public static final int ALGO_SHA256
      Alternate name
      See Also:
    • ALGO_SHAng

      public static final int ALGO_SHAng
      Future SHA-nextgen standard
      See Also:
    • ALGO_RESERVED7

      public static final int ALGO_RESERVED7
      Formerly HMAC-MD5
      See Also:
    • ALGO_HMAC_SHA1

      public static final int ALGO_HMAC_SHA1
      HMAC-SHA
      See Also:
    • ALGO_RESERVED8

      public static final int ALGO_RESERVED8
      Formerly HMAC-RIPEMD 160
      See Also:
    • ALGO_HMAC_SHA2

      public static final int ALGO_HMAC_SHA2
      HMAC-SHA2
      See Also:
    • ALGO_HMAC_SHAng

      public static final int ALGO_HMAC_SHAng
      HMAC-SHA-nextgen
      See Also:
    • ALGO_POLY1305

      public static final int ALGO_POLY1305
      Poly1305
      See Also:
    • ALGO_LAST

      public static final int ALGO_LAST
      Last possible crypt algo value
      See Also:
    • ALGO_FIRST_CONVENTIONAL

      public static final int ALGO_FIRST_CONVENTIONAL
      -
      See Also:
    • ALGO_LAST_CONVENTIONAL

      public static final int ALGO_LAST_CONVENTIONAL
      -
      See Also:
    • ALGO_FIRST_PKC

      public static final int ALGO_FIRST_PKC
      -
      See Also:
    • ALGO_LAST_PKC

      public static final int ALGO_LAST_PKC
      -
      See Also:
    • ALGO_FIRST_HASH

      public static final int ALGO_FIRST_HASH
      -
      See Also:
    • ALGO_LAST_HASH

      public static final int ALGO_LAST_HASH
      -
      See Also:
    • ALGO_FIRST_MAC

      public static final int ALGO_FIRST_MAC
      -
      See Also:
    • ALGO_LAST_MAC

      public static final int ALGO_LAST_MAC
      -
      See Also:
    • MODE_NONE

      public static final int MODE_NONE
      No encryption mode
      See Also:
    • MODE_ECB

      public static final int MODE_ECB
      ECB
      See Also:
    • MODE_CBC

      public static final int MODE_CBC
      CBC
      See Also:
    • MODE_CFB

      public static final int MODE_CFB
      CFB, needed for PGP
      See Also:
    • MODE_GCM

      public static final int MODE_GCM
      GCM, needed for SSH and TLS
      See Also:
    • MODE_LAST

      public static final int MODE_LAST
      Last possible crypt mode value
      See Also:
    • PKCFORMAT_NONE

      public static final int PKCFORMAT_NONE
      No PKC format type
      See Also:
    • PKCFORMAT_PKCS1

      public static final int PKCFORMAT_PKCS1
      PKCS #1
      See Also:
    • PKCFORMAT_DEFAULT

      public static final int PKCFORMAT_DEFAULT
      -
      See Also:
    • PKCFORMAT_OAEP

      public static final int PKCFORMAT_OAEP
      RSA-OAEP
      See Also:
    • PKCFORMAT_PSS

      public static final int PKCFORMAT_PSS
      RSA-PSS
      See Also:
    • PKCFORMAT_LAST

      public static final int PKCFORMAT_LAST
      Last possible PKC format type
      See Also:
    • KEYSET_NONE

      public static final int KEYSET_NONE
      No keyset type
      See Also:
    • KEYSET_FILE

      public static final int KEYSET_FILE
      Generic flat file keyset
      See Also:
    • KEYSET_HTTP

      public static final int KEYSET_HTTP
      Web page containing cert/CRL
      See Also:
    • KEYSET_LDAP

      public static final int KEYSET_LDAP
      LDAP directory service
      See Also:
    • KEYSET_DATABASE

      public static final int KEYSET_DATABASE
      ODBC database interface
      See Also:
    • KEYSET_ODBC

      public static final int KEYSET_ODBC
      Backwards compatibility
      See Also:
    • KEYSET_DATABASE_STORE

      public static final int KEYSET_DATABASE_STORE
      ODBC certificate store
      See Also:
    • KEYSET_ODBC_STORE

      public static final int KEYSET_ODBC_STORE
      -
      See Also:
    • KEYSET_LAST

      public static final int KEYSET_LAST
      Last possible keyset type
      See Also:
    • DEVICE_NONE

      public static final int DEVICE_NONE
      No crypto device
      See Also:
    • DEVICE_TPM

      public static final int DEVICE_TPM
      TPM, formerly Fortezza
      See Also:
    • DEVICE_PKCS11

      public static final int DEVICE_PKCS11
      PKCS #11 crypto token
      See Also:
    • DEVICE_CRYPTOAPI

      public static final int DEVICE_CRYPTOAPI
      Microsoft CryptoAPI
      See Also:
    • DEVICE_HARDWARE

      public static final int DEVICE_HARDWARE
      Generic crypo HW plugin
      See Also:
    • DEVICE_LAST

      public static final int DEVICE_LAST
      Last possible crypto device type
      See Also:
    • CERTTYPE_NONE

      public static final int CERTTYPE_NONE
      No certificate type
      See Also:
    • CERTTYPE_CERTIFICATE

      public static final int CERTTYPE_CERTIFICATE
      Certificate
      See Also:
    • CERTTYPE_ATTRIBUTE_CERT

      public static final int CERTTYPE_ATTRIBUTE_CERT
      Attribute certificate
      See Also:
    • CERTTYPE_CERTCHAIN

      public static final int CERTTYPE_CERTCHAIN
      PKCS #7 certificate chain
      See Also:
    • CERTTYPE_CERTREQUEST

      public static final int CERTTYPE_CERTREQUEST
      PKCS #10 certification request
      See Also:
    • CERTTYPE_REQUEST_CERT

      public static final int CERTTYPE_REQUEST_CERT
      CRMF certification request
      See Also:
    • CERTTYPE_REQUEST_REVOCATION

      public static final int CERTTYPE_REQUEST_REVOCATION
      CRMF revocation request
      See Also:
    • CERTTYPE_CRL

      public static final int CERTTYPE_CRL
      CRL
      See Also:
    • CERTTYPE_CMS_ATTRIBUTES

      public static final int CERTTYPE_CMS_ATTRIBUTES
      CMS attributes
      See Also:
    • CERTTYPE_RTCS_REQUEST

      public static final int CERTTYPE_RTCS_REQUEST
      RTCS request
      See Also:
    • CERTTYPE_RTCS_RESPONSE

      public static final int CERTTYPE_RTCS_RESPONSE
      RTCS response
      See Also:
    • CERTTYPE_OCSP_REQUEST

      public static final int CERTTYPE_OCSP_REQUEST
      OCSP request
      See Also:
    • CERTTYPE_OCSP_RESPONSE

      public static final int CERTTYPE_OCSP_RESPONSE
      OCSP response
      See Also:
    • CERTTYPE_PKIUSER

      public static final int CERTTYPE_PKIUSER
      PKI user information
      See Also:
    • CERTTYPE_LAST

      public static final int CERTTYPE_LAST
      Last possible cert.type
      See Also:
    • FORMAT_NONE

      public static final int FORMAT_NONE
      No format type
      See Also:
    • FORMAT_AUTO

      public static final int FORMAT_AUTO
      Deenv, auto-determine type
      See Also:
    • FORMAT_CRYPTLIB

      public static final int FORMAT_CRYPTLIB
      cryptlib native format
      See Also:
    • FORMAT_CMS

      public static final int FORMAT_CMS
      PKCS #7 / CMS / S/MIME fmt.
      See Also:
    • FORMAT_PKCS7

      public static final int FORMAT_PKCS7
      -
      See Also:
    • FORMAT_SMIME

      public static final int FORMAT_SMIME
      As CMS with MSG-style behaviour
      See Also:
    • FORMAT_PGP

      public static final int FORMAT_PGP
      PGP format
      See Also:
    • FORMAT_LAST

      public static final int FORMAT_LAST
      Last possible format type
      See Also:
    • SESSION_NONE

      public static final int SESSION_NONE
      No session type
      See Also:
    • SESSION_SSH

      public static final int SESSION_SSH
      SSH
      See Also:
    • SESSION_SSH_SERVER

      public static final int SESSION_SSH_SERVER
      SSH server
      See Also:
    • SESSION_TLS

      public static final int SESSION_TLS
      TLS
      See Also:
    • SESSION_SSL

      public static final int SESSION_SSL
      -
      See Also:
    • SESSION_TLS_SERVER

      public static final int SESSION_TLS_SERVER
      TLS server
      See Also:
    • SESSION_SSL_SERVER

      public static final int SESSION_SSL_SERVER
      -
      See Also:
    • SESSION_RTCS

      public static final int SESSION_RTCS
      RTCS
      See Also:
    • SESSION_RTCS_SERVER

      public static final int SESSION_RTCS_SERVER
      RTCS server
      See Also:
    • SESSION_SCVP

      public static final int SESSION_SCVP
      SCVP
      See Also:
    • SESSION_SCVP_SERVER

      public static final int SESSION_SCVP_SERVER
      SCVP server
      See Also:
    • SESSION_OCSP

      public static final int SESSION_OCSP
      OCSP
      See Also:
    • SESSION_OCSP_SERVER

      public static final int SESSION_OCSP_SERVER
      OCSP server
      See Also:
    • SESSION_TSP

      public static final int SESSION_TSP
      TSP
      See Also:
    • SESSION_TSP_SERVER

      public static final int SESSION_TSP_SERVER
      TSP server
      See Also:
    • SESSION_CMP

      public static final int SESSION_CMP
      CMP
      See Also:
    • SESSION_CMP_SERVER

      public static final int SESSION_CMP_SERVER
      CMP server
      See Also:
    • SESSION_SCEP

      public static final int SESSION_SCEP
      SCEP
      See Also:
    • SESSION_SCEP_SERVER

      public static final int SESSION_SCEP_SERVER
      SCEP server
      See Also:
    • SESSION_CERTSTORE_SERVER

      public static final int SESSION_CERTSTORE_SERVER
      HTTP cert store interface
      See Also:
    • SESSION_LAST

      public static final int SESSION_LAST
      Last possible session type
      See Also:
    • USER_NONE

      public static final int USER_NONE
      No user type
      See Also:
    • USER_NORMAL

      public static final int USER_NORMAL
      Normal user
      See Also:
    • USER_SO

      public static final int USER_SO
      Security officer
      See Also:
    • USER_CA

      public static final int USER_CA
      CA user
      See Also:
    • USER_LAST

      public static final int USER_LAST
      Last possible user type
      See Also:
    • ATTRIBUTE_NONE

      public static final int ATTRIBUTE_NONE
      Non-value
      See Also:
    • PROPERTY_FIRST

      public static final int PROPERTY_FIRST
      -
      See Also:
    • PROPERTY_HIGHSECURITY

      public static final int PROPERTY_HIGHSECURITY
      Owned+non-forwardcount+locked
      See Also:
    • PROPERTY_OWNER

      public static final int PROPERTY_OWNER
      Object owner
      See Also:
    • PROPERTY_FORWARDCOUNT

      public static final int PROPERTY_FORWARDCOUNT
      No.of times object can be forwarded
      See Also:
    • PROPERTY_LOCKED

      public static final int PROPERTY_LOCKED
      Whether properties can be chged/read
      See Also:
    • PROPERTY_USAGECOUNT

      public static final int PROPERTY_USAGECOUNT
      Usage count before object expires
      See Also:
    • PROPERTY_NONEXPORTABLE

      public static final int PROPERTY_NONEXPORTABLE
      Whether key is nonexp.from context
      See Also:
    • PROPERTY_LAST

      public static final int PROPERTY_LAST
      -
      See Also:
    • GENERIC_FIRST

      public static final int GENERIC_FIRST
      Extended error information
      See Also:
    • ATTRIBUTE_ERRORTYPE

      public static final int ATTRIBUTE_ERRORTYPE
      Type of last error
      See Also:
    • ATTRIBUTE_ERRORLOCUS

      public static final int ATTRIBUTE_ERRORLOCUS
      Locus of last error
      See Also:
    • ATTRIBUTE_ERRORMESSAGE

      public static final int ATTRIBUTE_ERRORMESSAGE
      Detailed error description
      See Also:
    • ATTRIBUTE_CURRENT_GROUP

      public static final int ATTRIBUTE_CURRENT_GROUP
      Cursor mgt: Group in attribute list
      See Also:
    • ATTRIBUTE_CURRENT

      public static final int ATTRIBUTE_CURRENT
      Cursor mgt: Entry in attribute list
      See Also:
    • ATTRIBUTE_CURRENT_INSTANCE

      public static final int ATTRIBUTE_CURRENT_INSTANCE
      Cursor mgt: Instance in attribute list
      See Also:
    • ATTRIBUTE_BUFFERSIZE

      public static final int ATTRIBUTE_BUFFERSIZE
      Internal data buffer size
      See Also:
    • GENERIC_LAST

      public static final int GENERIC_LAST
      -
      See Also:
    • OPTION_FIRST

      public static final int OPTION_FIRST
      -
      See Also:
    • OPTION_INFO_DESCRIPTION

      public static final int OPTION_INFO_DESCRIPTION
      Text description
      See Also:
    • OPTION_INFO_MAJORVERSION

      public static final int OPTION_INFO_MAJORVERSION
      Major release version
      See Also:
    • OPTION_INFO_MINORVERSION

      public static final int OPTION_INFO_MINORVERSION
      Minor release version
      See Also:
    • OPTION_INFO_STEPPING

      public static final int OPTION_INFO_STEPPING
      Release stepping
      See Also:
    • OPTION_ENCR_ALGO

      public static final int OPTION_ENCR_ALGO
      Conventional encryption algorithm
      See Also:
    • OPTION_ENCR_HASH

      public static final int OPTION_ENCR_HASH
      Hash algorithm
      See Also:
    • OPTION_ENCR_MAC

      public static final int OPTION_ENCR_MAC
      MAC algorithm
      See Also:
    • OPTION_PKC_ALGO

      public static final int OPTION_PKC_ALGO
      PKC algorithm
      See Also:
    • OPTION_PKC_KEYSIZE

      public static final int OPTION_PKC_KEYSIZE
      PKC key size
      See Also:
    • OPTION_PKC_FORMAT

      public static final int OPTION_PKC_FORMAT
      PKC format
      See Also:
    • OPTION_ENCR_HASHPARAM

      public static final int OPTION_ENCR_HASHPARAM
      Hash/MAC parameter
      See Also:
    • OPTION_KEYING_ALGO

      public static final int OPTION_KEYING_ALGO
      Key processing algorithm
      See Also:
    • OPTION_KEYING_ITERATIONS

      public static final int OPTION_KEYING_ITERATIONS
      Key processing iterations
      See Also:
    • OPTION_CERT_SIGNUNRECOGNISEDATTRIBUTES

      public static final int OPTION_CERT_SIGNUNRECOGNISEDATTRIBUTES
      Whether to sign unrecog.attrs
      See Also:
    • OPTION_CERT_VALIDITY

      public static final int OPTION_CERT_VALIDITY
      Certificate validity period
      See Also:
    • OPTION_CERT_UPDATEINTERVAL

      public static final int OPTION_CERT_UPDATEINTERVAL
      CRL update interval
      See Also:
    • OPTION_CERT_COMPLIANCELEVEL

      public static final int OPTION_CERT_COMPLIANCELEVEL
      PKIX compliance level for cert chks.
      See Also:
    • OPTION_CERT_REQUIREPOLICY

      public static final int OPTION_CERT_REQUIREPOLICY
      Whether explicit policy req'd for certs
      See Also:
    • OPTION_CMS_DEFAULTATTRIBUTES

      public static final int OPTION_CMS_DEFAULTATTRIBUTES
      Add default CMS attributes
      See Also:
    • OPTION_SMIME_DEFAULTATTRIBUTES

      public static final int OPTION_SMIME_DEFAULTATTRIBUTES
      LDAP keyset options
      See Also:
    • OPTION_KEYS_LDAP_OBJECTCLASS

      public static final int OPTION_KEYS_LDAP_OBJECTCLASS
      Object class
      See Also:
    • OPTION_KEYS_LDAP_OBJECTTYPE

      public static final int OPTION_KEYS_LDAP_OBJECTTYPE
      Object type to fetch
      See Also:
    • OPTION_KEYS_LDAP_FILTER

      public static final int OPTION_KEYS_LDAP_FILTER
      Query filter
      See Also:
    • OPTION_KEYS_LDAP_CACERTNAME

      public static final int OPTION_KEYS_LDAP_CACERTNAME
      CA certificate attribute name
      See Also:
    • OPTION_KEYS_LDAP_CERTNAME

      public static final int OPTION_KEYS_LDAP_CERTNAME
      Certificate attribute name
      See Also:
    • OPTION_KEYS_LDAP_CRLNAME

      public static final int OPTION_KEYS_LDAP_CRLNAME
      CRL attribute name
      See Also:
    • OPTION_KEYS_LDAP_EMAILNAME

      public static final int OPTION_KEYS_LDAP_EMAILNAME
      Email attribute name
      See Also:
    • OPTION_DEVICE_PKCS11_DVR01

      public static final int OPTION_DEVICE_PKCS11_DVR01
      Name of first PKCS #11 driver
      See Also:
    • OPTION_DEVICE_PKCS11_DVR02

      public static final int OPTION_DEVICE_PKCS11_DVR02
      Name of second PKCS #11 driver
      See Also:
    • OPTION_DEVICE_PKCS11_DVR03

      public static final int OPTION_DEVICE_PKCS11_DVR03
      Name of third PKCS #11 driver
      See Also:
    • OPTION_DEVICE_PKCS11_DVR04

      public static final int OPTION_DEVICE_PKCS11_DVR04
      Name of fourth PKCS #11 driver
      See Also:
    • OPTION_DEVICE_PKCS11_DVR05

      public static final int OPTION_DEVICE_PKCS11_DVR05
      Name of fifth PKCS #11 driver
      See Also:
    • OPTION_DEVICE_PKCS11_HARDWAREONLY

      public static final int OPTION_DEVICE_PKCS11_HARDWAREONLY
      Use only hardware mechanisms
      See Also:
    • OPTION_NET_SOCKS_SERVER

      public static final int OPTION_NET_SOCKS_SERVER
      Socks server name
      See Also:
    • OPTION_NET_SOCKS_USERNAME

      public static final int OPTION_NET_SOCKS_USERNAME
      Socks user name
      See Also:
    • OPTION_NET_HTTP_PROXY

      public static final int OPTION_NET_HTTP_PROXY
      Web proxy server
      See Also:
    • OPTION_NET_CONNECTTIMEOUT

      public static final int OPTION_NET_CONNECTTIMEOUT
      Timeout for network connection setup
      See Also:
    • OPTION_NET_READTIMEOUT

      public static final int OPTION_NET_READTIMEOUT
      Timeout for network reads
      See Also:
    • OPTION_NET_WRITETIMEOUT

      public static final int OPTION_NET_WRITETIMEOUT
      Timeout for network writes
      See Also:
    • OPTION_MISC_ASYNCINIT

      public static final int OPTION_MISC_ASYNCINIT
      Whether to init cryptlib async'ly
      See Also:
    • OPTION_MISC_SIDECHANNELPROTECTION

      public static final int OPTION_MISC_SIDECHANNELPROTECTION
      Protect against side-channel attacks
      See Also:
    • OPTION_CONFIGCHANGED

      public static final int OPTION_CONFIGCHANGED
      Whether in-mem.opts match on-disk ones
      See Also:
    • OPTION_SELFTESTOK

      public static final int OPTION_SELFTESTOK
      Whether self-test was completed and OK
      See Also:
    • OPTION_LAST

      public static final int OPTION_LAST
      -
      See Also:
    • CTXINFO_FIRST

      public static final int CTXINFO_FIRST
      -
      See Also:
    • CTXINFO_ALGO

      public static final int CTXINFO_ALGO
      Algorithm
      See Also:
    • CTXINFO_MODE

      public static final int CTXINFO_MODE
      Mode
      See Also:
    • CTXINFO_NAME_ALGO

      public static final int CTXINFO_NAME_ALGO
      Algorithm name
      See Also:
    • CTXINFO_NAME_MODE

      public static final int CTXINFO_NAME_MODE
      Mode name
      See Also:
    • CTXINFO_KEYSIZE

      public static final int CTXINFO_KEYSIZE
      Key size in bytes
      See Also:
    • CTXINFO_BLOCKSIZE

      public static final int CTXINFO_BLOCKSIZE
      Block size
      See Also:
    • CTXINFO_IVSIZE

      public static final int CTXINFO_IVSIZE
      IV size
      See Also:
    • CTXINFO_KEYING_ALGO

      public static final int CTXINFO_KEYING_ALGO
      Key processing algorithm
      See Also:
    • CTXINFO_KEYING_ITERATIONS

      public static final int CTXINFO_KEYING_ITERATIONS
      Key processing iterations
      See Also:
    • CTXINFO_KEYING_SALT

      public static final int CTXINFO_KEYING_SALT
      Key processing salt
      See Also:
    • CTXINFO_KEYING_VALUE

      public static final int CTXINFO_KEYING_VALUE
      Value used to derive key
      See Also:
    • CTXINFO_KEY

      public static final int CTXINFO_KEY
      Key
      See Also:
    • CTXINFO_KEY_COMPONENTS

      public static final int CTXINFO_KEY_COMPONENTS
      Public-key components
      See Also:
    • CTXINFO_IV

      public static final int CTXINFO_IV
      IV
      See Also:
    • CTXINFO_HASHVALUE

      public static final int CTXINFO_HASHVALUE
      Hash value
      See Also:
    • CTXINFO_LABEL

      public static final int CTXINFO_LABEL
      Label for private/secret key
      See Also:
    • CTXINFO_PERSISTENT

      public static final int CTXINFO_PERSISTENT
      Obj.is backed by device or keyset
      See Also:
    • CTXINFO_LAST

      public static final int CTXINFO_LAST
      -
      See Also:
    • CERTINFO_FIRST

      public static final int CERTINFO_FIRST
      -
      See Also:
    • CERTINFO_SELFSIGNED

      public static final int CERTINFO_SELFSIGNED
      Cert is self-signed
      See Also:
    • CERTINFO_IMMUTABLE

      public static final int CERTINFO_IMMUTABLE
      Cert is signed and immutable
      See Also:
    • CERTINFO_XYZZY

      public static final int CERTINFO_XYZZY
      Cert is a magic just-works cert
      See Also:
    • CERTINFO_CERTTYPE

      public static final int CERTINFO_CERTTYPE
      Certificate object type
      See Also:
    • CERTINFO_FINGERPRINT_SHA1

      public static final int CERTINFO_FINGERPRINT_SHA1
      Certificate fingerprints
      See Also:
    • CERTINFO_FINGERPRINT_SHA2

      public static final int CERTINFO_FINGERPRINT_SHA2
      -
      See Also:
    • CERTINFO_FINGERPRINT_SHAng

      public static final int CERTINFO_FINGERPRINT_SHAng
      -
      See Also:
    • CERTINFO_CURRENT_CERTIFICATE

      public static final int CERTINFO_CURRENT_CERTIFICATE
      Cursor mgt: Rel.pos in chain/CRL/OCSP
      See Also:
    • CERTINFO_TRUSTED_USAGE

      public static final int CERTINFO_TRUSTED_USAGE
      Usage that cert is trusted for
      See Also:
    • CERTINFO_TRUSTED_IMPLICIT

      public static final int CERTINFO_TRUSTED_IMPLICIT
      Whether cert is implicitly trusted
      See Also:
    • CERTINFO_SIGNATURELEVEL

      public static final int CERTINFO_SIGNATURELEVEL
      Amount of detail to include in sigs.
      See Also:
    • CERTINFO_VERSION

      public static final int CERTINFO_VERSION
      Cert.format version
      See Also:
    • CERTINFO_SERIALNUMBER

      public static final int CERTINFO_SERIALNUMBER
      Serial number
      See Also:
    • CERTINFO_SUBJECTPUBLICKEYINFO

      public static final int CERTINFO_SUBJECTPUBLICKEYINFO
      Public key
      See Also:
    • CERTINFO_CERTIFICATE

      public static final int CERTINFO_CERTIFICATE
      User certificate
      See Also:
    • CERTINFO_USERCERTIFICATE

      public static final int CERTINFO_USERCERTIFICATE
      -
      See Also:
    • CERTINFO_CACERTIFICATE

      public static final int CERTINFO_CACERTIFICATE
      CA certificate
      See Also:
    • CERTINFO_ISSUERNAME

      public static final int CERTINFO_ISSUERNAME
      Issuer DN
      See Also:
    • CERTINFO_VALIDFROM

      public static final int CERTINFO_VALIDFROM
      Cert valid-from time
      See Also:
    • CERTINFO_VALIDTO

      public static final int CERTINFO_VALIDTO
      Cert valid-to time
      See Also:
    • CERTINFO_SUBJECTNAME

      public static final int CERTINFO_SUBJECTNAME
      Subject DN
      See Also:
    • CERTINFO_ISSUERUNIQUEID

      public static final int CERTINFO_ISSUERUNIQUEID
      Issuer unique ID
      See Also:
    • CERTINFO_SUBJECTUNIQUEID

      public static final int CERTINFO_SUBJECTUNIQUEID
      Subject unique ID
      See Also:
    • CERTINFO_CERTREQUEST

      public static final int CERTINFO_CERTREQUEST
      Cert.request (DN + public key)
      See Also:
    • CERTINFO_THISUPDATE

      public static final int CERTINFO_THISUPDATE
      CRL/OCSP current-update time
      See Also:
    • CERTINFO_NEXTUPDATE

      public static final int CERTINFO_NEXTUPDATE
      CRL/OCSP next-update time
      See Also:
    • CERTINFO_REVOCATIONDATE

      public static final int CERTINFO_REVOCATIONDATE
      CRL/OCSP cert-revocation time
      See Also:
    • CERTINFO_REVOCATIONSTATUS

      public static final int CERTINFO_REVOCATIONSTATUS
      OCSP revocation status
      See Also:
    • CERTINFO_CERTSTATUS

      public static final int CERTINFO_CERTSTATUS
      RTCS certificate status
      See Also:
    • CERTINFO_DN

      public static final int CERTINFO_DN
      Currently selected DN in string form
      See Also:
    • CERTINFO_PKIUSER_ID

      public static final int CERTINFO_PKIUSER_ID
      PKI user ID
      See Also:
    • CERTINFO_PKIUSER_ISSUEPASSWORD

      public static final int CERTINFO_PKIUSER_ISSUEPASSWORD
      PKI user issue password
      See Also:
    • CERTINFO_PKIUSER_REVPASSWORD

      public static final int CERTINFO_PKIUSER_REVPASSWORD
      PKI user revocation password
      See Also:
    • CERTINFO_PKIUSER_RA

      public static final int CERTINFO_PKIUSER_RA
      PKI user is an RA
      See Also:
    • CERTINFO_COUNTRYNAME

      public static final int CERTINFO_COUNTRYNAME
      countryName
      See Also:
    • CERTINFO_STATEORPROVINCENAME

      public static final int CERTINFO_STATEORPROVINCENAME
      stateOrProvinceName
      See Also:
    • CERTINFO_LOCALITYNAME

      public static final int CERTINFO_LOCALITYNAME
      localityName
      See Also:
    • CERTINFO_ORGANIZATIONNAME

      public static final int CERTINFO_ORGANIZATIONNAME
      organizationName
      See Also:
    • CERTINFO_ORGANISATIONNAME

      public static final int CERTINFO_ORGANISATIONNAME
      -
      See Also:
    • CERTINFO_ORGANIZATIONALUNITNAME

      public static final int CERTINFO_ORGANIZATIONALUNITNAME
      organizationalUnitName
      See Also:
    • CERTINFO_ORGANISATIONALUNITNAME

      public static final int CERTINFO_ORGANISATIONALUNITNAME
      -
      See Also:
    • CERTINFO_COMMONNAME

      public static final int CERTINFO_COMMONNAME
      commonName
      See Also:
    • CERTINFO_OTHERNAME_TYPEID

      public static final int CERTINFO_OTHERNAME_TYPEID
      otherName.typeID
      See Also:
    • CERTINFO_OTHERNAME_VALUE

      public static final int CERTINFO_OTHERNAME_VALUE
      otherName.value
      See Also:
    • CERTINFO_RFC822NAME

      public static final int CERTINFO_RFC822NAME
      rfc822Name
      See Also:
    • CERTINFO_EMAIL

      public static final int CERTINFO_EMAIL
      -
      See Also:
    • CERTINFO_DNSNAME

      public static final int CERTINFO_DNSNAME
      dNSName
      See Also:
    • CERTINFO_DIRECTORYNAME

      public static final int CERTINFO_DIRECTORYNAME
      directoryName
      See Also:
    • CERTINFO_EDIPARTYNAME_NAMEASSIGNER

      public static final int CERTINFO_EDIPARTYNAME_NAMEASSIGNER
      ediPartyName.nameAssigner
      See Also:
    • CERTINFO_EDIPARTYNAME_PARTYNAME

      public static final int CERTINFO_EDIPARTYNAME_PARTYNAME
      ediPartyName.partyName
      See Also:
    • CERTINFO_UNIFORMRESOURCEIDENTIFIER

      public static final int CERTINFO_UNIFORMRESOURCEIDENTIFIER
      uniformResourceIdentifier
      See Also:
    • CERTINFO_URL

      public static final int CERTINFO_URL
      -
      See Also:
    • CERTINFO_IPADDRESS

      public static final int CERTINFO_IPADDRESS
      iPAddress
      See Also:
    • CERTINFO_REGISTEREDID

      public static final int CERTINFO_REGISTEREDID
      registeredID
      See Also:
    • CERTINFO_CHALLENGEPASSWORD

      public static final int CERTINFO_CHALLENGEPASSWORD
      1 3 6 1 4 1 3029 3 1 4 cRLExtReason
      See Also:
    • CERTINFO_CRLEXTREASON

      public static final int CERTINFO_CRLEXTREASON
      1 3 6 1 4 1 3029 3 1 5 keyFeatures
      See Also:
    • CERTINFO_KEYFEATURES

      public static final int CERTINFO_KEYFEATURES
      1 3 6 1 5 5 7 1 1 authorityInfoAccess
      See Also:
    • CERTINFO_AUTHORITYINFOACCESS

      public static final int CERTINFO_AUTHORITYINFOACCESS
      -
      See Also:
    • CERTINFO_AUTHORITYINFO_RTCS

      public static final int CERTINFO_AUTHORITYINFO_RTCS
      accessDescription.accessLocation
      See Also:
    • CERTINFO_AUTHORITYINFO_OCSP

      public static final int CERTINFO_AUTHORITYINFO_OCSP
      accessDescription.accessLocation
      See Also:
    • CERTINFO_AUTHORITYINFO_CAISSUERS

      public static final int CERTINFO_AUTHORITYINFO_CAISSUERS
      accessDescription.accessLocation
      See Also:
    • CERTINFO_AUTHORITYINFO_CERTSTORE

      public static final int CERTINFO_AUTHORITYINFO_CERTSTORE
      accessDescription.accessLocation
      See Also:
    • CERTINFO_AUTHORITYINFO_CRLS

      public static final int CERTINFO_AUTHORITYINFO_CRLS
      accessDescription.accessLocation
      See Also:
    • CERTINFO_BIOMETRICINFO

      public static final int CERTINFO_BIOMETRICINFO
      -
      See Also:
    • CERTINFO_BIOMETRICINFO_TYPE

      public static final int CERTINFO_BIOMETRICINFO_TYPE
      biometricData.typeOfData
      See Also:
    • CERTINFO_BIOMETRICINFO_HASHALGO

      public static final int CERTINFO_BIOMETRICINFO_HASHALGO
      biometricData.hashAlgorithm
      See Also:
    • CERTINFO_BIOMETRICINFO_HASH

      public static final int CERTINFO_BIOMETRICINFO_HASH
      biometricData.dataHash
      See Also:
    • CERTINFO_BIOMETRICINFO_URL

      public static final int CERTINFO_BIOMETRICINFO_URL
      biometricData.sourceDataUri
      See Also:
    • CERTINFO_QCSTATEMENT

      public static final int CERTINFO_QCSTATEMENT
      -
      See Also:
    • CERTINFO_QCSTATEMENT_SEMANTICS

      public static final int CERTINFO_QCSTATEMENT_SEMANTICS
      qcStatement.statementInfo.semanticsIdentifier
      See Also:
    • CERTINFO_QCSTATEMENT_REGISTRATIONAUTHORITY

      public static final int CERTINFO_QCSTATEMENT_REGISTRATIONAUTHORITY
      qcStatement.statementInfo.nameRegistrationAuthorities
      See Also:
    • CERTINFO_IPADDRESSBLOCKS

      public static final int CERTINFO_IPADDRESSBLOCKS
      -
      See Also:
    • CERTINFO_IPADDRESSBLOCKS_ADDRESSFAMILY

      public static final int CERTINFO_IPADDRESSBLOCKS_ADDRESSFAMILY
      addressFamily
      See Also:
    • CERTINFO_IPADDRESSBLOCKS_PREFIX

      public static final int CERTINFO_IPADDRESSBLOCKS_PREFIX
      ipAddress.addressPrefix
      See Also:
    • CERTINFO_IPADDRESSBLOCKS_MIN

      public static final int CERTINFO_IPADDRESSBLOCKS_MIN
      ipAddress.addressRangeMin
      See Also:
    • CERTINFO_IPADDRESSBLOCKS_MAX

      public static final int CERTINFO_IPADDRESSBLOCKS_MAX
      ipAddress.addressRangeMax
      See Also:
    • CERTINFO_AUTONOMOUSSYSIDS

      public static final int CERTINFO_AUTONOMOUSSYSIDS
      -
      See Also:
    • CERTINFO_AUTONOMOUSSYSIDS_ASNUM_ID

      public static final int CERTINFO_AUTONOMOUSSYSIDS_ASNUM_ID
      asNum.id
      See Also:
    • CERTINFO_AUTONOMOUSSYSIDS_ASNUM_MIN

      public static final int CERTINFO_AUTONOMOUSSYSIDS_ASNUM_MIN
      asNum.min
      See Also:
    • CERTINFO_AUTONOMOUSSYSIDS_ASNUM_MAX

      public static final int CERTINFO_AUTONOMOUSSYSIDS_ASNUM_MAX
      asNum.max
      See Also:
    • CERTINFO_OCSP_NONCE

      public static final int CERTINFO_OCSP_NONCE
      nonce
      See Also:
    • CERTINFO_OCSP_RESPONSE

      public static final int CERTINFO_OCSP_RESPONSE
      -
      See Also:
    • CERTINFO_OCSP_RESPONSE_OCSP

      public static final int CERTINFO_OCSP_RESPONSE_OCSP
      OCSP standard response
      See Also:
    • CERTINFO_OCSP_NOCHECK

      public static final int CERTINFO_OCSP_NOCHECK
      1 3 6 1 5 5 7 48 1 6 ocspArchiveCutoff
      See Also:
    • CERTINFO_OCSP_ARCHIVECUTOFF

      public static final int CERTINFO_OCSP_ARCHIVECUTOFF
      1 3 6 1 5 5 7 48 1 11 subjectInfoAccess
      See Also:
    • CERTINFO_SUBJECTINFOACCESS

      public static final int CERTINFO_SUBJECTINFOACCESS
      -
      See Also:
    • CERTINFO_SUBJECTINFO_TIMESTAMPING

      public static final int CERTINFO_SUBJECTINFO_TIMESTAMPING
      accessDescription.accessLocation
      See Also:
    • CERTINFO_SUBJECTINFO_CAREPOSITORY

      public static final int CERTINFO_SUBJECTINFO_CAREPOSITORY
      accessDescription.accessLocation
      See Also:
    • CERTINFO_SUBJECTINFO_SIGNEDOBJECTREPOSITORY

      public static final int CERTINFO_SUBJECTINFO_SIGNEDOBJECTREPOSITORY
      accessDescription.accessLocation
      See Also:
    • CERTINFO_SUBJECTINFO_RPKIMANIFEST

      public static final int CERTINFO_SUBJECTINFO_RPKIMANIFEST
      accessDescription.accessLocation
      See Also:
    • CERTINFO_SUBJECTINFO_SIGNEDOBJECT

      public static final int CERTINFO_SUBJECTINFO_SIGNEDOBJECT
      accessDescription.accessLocation
      See Also:
    • CERTINFO_SIGG_DATEOFCERTGEN

      public static final int CERTINFO_SIGG_DATEOFCERTGEN
      1 3 36 8 3 2 siggProcuration
      See Also:
    • CERTINFO_SIGG_PROCURATION

      public static final int CERTINFO_SIGG_PROCURATION
      -
      See Also:
    • CERTINFO_SIGG_PROCURE_COUNTRY

      public static final int CERTINFO_SIGG_PROCURE_COUNTRY
      country
      See Also:
    • CERTINFO_SIGG_PROCURE_TYPEOFSUBSTITUTION

      public static final int CERTINFO_SIGG_PROCURE_TYPEOFSUBSTITUTION
      typeOfSubstitution
      See Also:
    • CERTINFO_SIGG_PROCURE_SIGNINGFOR

      public static final int CERTINFO_SIGG_PROCURE_SIGNINGFOR
      signingFor.thirdPerson
      See Also:
    • CERTINFO_SIGG_ADMISSIONS

      public static final int CERTINFO_SIGG_ADMISSIONS
      -
      See Also:
    • CERTINFO_SIGG_ADMISSIONS_AUTHORITY

      public static final int CERTINFO_SIGG_ADMISSIONS_AUTHORITY
      authority
      See Also:
    • CERTINFO_SIGG_ADMISSIONS_NAMINGAUTHID

      public static final int CERTINFO_SIGG_ADMISSIONS_NAMINGAUTHID
      namingAuth.iD
      See Also:
    • CERTINFO_SIGG_ADMISSIONS_NAMINGAUTHURL

      public static final int CERTINFO_SIGG_ADMISSIONS_NAMINGAUTHURL
      namingAuth.uRL
      See Also:
    • CERTINFO_SIGG_ADMISSIONS_NAMINGAUTHTEXT

      public static final int CERTINFO_SIGG_ADMISSIONS_NAMINGAUTHTEXT
      namingAuth.text
      See Also:
    • CERTINFO_SIGG_ADMISSIONS_PROFESSIONITEM

      public static final int CERTINFO_SIGG_ADMISSIONS_PROFESSIONITEM
      professionItem
      See Also:
    • CERTINFO_SIGG_ADMISSIONS_PROFESSIONOID

      public static final int CERTINFO_SIGG_ADMISSIONS_PROFESSIONOID
      professionOID
      See Also:
    • CERTINFO_SIGG_ADMISSIONS_REGISTRATIONNUMBER

      public static final int CERTINFO_SIGG_ADMISSIONS_REGISTRATIONNUMBER
      registrationNumber
      See Also:
    • CERTINFO_SIGG_MONETARYLIMIT

      public static final int CERTINFO_SIGG_MONETARYLIMIT
      -
      See Also:
    • CERTINFO_SIGG_MONETARY_CURRENCY

      public static final int CERTINFO_SIGG_MONETARY_CURRENCY
      currency
      See Also:
    • CERTINFO_SIGG_MONETARY_AMOUNT

      public static final int CERTINFO_SIGG_MONETARY_AMOUNT
      amount
      See Also:
    • CERTINFO_SIGG_MONETARY_EXPONENT

      public static final int CERTINFO_SIGG_MONETARY_EXPONENT
      exponent
      See Also:
    • CERTINFO_SIGG_DECLARATIONOFMAJORITY

      public static final int CERTINFO_SIGG_DECLARATIONOFMAJORITY
      -
      See Also:
    • CERTINFO_SIGG_DECLARATIONOFMAJORITY_COUNTRY

      public static final int CERTINFO_SIGG_DECLARATIONOFMAJORITY_COUNTRY
      fullAgeAtCountry
      See Also:
    • CERTINFO_SIGG_RESTRICTION

      public static final int CERTINFO_SIGG_RESTRICTION
      1 3 36 8 3 13 siggCertHash
      See Also:
    • CERTINFO_SIGG_CERTHASH

      public static final int CERTINFO_SIGG_CERTHASH
      1 3 36 8 3 15 siggAdditionalInformation
      See Also:
    • CERTINFO_SIGG_ADDITIONALINFORMATION

      public static final int CERTINFO_SIGG_ADDITIONALINFORMATION
      1 3 101 1 4 1 strongExtranet
      See Also:
    • CERTINFO_STRONGEXTRANET

      public static final int CERTINFO_STRONGEXTRANET
      -
      See Also:
    • CERTINFO_STRONGEXTRANET_ZONE

      public static final int CERTINFO_STRONGEXTRANET_ZONE
      sxNetIDList.sxNetID.zone
      See Also:
    • CERTINFO_STRONGEXTRANET_ID

      public static final int CERTINFO_STRONGEXTRANET_ID
      sxNetIDList.sxNetID.id
      See Also:
    • CERTINFO_SUBJECTDIRECTORYATTRIBUTES

      public static final int CERTINFO_SUBJECTDIRECTORYATTRIBUTES
      2 5 29 14 subjectKeyIdentifier
      See Also:
    • CERTINFO_SUBJECTKEYIDENTIFIER

      public static final int CERTINFO_SUBJECTKEYIDENTIFIER
      2 5 29 15 keyUsage
      See Also:
    • CERTINFO_KEYUSAGE

      public static final int CERTINFO_KEYUSAGE
      2 5 29 16 privateKeyUsagePeriod
      See Also:
    • CERTINFO_PRIVATEKEYUSAGEPERIOD

      public static final int CERTINFO_PRIVATEKEYUSAGEPERIOD
      -
      See Also:
    • CERTINFO_PRIVATEKEY_NOTBEFORE

      public static final int CERTINFO_PRIVATEKEY_NOTBEFORE
      notBefore
      See Also:
    • CERTINFO_PRIVATEKEY_NOTAFTER

      public static final int CERTINFO_PRIVATEKEY_NOTAFTER
      notAfter
      See Also:
    • CERTINFO_SUBJECTALTNAME

      public static final int CERTINFO_SUBJECTALTNAME
      2 5 29 18 issuerAltName
      See Also:
    • CERTINFO_ISSUERALTNAME

      public static final int CERTINFO_ISSUERALTNAME
      2 5 29 19 basicConstraints
      See Also:
    • CERTINFO_BASICCONSTRAINTS

      public static final int CERTINFO_BASICCONSTRAINTS
      -
      See Also:
    • CERTINFO_CA

      public static final int CERTINFO_CA
      cA
      See Also:
    • CERTINFO_AUTHORITY

      public static final int CERTINFO_AUTHORITY
      -
      See Also:
    • CERTINFO_PATHLENCONSTRAINT

      public static final int CERTINFO_PATHLENCONSTRAINT
      pathLenConstraint
      See Also:
    • CERTINFO_CRLNUMBER

      public static final int CERTINFO_CRLNUMBER
      2 5 29 21 cRLReason
      See Also:
    • CERTINFO_CRLREASON

      public static final int CERTINFO_CRLREASON
      2 5 29 23 holdInstructionCode
      See Also:
    • CERTINFO_HOLDINSTRUCTIONCODE

      public static final int CERTINFO_HOLDINSTRUCTIONCODE
      2 5 29 24 invalidityDate
      See Also:
    • CERTINFO_INVALIDITYDATE

      public static final int CERTINFO_INVALIDITYDATE
      2 5 29 27 deltaCRLIndicator
      See Also:
    • CERTINFO_DELTACRLINDICATOR

      public static final int CERTINFO_DELTACRLINDICATOR
      2 5 29 28 issuingDistributionPoint
      See Also:
    • CERTINFO_ISSUINGDISTRIBUTIONPOINT

      public static final int CERTINFO_ISSUINGDISTRIBUTIONPOINT
      -
      See Also:
    • CERTINFO_ISSUINGDIST_FULLNAME

      public static final int CERTINFO_ISSUINGDIST_FULLNAME
      distributionPointName.fullName
      See Also:
    • CERTINFO_ISSUINGDIST_USERCERTSONLY

      public static final int CERTINFO_ISSUINGDIST_USERCERTSONLY
      onlyContainsUserCerts
      See Also:
    • CERTINFO_ISSUINGDIST_CACERTSONLY

      public static final int CERTINFO_ISSUINGDIST_CACERTSONLY
      onlyContainsCACerts
      See Also:
    • CERTINFO_ISSUINGDIST_SOMEREASONSONLY

      public static final int CERTINFO_ISSUINGDIST_SOMEREASONSONLY
      onlySomeReasons
      See Also:
    • CERTINFO_ISSUINGDIST_INDIRECTCRL

      public static final int CERTINFO_ISSUINGDIST_INDIRECTCRL
      indirectCRL
      See Also:
    • CERTINFO_CERTIFICATEISSUER

      public static final int CERTINFO_CERTIFICATEISSUER
      2 5 29 30 nameConstraints
      See Also:
    • CERTINFO_NAMECONSTRAINTS

      public static final int CERTINFO_NAMECONSTRAINTS
      -
      See Also:
    • CERTINFO_PERMITTEDSUBTREES

      public static final int CERTINFO_PERMITTEDSUBTREES
      permittedSubtrees
      See Also:
    • CERTINFO_EXCLUDEDSUBTREES

      public static final int CERTINFO_EXCLUDEDSUBTREES
      excludedSubtrees
      See Also:
    • CERTINFO_CRLDISTRIBUTIONPOINT

      public static final int CERTINFO_CRLDISTRIBUTIONPOINT
      -
      See Also:
    • CERTINFO_CRLDIST_FULLNAME

      public static final int CERTINFO_CRLDIST_FULLNAME
      distributionPointName.fullName
      See Also:
    • CERTINFO_CRLDIST_REASONS

      public static final int CERTINFO_CRLDIST_REASONS
      reasons
      See Also:
    • CERTINFO_CRLDIST_CRLISSUER

      public static final int CERTINFO_CRLDIST_CRLISSUER
      cRLIssuer
      See Also:
    • CERTINFO_CERTIFICATEPOLICIES

      public static final int CERTINFO_CERTIFICATEPOLICIES
      -
      See Also:
    • CERTINFO_CERTPOLICYID

      public static final int CERTINFO_CERTPOLICYID
      policyInformation.policyIdentifier
      See Also:
    • CERTINFO_CERTPOLICY_CPSURI

      public static final int CERTINFO_CERTPOLICY_CPSURI
      policyInformation.policyQualifiers.qualifier.cPSuri
      See Also:
    • CERTINFO_CERTPOLICY_ORGANIZATION

      public static final int CERTINFO_CERTPOLICY_ORGANIZATION
      policyInformation.policyQualifiers.qualifier.userNotice.noticeRef.organization
      See Also:
    • CERTINFO_CERTPOLICY_NOTICENUMBERS

      public static final int CERTINFO_CERTPOLICY_NOTICENUMBERS
      policyInformation.policyQualifiers.qualifier.userNotice.noticeRef.noticeNumbers
      See Also:
    • CERTINFO_CERTPOLICY_EXPLICITTEXT

      public static final int CERTINFO_CERTPOLICY_EXPLICITTEXT
      policyInformation.policyQualifiers.qualifier.userNotice.explicitText
      See Also:
    • CERTINFO_POLICYMAPPINGS

      public static final int CERTINFO_POLICYMAPPINGS
      -
      See Also:
    • CERTINFO_ISSUERDOMAINPOLICY

      public static final int CERTINFO_ISSUERDOMAINPOLICY
      policyMappings.issuerDomainPolicy
      See Also:
    • CERTINFO_SUBJECTDOMAINPOLICY

      public static final int CERTINFO_SUBJECTDOMAINPOLICY
      policyMappings.subjectDomainPolicy
      See Also:
    • CERTINFO_AUTHORITYKEYIDENTIFIER

      public static final int CERTINFO_AUTHORITYKEYIDENTIFIER
      -
      See Also:
    • CERTINFO_AUTHORITY_KEYIDENTIFIER

      public static final int CERTINFO_AUTHORITY_KEYIDENTIFIER
      keyIdentifier
      See Also:
    • CERTINFO_AUTHORITY_CERTISSUER

      public static final int CERTINFO_AUTHORITY_CERTISSUER
      authorityCertIssuer
      See Also:
    • CERTINFO_AUTHORITY_CERTSERIALNUMBER

      public static final int CERTINFO_AUTHORITY_CERTSERIALNUMBER
      authorityCertSerialNumber
      See Also:
    • CERTINFO_POLICYCONSTRAINTS

      public static final int CERTINFO_POLICYCONSTRAINTS
      -
      See Also:
    • CERTINFO_REQUIREEXPLICITPOLICY

      public static final int CERTINFO_REQUIREEXPLICITPOLICY
      policyConstraints.requireExplicitPolicy
      See Also:
    • CERTINFO_INHIBITPOLICYMAPPING

      public static final int CERTINFO_INHIBITPOLICYMAPPING
      policyConstraints.inhibitPolicyMapping
      See Also:
    • CERTINFO_EXTKEYUSAGE

      public static final int CERTINFO_EXTKEYUSAGE
      -
      See Also:
    • CERTINFO_EXTKEY_MS_INDIVIDUALCODESIGNING

      public static final int CERTINFO_EXTKEY_MS_INDIVIDUALCODESIGNING
      individualCodeSigning
      See Also:
    • CERTINFO_EXTKEY_MS_COMMERCIALCODESIGNING

      public static final int CERTINFO_EXTKEY_MS_COMMERCIALCODESIGNING
      commercialCodeSigning
      See Also:
    • CERTINFO_EXTKEY_MS_CERTTRUSTLISTSIGNING

      public static final int CERTINFO_EXTKEY_MS_CERTTRUSTLISTSIGNING
      certTrustListSigning
      See Also:
    • CERTINFO_EXTKEY_MS_TIMESTAMPSIGNING

      public static final int CERTINFO_EXTKEY_MS_TIMESTAMPSIGNING
      timeStampSigning
      See Also:
    • CERTINFO_EXTKEY_MS_SERVERGATEDCRYPTO

      public static final int CERTINFO_EXTKEY_MS_SERVERGATEDCRYPTO
      serverGatedCrypto
      See Also:
    • CERTINFO_EXTKEY_MS_ENCRYPTEDFILESYSTEM

      public static final int CERTINFO_EXTKEY_MS_ENCRYPTEDFILESYSTEM
      encrypedFileSystem
      See Also:
    • CERTINFO_EXTKEY_SERVERAUTH

      public static final int CERTINFO_EXTKEY_SERVERAUTH
      serverAuth
      See Also:
    • CERTINFO_EXTKEY_CLIENTAUTH

      public static final int CERTINFO_EXTKEY_CLIENTAUTH
      clientAuth
      See Also:
    • CERTINFO_EXTKEY_CODESIGNING

      public static final int CERTINFO_EXTKEY_CODESIGNING
      codeSigning
      See Also:
    • CERTINFO_EXTKEY_EMAILPROTECTION

      public static final int CERTINFO_EXTKEY_EMAILPROTECTION
      emailProtection
      See Also:
    • CERTINFO_EXTKEY_IPSECENDSYSTEM

      public static final int CERTINFO_EXTKEY_IPSECENDSYSTEM
      ipsecEndSystem
      See Also:
    • CERTINFO_EXTKEY_IPSECTUNNEL

      public static final int CERTINFO_EXTKEY_IPSECTUNNEL
      ipsecTunnel
      See Also:
    • CERTINFO_EXTKEY_IPSECUSER

      public static final int CERTINFO_EXTKEY_IPSECUSER
      ipsecUser
      See Also:
    • CERTINFO_EXTKEY_TIMESTAMPING

      public static final int CERTINFO_EXTKEY_TIMESTAMPING
      timeStamping
      See Also:
    • CERTINFO_EXTKEY_OCSPSIGNING

      public static final int CERTINFO_EXTKEY_OCSPSIGNING
      ocspSigning
      See Also:
    • CERTINFO_EXTKEY_DIRECTORYSERVICE

      public static final int CERTINFO_EXTKEY_DIRECTORYSERVICE
      directoryService
      See Also:
    • CERTINFO_EXTKEY_ANYKEYUSAGE

      public static final int CERTINFO_EXTKEY_ANYKEYUSAGE
      anyExtendedKeyUsage
      See Also:
    • CERTINFO_EXTKEY_NS_SERVERGATEDCRYPTO

      public static final int CERTINFO_EXTKEY_NS_SERVERGATEDCRYPTO
      serverGatedCrypto
      See Also:
    • CERTINFO_EXTKEY_VS_SERVERGATEDCRYPTO_CA

      public static final int CERTINFO_EXTKEY_VS_SERVERGATEDCRYPTO_CA
      serverGatedCrypto CA
      See Also:
    • CERTINFO_EXTKEYUSAGE_LAST

      public static final int CERTINFO_EXTKEYUSAGE_LAST
      2 5 29 40 crlStreamIdentifier
      See Also:
    • CERTINFO_CRLSTREAMIDENTIFIER

      public static final int CERTINFO_CRLSTREAMIDENTIFIER
      2 5 29 46 freshestCRL
      See Also:
    • CERTINFO_FRESHESTCRL

      public static final int CERTINFO_FRESHESTCRL
      -
      See Also:
    • CERTINFO_FRESHESTCRL_FULLNAME

      public static final int CERTINFO_FRESHESTCRL_FULLNAME
      distributionPointName.fullName
      See Also:
    • CERTINFO_FRESHESTCRL_REASONS

      public static final int CERTINFO_FRESHESTCRL_REASONS
      reasons
      See Also:
    • CERTINFO_FRESHESTCRL_CRLISSUER

      public static final int CERTINFO_FRESHESTCRL_CRLISSUER
      cRLIssuer
      See Also:
    • CERTINFO_ORDEREDLIST

      public static final int CERTINFO_ORDEREDLIST
      2 5 29 51 baseUpdateTime
      See Also:
    • CERTINFO_BASEUPDATETIME

      public static final int CERTINFO_BASEUPDATETIME
      2 5 29 53 deltaInfo
      See Also:
    • CERTINFO_DELTAINFO

      public static final int CERTINFO_DELTAINFO
      -
      See Also:
    • CERTINFO_DELTAINFO_LOCATION

      public static final int CERTINFO_DELTAINFO_LOCATION
      deltaLocation
      See Also:
    • CERTINFO_DELTAINFO_NEXTDELTA

      public static final int CERTINFO_DELTAINFO_NEXTDELTA
      nextDelta
      See Also:
    • CERTINFO_INHIBITANYPOLICY

      public static final int CERTINFO_INHIBITANYPOLICY
      2 5 29 58 toBeRevoked
      See Also:
    • CERTINFO_TOBEREVOKED

      public static final int CERTINFO_TOBEREVOKED
      -
      See Also:
    • CERTINFO_TOBEREVOKED_CERTISSUER

      public static final int CERTINFO_TOBEREVOKED_CERTISSUER
      certificateIssuer
      See Also:
    • CERTINFO_TOBEREVOKED_REASONCODE

      public static final int CERTINFO_TOBEREVOKED_REASONCODE
      reasonCode
      See Also:
    • CERTINFO_TOBEREVOKED_REVOCATIONTIME

      public static final int CERTINFO_TOBEREVOKED_REVOCATIONTIME
      revocationTime
      See Also:
    • CERTINFO_TOBEREVOKED_CERTSERIALNUMBER

      public static final int CERTINFO_TOBEREVOKED_CERTSERIALNUMBER
      certSerialNumber
      See Also:
    • CERTINFO_REVOKEDGROUPS

      public static final int CERTINFO_REVOKEDGROUPS
      -
      See Also:
    • CERTINFO_REVOKEDGROUPS_CERTISSUER

      public static final int CERTINFO_REVOKEDGROUPS_CERTISSUER
      certificateIssuer
      See Also:
    • CERTINFO_REVOKEDGROUPS_REASONCODE

      public static final int CERTINFO_REVOKEDGROUPS_REASONCODE
      reasonCode
      See Also:
    • CERTINFO_REVOKEDGROUPS_INVALIDITYDATE

      public static final int CERTINFO_REVOKEDGROUPS_INVALIDITYDATE
      invalidityDate
      See Also:
    • CERTINFO_REVOKEDGROUPS_STARTINGNUMBER

      public static final int CERTINFO_REVOKEDGROUPS_STARTINGNUMBER
      startingNumber
      See Also:
    • CERTINFO_REVOKEDGROUPS_ENDINGNUMBER

      public static final int CERTINFO_REVOKEDGROUPS_ENDINGNUMBER
      endingNumber
      See Also:
    • CERTINFO_EXPIREDCERTSONCRL

      public static final int CERTINFO_EXPIREDCERTSONCRL
      2 5 29 63 aaIssuingDistributionPoint
      See Also:
    • CERTINFO_AAISSUINGDISTRIBUTIONPOINT

      public static final int CERTINFO_AAISSUINGDISTRIBUTIONPOINT
      -
      See Also:
    • CERTINFO_AAISSUINGDIST_FULLNAME

      public static final int CERTINFO_AAISSUINGDIST_FULLNAME
      distributionPointName.fullName
      See Also:
    • CERTINFO_AAISSUINGDIST_SOMEREASONSONLY

      public static final int CERTINFO_AAISSUINGDIST_SOMEREASONSONLY
      onlySomeReasons
      See Also:
    • CERTINFO_AAISSUINGDIST_INDIRECTCRL

      public static final int CERTINFO_AAISSUINGDIST_INDIRECTCRL
      indirectCRL
      See Also:
    • CERTINFO_AAISSUINGDIST_USERATTRCERTS

      public static final int CERTINFO_AAISSUINGDIST_USERATTRCERTS
      containsUserAttributeCerts
      See Also:
    • CERTINFO_AAISSUINGDIST_AACERTS

      public static final int CERTINFO_AAISSUINGDIST_AACERTS
      containsAACerts
      See Also:
    • CERTINFO_AAISSUINGDIST_SOACERTS

      public static final int CERTINFO_AAISSUINGDIST_SOACERTS
      containsSOAPublicKeyCerts
      See Also:
    • CERTINFO_NS_CERTTYPE

      public static final int CERTINFO_NS_CERTTYPE
      netscape-cert-type
      See Also:
    • CERTINFO_NS_BASEURL

      public static final int CERTINFO_NS_BASEURL
      netscape-base-url
      See Also:
    • CERTINFO_NS_REVOCATIONURL

      public static final int CERTINFO_NS_REVOCATIONURL
      netscape-revocation-url
      See Also:
    • CERTINFO_NS_CAREVOCATIONURL

      public static final int CERTINFO_NS_CAREVOCATIONURL
      netscape-ca-revocation-url
      See Also:
    • CERTINFO_NS_CERTRENEWALURL

      public static final int CERTINFO_NS_CERTRENEWALURL
      netscape-cert-renewal-url
      See Also:
    • CERTINFO_NS_CAPOLICYURL

      public static final int CERTINFO_NS_CAPOLICYURL
      netscape-ca-policy-url
      See Also:
    • CERTINFO_NS_SSLSERVERNAME

      public static final int CERTINFO_NS_SSLSERVERNAME
      netscape-ssl-server-name
      See Also:
    • CERTINFO_NS_COMMENT

      public static final int CERTINFO_NS_COMMENT
      netscape-comment
      See Also:
    • CERTINFO_SET_HASHEDROOTKEY

      public static final int CERTINFO_SET_HASHEDROOTKEY
      -
      See Also:
    • CERTINFO_SET_ROOTKEYTHUMBPRINT

      public static final int CERTINFO_SET_ROOTKEYTHUMBPRINT
      rootKeyThumbPrint
      See Also:
    • CERTINFO_SET_CERTIFICATETYPE

      public static final int CERTINFO_SET_CERTIFICATETYPE
      2 23 42 7 2 SET merchantData
      See Also:
    • CERTINFO_SET_MERCHANTDATA

      public static final int CERTINFO_SET_MERCHANTDATA
      -
      See Also:
    • CERTINFO_SET_MERID

      public static final int CERTINFO_SET_MERID
      merID
      See Also:
    • CERTINFO_SET_MERACQUIRERBIN

      public static final int CERTINFO_SET_MERACQUIRERBIN
      merAcquirerBIN
      See Also:
    • CERTINFO_SET_MERCHANTLANGUAGE

      public static final int CERTINFO_SET_MERCHANTLANGUAGE
      merNames.language
      See Also:
    • CERTINFO_SET_MERCHANTNAME

      public static final int CERTINFO_SET_MERCHANTNAME
      merNames.name
      See Also:
    • CERTINFO_SET_MERCHANTCITY

      public static final int CERTINFO_SET_MERCHANTCITY
      merNames.city
      See Also:
    • CERTINFO_SET_MERCHANTSTATEPROVINCE

      public static final int CERTINFO_SET_MERCHANTSTATEPROVINCE
      merNames.stateProvince
      See Also:
    • CERTINFO_SET_MERCHANTPOSTALCODE

      public static final int CERTINFO_SET_MERCHANTPOSTALCODE
      merNames.postalCode
      See Also:
    • CERTINFO_SET_MERCHANTCOUNTRYNAME

      public static final int CERTINFO_SET_MERCHANTCOUNTRYNAME
      merNames.countryName
      See Also:
    • CERTINFO_SET_MERCOUNTRY

      public static final int CERTINFO_SET_MERCOUNTRY
      merCountry
      See Also:
    • CERTINFO_SET_MERAUTHFLAG

      public static final int CERTINFO_SET_MERAUTHFLAG
      merAuthFlag
      See Also:
    • CERTINFO_SET_CERTCARDREQUIRED

      public static final int CERTINFO_SET_CERTCARDREQUIRED
      2 23 42 7 4 SET tunneling
      See Also:
    • CERTINFO_SET_TUNNELING

      public static final int CERTINFO_SET_TUNNELING
      -
      See Also:
    • CERTINFO_SET_TUNNELLING

      public static final int CERTINFO_SET_TUNNELLING
      -
      See Also:
    • CERTINFO_SET_TUNNELINGFLAG

      public static final int CERTINFO_SET_TUNNELINGFLAG
      tunneling
      See Also:
    • CERTINFO_SET_TUNNELLINGFLAG

      public static final int CERTINFO_SET_TUNNELLINGFLAG
      -
      See Also:
    • CERTINFO_SET_TUNNELINGALGID

      public static final int CERTINFO_SET_TUNNELINGALGID
      tunnelingAlgID
      See Also:
    • CERTINFO_SET_TUNNELLINGALGID

      public static final int CERTINFO_SET_TUNNELLINGALGID
      S/MIME attributes
      See Also:
    • CERTINFO_CMS_CONTENTTYPE

      public static final int CERTINFO_CMS_CONTENTTYPE
      1 2 840 113549 1 9 4 messageDigest
      See Also:
    • CERTINFO_CMS_MESSAGEDIGEST

      public static final int CERTINFO_CMS_MESSAGEDIGEST
      1 2 840 113549 1 9 5 signingTime
      See Also:
    • CERTINFO_CMS_SIGNINGTIME

      public static final int CERTINFO_CMS_SIGNINGTIME
      1 2 840 113549 1 9 6 counterSignature
      See Also:
    • CERTINFO_CMS_COUNTERSIGNATURE

      public static final int CERTINFO_CMS_COUNTERSIGNATURE
      counterSignature
      See Also:
    • CERTINFO_CMS_SIGNINGDESCRIPTION

      public static final int CERTINFO_CMS_SIGNINGDESCRIPTION
      1 2 840 113549 1 9 15 sMIMECapabilities
      See Also:
    • CERTINFO_CMS_SMIMECAPABILITIES

      public static final int CERTINFO_CMS_SMIMECAPABILITIES
      -
      See Also:
    • CERTINFO_CMS_SMIMECAP_3DES

      public static final int CERTINFO_CMS_SMIMECAP_3DES
      3DES encryption
      See Also:
    • CERTINFO_CMS_SMIMECAP_AES

      public static final int CERTINFO_CMS_SMIMECAP_AES
      AES encryption
      See Also:
    • CERTINFO_CMS_SMIMECAP_CAST128

      public static final int CERTINFO_CMS_SMIMECAP_CAST128
      CAST-128 encryption
      See Also:
    • CERTINFO_CMS_SMIMECAP_SHAng

      public static final int CERTINFO_CMS_SMIMECAP_SHAng
      SHA2-ng hash
      See Also:
    • CERTINFO_CMS_SMIMECAP_SHA2

      public static final int CERTINFO_CMS_SMIMECAP_SHA2
      SHA2-256 hash
      See Also:
    • CERTINFO_CMS_SMIMECAP_SHA1

      public static final int CERTINFO_CMS_SMIMECAP_SHA1
      SHA1 hash
      See Also:
    • CERTINFO_CMS_SMIMECAP_HMAC_SHAng

      public static final int CERTINFO_CMS_SMIMECAP_HMAC_SHAng
      HMAC-SHA2-ng MAC
      See Also:
    • CERTINFO_CMS_SMIMECAP_HMAC_SHA2

      public static final int CERTINFO_CMS_SMIMECAP_HMAC_SHA2
      HMAC-SHA2-256 MAC
      See Also:
    • CERTINFO_CMS_SMIMECAP_HMAC_SHA1

      public static final int CERTINFO_CMS_SMIMECAP_HMAC_SHA1
      HMAC-SHA1 MAC
      See Also:
    • CERTINFO_CMS_SMIMECAP_AUTHENC256

      public static final int CERTINFO_CMS_SMIMECAP_AUTHENC256
      AuthEnc w.256-bit key
      See Also:
    • CERTINFO_CMS_SMIMECAP_AUTHENC128

      public static final int CERTINFO_CMS_SMIMECAP_AUTHENC128
      AuthEnc w.128-bit key
      See Also:
    • CERTINFO_CMS_SMIMECAP_RSA_SHAng

      public static final int CERTINFO_CMS_SMIMECAP_RSA_SHAng
      RSA with SHA-ng signing
      See Also:
    • CERTINFO_CMS_SMIMECAP_RSA_SHA2

      public static final int CERTINFO_CMS_SMIMECAP_RSA_SHA2
      RSA with SHA2-256 signing
      See Also:
    • CERTINFO_CMS_SMIMECAP_RSA_SHA1

      public static final int CERTINFO_CMS_SMIMECAP_RSA_SHA1
      RSA with SHA1 signing
      See Also:
    • CERTINFO_CMS_SMIMECAP_DSA_SHA1

      public static final int CERTINFO_CMS_SMIMECAP_DSA_SHA1
      DSA with SHA-1 signing
      See Also:
    • CERTINFO_CMS_SMIMECAP_ECDSA_SHAng

      public static final int CERTINFO_CMS_SMIMECAP_ECDSA_SHAng
      ECDSA with SHA-ng signing
      See Also:
    • CERTINFO_CMS_SMIMECAP_ECDSA_SHA2

      public static final int CERTINFO_CMS_SMIMECAP_ECDSA_SHA2
      ECDSA with SHA2-256 signing
      See Also:
    • CERTINFO_CMS_SMIMECAP_ECDSA_SHA1

      public static final int CERTINFO_CMS_SMIMECAP_ECDSA_SHA1
      ECDSA with SHA-1 signing
      See Also:
    • CERTINFO_CMS_SMIMECAP_PREFERSIGNEDDATA

      public static final int CERTINFO_CMS_SMIMECAP_PREFERSIGNEDDATA
      preferSignedData
      See Also:
    • CERTINFO_CMS_SMIMECAP_CANNOTDECRYPTANY

      public static final int CERTINFO_CMS_SMIMECAP_CANNOTDECRYPTANY
      canNotDecryptAny
      See Also:
    • CERTINFO_CMS_SMIMECAP_PREFERBINARYINSIDE

      public static final int CERTINFO_CMS_SMIMECAP_PREFERBINARYINSIDE
      preferBinaryInside
      See Also:
    • CERTINFO_CMS_RECEIPTREQUEST

      public static final int CERTINFO_CMS_RECEIPTREQUEST
      -
      See Also:
    • CERTINFO_CMS_RECEIPT_CONTENTIDENTIFIER

      public static final int CERTINFO_CMS_RECEIPT_CONTENTIDENTIFIER
      contentIdentifier
      See Also:
    • CERTINFO_CMS_RECEIPT_FROM

      public static final int CERTINFO_CMS_RECEIPT_FROM
      receiptsFrom
      See Also:
    • CERTINFO_CMS_RECEIPT_TO

      public static final int CERTINFO_CMS_RECEIPT_TO
      receiptsTo
      See Also:
    • CERTINFO_CMS_SECURITYLABEL

      public static final int CERTINFO_CMS_SECURITYLABEL
      -
      See Also:
    • CERTINFO_CMS_SECLABEL_POLICY

      public static final int CERTINFO_CMS_SECLABEL_POLICY
      securityPolicyIdentifier
      See Also:
    • CERTINFO_CMS_SECLABEL_CLASSIFICATION

      public static final int CERTINFO_CMS_SECLABEL_CLASSIFICATION
      securityClassification
      See Also:
    • CERTINFO_CMS_SECLABEL_PRIVACYMARK

      public static final int CERTINFO_CMS_SECLABEL_PRIVACYMARK
      privacyMark
      See Also:
    • CERTINFO_CMS_SECLABEL_CATTYPE

      public static final int CERTINFO_CMS_SECLABEL_CATTYPE
      securityCategories.securityCategory.type
      See Also:
    • CERTINFO_CMS_SECLABEL_CATVALUE

      public static final int CERTINFO_CMS_SECLABEL_CATVALUE
      securityCategories.securityCategory.value
      See Also:
    • CERTINFO_CMS_MLEXPANSIONHISTORY

      public static final int CERTINFO_CMS_MLEXPANSIONHISTORY
      -
      See Also:
    • CERTINFO_CMS_MLEXP_ENTITYIDENTIFIER

      public static final int CERTINFO_CMS_MLEXP_ENTITYIDENTIFIER
      mlData.mailListIdentifier.issuerAndSerialNumber
      See Also:
    • CERTINFO_CMS_MLEXP_TIME

      public static final int CERTINFO_CMS_MLEXP_TIME
      mlData.expansionTime
      See Also:
    • CERTINFO_CMS_MLEXP_NONE

      public static final int CERTINFO_CMS_MLEXP_NONE
      mlData.mlReceiptPolicy.none
      See Also:
    • CERTINFO_CMS_MLEXP_INSTEADOF

      public static final int CERTINFO_CMS_MLEXP_INSTEADOF
      mlData.mlReceiptPolicy.insteadOf.generalNames.generalName
      See Also:
    • CERTINFO_CMS_MLEXP_INADDITIONTO

      public static final int CERTINFO_CMS_MLEXP_INADDITIONTO
      mlData.mlReceiptPolicy.inAdditionTo.generalNames.generalName
      See Also:
    • CERTINFO_CMS_CONTENTHINTS

      public static final int CERTINFO_CMS_CONTENTHINTS
      -
      See Also:
    • CERTINFO_CMS_CONTENTHINT_DESCRIPTION

      public static final int CERTINFO_CMS_CONTENTHINT_DESCRIPTION
      contentDescription
      See Also:
    • CERTINFO_CMS_CONTENTHINT_TYPE

      public static final int CERTINFO_CMS_CONTENTHINT_TYPE
      contentType
      See Also:
    • CERTINFO_CMS_EQUIVALENTLABEL

      public static final int CERTINFO_CMS_EQUIVALENTLABEL
      -
      See Also:
    • CERTINFO_CMS_EQVLABEL_POLICY

      public static final int CERTINFO_CMS_EQVLABEL_POLICY
      securityPolicyIdentifier
      See Also:
    • CERTINFO_CMS_EQVLABEL_CLASSIFICATION

      public static final int CERTINFO_CMS_EQVLABEL_CLASSIFICATION
      securityClassification
      See Also:
    • CERTINFO_CMS_EQVLABEL_PRIVACYMARK

      public static final int CERTINFO_CMS_EQVLABEL_PRIVACYMARK
      privacyMark
      See Also:
    • CERTINFO_CMS_EQVLABEL_CATTYPE

      public static final int CERTINFO_CMS_EQVLABEL_CATTYPE
      securityCategories.securityCategory.type
      See Also:
    • CERTINFO_CMS_EQVLABEL_CATVALUE

      public static final int CERTINFO_CMS_EQVLABEL_CATVALUE
      securityCategories.securityCategory.value
      See Also:
    • CERTINFO_CMS_SIGNINGCERTIFICATE

      public static final int CERTINFO_CMS_SIGNINGCERTIFICATE
      -
      See Also:
    • CERTINFO_CMS_SIGNINGCERT_ESSCERTID

      public static final int CERTINFO_CMS_SIGNINGCERT_ESSCERTID
      certs.essCertID
      See Also:
    • CERTINFO_CMS_SIGNINGCERT_POLICIES

      public static final int CERTINFO_CMS_SIGNINGCERT_POLICIES
      policies.policyInformation.policyIdentifier
      See Also:
    • CERTINFO_CMS_SIGNINGCERTIFICATEV2

      public static final int CERTINFO_CMS_SIGNINGCERTIFICATEV2
      -
      See Also:
    • CERTINFO_CMS_SIGNINGCERTV2_ESSCERTIDV2

      public static final int CERTINFO_CMS_SIGNINGCERTV2_ESSCERTIDV2
      certs.essCertID
      See Also:
    • CERTINFO_CMS_SIGNINGCERTV2_POLICIES

      public static final int CERTINFO_CMS_SIGNINGCERTV2_POLICIES
      policies.policyInformation.policyIdentifier
      See Also:
    • CERTINFO_CMS_SIGNATUREPOLICYID

      public static final int CERTINFO_CMS_SIGNATUREPOLICYID
      -
      See Also:
    • CERTINFO_CMS_SIGPOLICYID

      public static final int CERTINFO_CMS_SIGPOLICYID
      sigPolicyID
      See Also:
    • CERTINFO_CMS_SIGPOLICYHASH

      public static final int CERTINFO_CMS_SIGPOLICYHASH
      sigPolicyHash
      See Also:
    • CERTINFO_CMS_SIGPOLICY_CPSURI

      public static final int CERTINFO_CMS_SIGPOLICY_CPSURI
      sigPolicyQualifiers.sigPolicyQualifier.cPSuri
      See Also:
    • CERTINFO_CMS_SIGPOLICY_ORGANIZATION

      public static final int CERTINFO_CMS_SIGPOLICY_ORGANIZATION
      sigPolicyQualifiers.sigPolicyQualifier.userNotice.noticeRef.organization
      See Also:
    • CERTINFO_CMS_SIGPOLICY_NOTICENUMBERS

      public static final int CERTINFO_CMS_SIGPOLICY_NOTICENUMBERS
      sigPolicyQualifiers.sigPolicyQualifier.userNotice.noticeRef.noticeNumbers
      See Also:
    • CERTINFO_CMS_SIGPOLICY_EXPLICITTEXT

      public static final int CERTINFO_CMS_SIGPOLICY_EXPLICITTEXT
      sigPolicyQualifiers.sigPolicyQualifier.userNotice.explicitText
      See Also:
    • CERTINFO_CMS_SIGTYPEIDENTIFIER

      public static final int CERTINFO_CMS_SIGTYPEIDENTIFIER
      -
      See Also:
    • CERTINFO_CMS_SIGTYPEID_ORIGINATORSIG

      public static final int CERTINFO_CMS_SIGTYPEID_ORIGINATORSIG
      originatorSig
      See Also:
    • CERTINFO_CMS_SIGTYPEID_DOMAINSIG

      public static final int CERTINFO_CMS_SIGTYPEID_DOMAINSIG
      domainSig
      See Also:
    • CERTINFO_CMS_SIGTYPEID_ADDITIONALATTRIBUTES

      public static final int CERTINFO_CMS_SIGTYPEID_ADDITIONALATTRIBUTES
      additionalAttributesSig
      See Also:
    • CERTINFO_CMS_SIGTYPEID_REVIEWSIG

      public static final int CERTINFO_CMS_SIGTYPEID_REVIEWSIG
      reviewSig
      See Also:
    • CERTINFO_CMS_NONCE

      public static final int CERTINFO_CMS_NONCE
      randomNonce
      See Also:
    • CERTINFO_CMS_ALGORITHMPROTECTION

      public static final int CERTINFO_CMS_ALGORITHMPROTECTION
      -
      See Also:
    • CERTINFO_CMS_ALGORITHMPROTECTION_HASH

      public static final int CERTINFO_CMS_ALGORITHMPROTECTION_HASH
      Signer hash algorithm
      See Also:
    • CERTINFO_CMS_ALGORITHMPROTECTION_SIG

      public static final int CERTINFO_CMS_ALGORITHMPROTECTION_SIG
      Signer sig.algorithm
      See Also:
    • CERTINFO_CMS_ALGORITHMPROTECTION_MAC

      public static final int CERTINFO_CMS_ALGORITHMPROTECTION_MAC
      Signer MAC algorithm
      See Also:
    • CERTINFO_SCEP_MESSAGETYPE

      public static final int CERTINFO_SCEP_MESSAGETYPE
      messageType
      See Also:
    • CERTINFO_SCEP_PKISTATUS

      public static final int CERTINFO_SCEP_PKISTATUS
      pkiStatus
      See Also:
    • CERTINFO_SCEP_FAILINFO

      public static final int CERTINFO_SCEP_FAILINFO
      failInfo
      See Also:
    • CERTINFO_SCEP_SENDERNONCE

      public static final int CERTINFO_SCEP_SENDERNONCE
      senderNonce
      See Also:
    • CERTINFO_SCEP_RECIPIENTNONCE

      public static final int CERTINFO_SCEP_RECIPIENTNONCE
      recipientNonce
      See Also:
    • CERTINFO_SCEP_TRANSACTIONID

      public static final int CERTINFO_SCEP_TRANSACTIONID
      transID
      See Also:
    • CERTINFO_CMS_SPCAGENCYINFO

      public static final int CERTINFO_CMS_SPCAGENCYINFO
      -
      See Also:
    • CERTINFO_CMS_SPCAGENCYURL

      public static final int CERTINFO_CMS_SPCAGENCYURL
      spcAgencyInfo.url
      See Also:
    • CERTINFO_CMS_SPCSTATEMENTTYPE

      public static final int CERTINFO_CMS_SPCSTATEMENTTYPE
      -
      See Also:
    • CERTINFO_CMS_SPCSTMT_INDIVIDUALCODESIGNING

      public static final int CERTINFO_CMS_SPCSTMT_INDIVIDUALCODESIGNING
      individualCodeSigning
      See Also:
    • CERTINFO_CMS_SPCSTMT_COMMERCIALCODESIGNING

      public static final int CERTINFO_CMS_SPCSTMT_COMMERCIALCODESIGNING
      commercialCodeSigning
      See Also:
    • CERTINFO_CMS_SPCOPUSINFO

      public static final int CERTINFO_CMS_SPCOPUSINFO
      -
      See Also:
    • CERTINFO_CMS_SPCOPUSINFO_NAME

      public static final int CERTINFO_CMS_SPCOPUSINFO_NAME
      spcOpusInfo.name
      See Also:
    • CERTINFO_CMS_SPCOPUSINFO_URL

      public static final int CERTINFO_CMS_SPCOPUSINFO_URL
      spcOpusInfo.url
      See Also:
    • CERTINFO_LAST

      public static final int CERTINFO_LAST
      -
      See Also:
    • KEYINFO_FIRST

      public static final int KEYINFO_FIRST
      -
      See Also:
    • KEYINFO_QUERY

      public static final int KEYINFO_QUERY
      Keyset query
      See Also:
    • KEYINFO_QUERY_REQUESTS

      public static final int KEYINFO_QUERY_REQUESTS
      Query of requests in cert store
      See Also:
    • KEYINFO_LAST

      public static final int KEYINFO_LAST
      -
      See Also:
    • DEVINFO_FIRST

      public static final int DEVINFO_FIRST
      -
      See Also:
    • DEVINFO_INITIALISE

      public static final int DEVINFO_INITIALISE
      Initialise device for use
      See Also:
    • DEVINFO_INITIALIZE

      public static final int DEVINFO_INITIALIZE
      -
      See Also:
    • DEVINFO_AUTHENT_USER

      public static final int DEVINFO_AUTHENT_USER
      Authenticate user to device
      See Also:
    • DEVINFO_AUTHENT_SUPERVISOR

      public static final int DEVINFO_AUTHENT_SUPERVISOR
      Authenticate supervisor to dev.
      See Also:
    • DEVINFO_SET_AUTHENT_USER

      public static final int DEVINFO_SET_AUTHENT_USER
      Set user authent.value
      See Also:
    • DEVINFO_SET_AUTHENT_SUPERVISOR

      public static final int DEVINFO_SET_AUTHENT_SUPERVISOR
      Set supervisor auth.val.
      See Also:
    • DEVINFO_ZEROISE

      public static final int DEVINFO_ZEROISE
      Zeroise device
      See Also:
    • DEVINFO_ZEROIZE

      public static final int DEVINFO_ZEROIZE
      -
      See Also:
    • DEVINFO_LOGGEDIN

      public static final int DEVINFO_LOGGEDIN
      Whether user is logged in
      See Also:
    • DEVINFO_LABEL

      public static final int DEVINFO_LABEL
      Device/token label
      See Also:
    • DEVINFO_LAST

      public static final int DEVINFO_LAST
      -
      See Also:
    • ENVINFO_FIRST

      public static final int ENVINFO_FIRST
      -
      See Also:
    • ENVINFO_DATASIZE

      public static final int ENVINFO_DATASIZE
      Data size information
      See Also:
    • ENVINFO_COMPRESSION

      public static final int ENVINFO_COMPRESSION
      Compression information
      See Also:
    • ENVINFO_CONTENTTYPE

      public static final int ENVINFO_CONTENTTYPE
      Inner CMS content type
      See Also:
    • ENVINFO_DETACHEDSIGNATURE

      public static final int ENVINFO_DETACHEDSIGNATURE
      Detached signature
      See Also:
    • ENVINFO_SIGNATURE_RESULT

      public static final int ENVINFO_SIGNATURE_RESULT
      Signature check result
      See Also:
    • ENVINFO_INTEGRITY

      public static final int ENVINFO_INTEGRITY
      Integrity-protection level
      See Also:
    • ENVINFO_PASSWORD

      public static final int ENVINFO_PASSWORD
      User password
      See Also:
    • ENVINFO_KEY

      public static final int ENVINFO_KEY
      Conventional encryption key
      See Also:
    • ENVINFO_SIGNATURE

      public static final int ENVINFO_SIGNATURE
      Signature/signature check key
      See Also:
    • ENVINFO_SIGNATURE_EXTRADATA

      public static final int ENVINFO_SIGNATURE_EXTRADATA
      Extra information added to CMS sigs
      See Also:
    • ENVINFO_RECIPIENT

      public static final int ENVINFO_RECIPIENT
      Recipient email address
      See Also:
    • ENVINFO_PUBLICKEY

      public static final int ENVINFO_PUBLICKEY
      PKC encryption key
      See Also:
    • ENVINFO_PRIVATEKEY

      public static final int ENVINFO_PRIVATEKEY
      PKC decryption key
      See Also:
    • ENVINFO_PRIVATEKEY_LABEL

      public static final int ENVINFO_PRIVATEKEY_LABEL
      Label of PKC decryption key
      See Also:
    • ENVINFO_ORIGINATOR

      public static final int ENVINFO_ORIGINATOR
      Originator info/key
      See Also:
    • ENVINFO_SESSIONKEY

      public static final int ENVINFO_SESSIONKEY
      Session key
      See Also:
    • ENVINFO_HASH

      public static final int ENVINFO_HASH
      Hash value
      See Also:
    • ENVINFO_TIMESTAMP

      public static final int ENVINFO_TIMESTAMP
      Timestamp information
      See Also:
    • ENVINFO_KEYSET_SIGCHECK

      public static final int ENVINFO_KEYSET_SIGCHECK
      Signature check keyset
      See Also:
    • ENVINFO_KEYSET_ENCRYPT

      public static final int ENVINFO_KEYSET_ENCRYPT
      PKC encryption keyset
      See Also:
    • ENVINFO_KEYSET_DECRYPT

      public static final int ENVINFO_KEYSET_DECRYPT
      PKC decryption keyset
      See Also:
    • ENVINFO_LAST

      public static final int ENVINFO_LAST
      -
      See Also:
    • SESSINFO_FIRST

      public static final int SESSINFO_FIRST
      -
      See Also:
    • SESSINFO_ACTIVE

      public static final int SESSINFO_ACTIVE
      Whether session is active
      See Also:
    • SESSINFO_CONNECTIONACTIVE

      public static final int SESSINFO_CONNECTIONACTIVE
      Whether network connection is active
      See Also:
    • SESSINFO_USERNAME

      public static final int SESSINFO_USERNAME
      User name
      See Also:
    • SESSINFO_PASSWORD

      public static final int SESSINFO_PASSWORD
      Password
      See Also:
    • SESSINFO_AUTHTOKEN

      public static final int SESSINFO_AUTHTOKEN
      Authentication token, e.g. TOTP
      See Also:
    • SESSINFO_PRIVATEKEY

      public static final int SESSINFO_PRIVATEKEY
      Server/client private key
      See Also:
    • SESSINFO_KEYSET

      public static final int SESSINFO_KEYSET
      Certificate store
      See Also:
    • SESSINFO_AUTHRESPONSE

      public static final int SESSINFO_AUTHRESPONSE
      Session authorisation OK
      See Also:
    • SESSINFO_SERVER_NAME

      public static final int SESSINFO_SERVER_NAME
      Server name
      See Also:
    • SESSINFO_SERVER_PORT

      public static final int SESSINFO_SERVER_PORT
      Server port number
      See Also:
    • SESSINFO_SERVER_FINGERPRINT_SHA2

      public static final int SESSINFO_SERVER_FINGERPRINT_SHA2
      Server key fingerprint
      See Also:
    • SESSINFO_CLIENT_NAME

      public static final int SESSINFO_CLIENT_NAME
      Client name
      See Also:
    • SESSINFO_CLIENT_PORT

      public static final int SESSINFO_CLIENT_PORT
      Client port number
      See Also:
    • SESSINFO_SESSION

      public static final int SESSINFO_SESSION
      Transport mechanism
      See Also:
    • SESSINFO_NETWORKSOCKET

      public static final int SESSINFO_NETWORKSOCKET
      User-supplied network socket
      See Also:
    • SESSINFO_VERSION

      public static final int SESSINFO_VERSION
      Protocol version
      See Also:
    • SESSINFO_REQUEST

      public static final int SESSINFO_REQUEST
      Cert.request object
      See Also:
    • SESSINFO_RESPONSE

      public static final int SESSINFO_RESPONSE
      Cert.response object
      See Also:
    • SESSINFO_CACERTIFICATE

      public static final int SESSINFO_CACERTIFICATE
      Issuing CA certificate
      See Also:
    • SESSINFO_CMP_REQUESTTYPE

      public static final int SESSINFO_CMP_REQUESTTYPE
      Request type
      See Also:
    • SESSINFO_CMP_PRIVKEYSET

      public static final int SESSINFO_CMP_PRIVKEYSET
      Private-key keyset
      See Also:
    • SESSINFO_CMP_OPTIONS

      public static final int SESSINFO_CMP_OPTIONS
      CMP protocol options
      See Also:
    • SESSINFO_SSH_CHANNEL

      public static final int SESSINFO_SSH_CHANNEL
      SSH current channel
      See Also:
    • SESSINFO_SSH_CHANNEL_TYPE

      public static final int SESSINFO_SSH_CHANNEL_TYPE
      SSH channel type
      See Also:
    • SESSINFO_SSH_CHANNEL_ARG1

      public static final int SESSINFO_SSH_CHANNEL_ARG1
      SSH channel argument 1
      See Also:
    • SESSINFO_SSH_CHANNEL_ARG2

      public static final int SESSINFO_SSH_CHANNEL_ARG2
      SSH channel argument 2
      See Also:
    • SESSINFO_SSH_CHANNEL_ACTIVE

      public static final int SESSINFO_SSH_CHANNEL_ACTIVE
      SSH channel active
      See Also:
    • SESSINFO_SSH_PREAUTH

      public static final int SESSINFO_SSH_PREAUTH
      SSH pre-authentication value
      See Also:
    • SESSINFO_TLS_OPTIONS

      public static final int SESSINFO_TLS_OPTIONS
      SSL/TLS protocol options
      See Also:
    • SESSINFO_SSL_OPTIONS

      public static final int SESSINFO_SSL_OPTIONS
      -
      See Also:
    • SESSINFO_TLS_SUBPROTOCOL

      public static final int SESSINFO_TLS_SUBPROTOCOL
      SSL/TLS additional sub-protocol
      See Also:
    • SESSINFO_TLS_WSPROTOCOL

      public static final int SESSINFO_TLS_WSPROTOCOL
      SSL/TLS WebSockets sub-protocol
      See Also:
    • SESSINFO_TLS_EAPCHALLENGE

      public static final int SESSINFO_TLS_EAPCHALLENGE
      TLS EAP challenge
      See Also:
    • SESSINFO_TLS_EAPKEY

      public static final int SESSINFO_TLS_EAPKEY
      TLS EAP key
      See Also:
    • SESSINFO_TLS_EAPDATA

      public static final int SESSINFO_TLS_EAPDATA
      TLS EAP additional data
      See Also:
    • SESSINFO_TSP_MSGIMPRINT

      public static final int SESSINFO_TSP_MSGIMPRINT
      TSP message imprint
      See Also:
    • SESSINFO_LAST

      public static final int SESSINFO_LAST
      -
      See Also:
    • USERINFO_FIRST

      public static final int USERINFO_FIRST
      -
      See Also:
    • USERINFO_PASSWORD

      public static final int USERINFO_PASSWORD
      Password
      See Also:
    • USERINFO_CAKEY_CERTSIGN

      public static final int USERINFO_CAKEY_CERTSIGN
      CA cert signing key
      See Also:
    • USERINFO_CAKEY_CRLSIGN

      public static final int USERINFO_CAKEY_CRLSIGN
      CA CRL signing key
      See Also:
    • USERINFO_CAKEY_RTCSSIGN

      public static final int USERINFO_CAKEY_RTCSSIGN
      CA RTCS signing key
      See Also:
    • USERINFO_CAKEY_OCSPSIGN

      public static final int USERINFO_CAKEY_OCSPSIGN
      CA OCSP signing key
      See Also:
    • USERINFO_LAST

      public static final int USERINFO_LAST
      -
      See Also:
    • ATTRIBUTE_LAST

      public static final int ATTRIBUTE_LAST
      -
      See Also:
    • KEYUSAGE_NONE

      public static final int KEYUSAGE_NONE
      -
      See Also:
    • KEYUSAGE_DIGITALSIGNATURE

      public static final int KEYUSAGE_DIGITALSIGNATURE
      -
      See Also:
    • KEYUSAGE_NONREPUDIATION

      public static final int KEYUSAGE_NONREPUDIATION
      -
      See Also:
    • KEYUSAGE_KEYENCIPHERMENT

      public static final int KEYUSAGE_KEYENCIPHERMENT
      -
      See Also:
    • KEYUSAGE_DATAENCIPHERMENT

      public static final int KEYUSAGE_DATAENCIPHERMENT
      -
      See Also:
    • KEYUSAGE_KEYAGREEMENT

      public static final int KEYUSAGE_KEYAGREEMENT
      -
      See Also:
    • KEYUSAGE_KEYCERTSIGN

      public static final int KEYUSAGE_KEYCERTSIGN
      -
      See Also:
    • KEYUSAGE_CRLSIGN

      public static final int KEYUSAGE_CRLSIGN
      -
      See Also:
    • KEYUSAGE_ENCIPHERONLY

      public static final int KEYUSAGE_ENCIPHERONLY
      -
      See Also:
    • KEYUSAGE_DECIPHERONLY

      public static final int KEYUSAGE_DECIPHERONLY
      -
      See Also:
    • KEYUSAGE_LAST

      public static final int KEYUSAGE_LAST
      Last possible value
      See Also:
    • CRLREASON_UNSPECIFIED

      public static final int CRLREASON_UNSPECIFIED
      See Also:
    • CRLREASON_KEYCOMPROMISE

      public static final int CRLREASON_KEYCOMPROMISE
      See Also:
    • CRLREASON_CACOMPROMISE

      public static final int CRLREASON_CACOMPROMISE
      See Also:
    • CRLREASON_AFFILIATIONCHANGED

      public static final int CRLREASON_AFFILIATIONCHANGED
      See Also:
    • CRLREASON_SUPERSEDED

      public static final int CRLREASON_SUPERSEDED
      See Also:
    • CRLREASON_CESSATIONOFOPERATION

      public static final int CRLREASON_CESSATIONOFOPERATION
      See Also:
    • CRLREASON_CERTIFICATEHOLD

      public static final int CRLREASON_CERTIFICATEHOLD
      See Also:
    • CRLREASON_REMOVEFROMCRL

      public static final int CRLREASON_REMOVEFROMCRL
      See Also:
    • CRLREASON_PRIVILEGEWITHDRAWN

      public static final int CRLREASON_PRIVILEGEWITHDRAWN
      See Also:
    • CRLREASON_AACOMPROMISE

      public static final int CRLREASON_AACOMPROMISE
      See Also:
    • CRLREASON_LAST

      public static final int CRLREASON_LAST
      End of standard CRL reasons
      See Also:
    • CRLREASON_NEVERVALID

      public static final int CRLREASON_NEVERVALID
      See Also:
    • CRLEXTREASON_LAST

      public static final int CRLEXTREASON_LAST
      See Also:
    • CRLREASONFLAG_UNUSED

      public static final int CRLREASONFLAG_UNUSED
      -
      See Also:
    • CRLREASONFLAG_KEYCOMPROMISE

      public static final int CRLREASONFLAG_KEYCOMPROMISE
      -
      See Also:
    • CRLREASONFLAG_CACOMPROMISE

      public static final int CRLREASONFLAG_CACOMPROMISE
      -
      See Also:
    • CRLREASONFLAG_AFFILIATIONCHANGED

      public static final int CRLREASONFLAG_AFFILIATIONCHANGED
      -
      See Also:
    • CRLREASONFLAG_SUPERSEDED

      public static final int CRLREASONFLAG_SUPERSEDED
      -
      See Also:
    • CRLREASONFLAG_CESSATIONOFOPERATION

      public static final int CRLREASONFLAG_CESSATIONOFOPERATION
      -
      See Also:
    • CRLREASONFLAG_CERTIFICATEHOLD

      public static final int CRLREASONFLAG_CERTIFICATEHOLD
      -
      See Also:
    • CRLREASONFLAG_LAST

      public static final int CRLREASONFLAG_LAST
      Last poss.value
      See Also:
    • HOLDINSTRUCTION_NONE

      public static final int HOLDINSTRUCTION_NONE
      See Also:
    • HOLDINSTRUCTION_CALLISSUER

      public static final int HOLDINSTRUCTION_CALLISSUER
      See Also:
    • HOLDINSTRUCTION_REJECT

      public static final int HOLDINSTRUCTION_REJECT
      See Also:
    • HOLDINSTRUCTION_PICKUPTOKEN

      public static final int HOLDINSTRUCTION_PICKUPTOKEN
      See Also:
    • HOLDINSTRUCTION_LAST

      public static final int HOLDINSTRUCTION_LAST
      See Also:
    • COMPLIANCELEVEL_OBLIVIOUS

      public static final int COMPLIANCELEVEL_OBLIVIOUS
      -
      See Also:
    • COMPLIANCELEVEL_REDUCED

      public static final int COMPLIANCELEVEL_REDUCED
      -
      See Also:
    • COMPLIANCELEVEL_STANDARD

      public static final int COMPLIANCELEVEL_STANDARD
      -
      See Also:
    • COMPLIANCELEVEL_PKIX_PARTIAL

      public static final int COMPLIANCELEVEL_PKIX_PARTIAL
      -
      See Also:
    • COMPLIANCELEVEL_PKIX_FULL

      public static final int COMPLIANCELEVEL_PKIX_FULL
      -
      See Also:
    • COMPLIANCELEVEL_LAST

      public static final int COMPLIANCELEVEL_LAST
      -
      See Also:
    • NS_CERTTYPE_SSLCLIENT

      public static final int NS_CERTTYPE_SSLCLIENT
      -
      See Also:
    • NS_CERTTYPE_SSLSERVER

      public static final int NS_CERTTYPE_SSLSERVER
      -
      See Also:
    • NS_CERTTYPE_SMIME

      public static final int NS_CERTTYPE_SMIME
      -
      See Also:
    • NS_CERTTYPE_OBJECTSIGNING

      public static final int NS_CERTTYPE_OBJECTSIGNING
      -
      See Also:
    • NS_CERTTYPE_RESERVED

      public static final int NS_CERTTYPE_RESERVED
      -
      See Also:
    • NS_CERTTYPE_SSLCA

      public static final int NS_CERTTYPE_SSLCA
      -
      See Also:
    • NS_CERTTYPE_SMIMECA

      public static final int NS_CERTTYPE_SMIMECA
      -
      See Also:
    • NS_CERTTYPE_OBJECTSIGNINGCA

      public static final int NS_CERTTYPE_OBJECTSIGNINGCA
      -
      See Also:
    • NS_CERTTYPE_LAST

      public static final int NS_CERTTYPE_LAST
      Last possible value
      See Also:
    • SET_CERTTYPE_CARD

      public static final int SET_CERTTYPE_CARD
      -
      See Also:
    • SET_CERTTYPE_MER

      public static final int SET_CERTTYPE_MER
      -
      See Also:
    • SET_CERTTYPE_PGWY

      public static final int SET_CERTTYPE_PGWY
      -
      See Also:
    • SET_CERTTYPE_CCA

      public static final int SET_CERTTYPE_CCA
      -
      See Also:
    • SET_CERTTYPE_MCA

      public static final int SET_CERTTYPE_MCA
      -
      See Also:
    • SET_CERTTYPE_PCA

      public static final int SET_CERTTYPE_PCA
      -
      See Also:
    • SET_CERTTYPE_GCA

      public static final int SET_CERTTYPE_GCA
      -
      See Also:
    • SET_CERTTYPE_BCA

      public static final int SET_CERTTYPE_BCA
      -
      See Also:
    • SET_CERTTYPE_RCA

      public static final int SET_CERTTYPE_RCA
      -
      See Also:
    • SET_CERTTYPE_ACQ

      public static final int SET_CERTTYPE_ACQ
      -
      See Also:
    • SET_CERTTYPE_LAST

      public static final int SET_CERTTYPE_LAST
      Last possible value
      See Also:
    • CONTENT_NONE

      public static final int CONTENT_NONE
      -
      See Also:
    • CONTENT_DATA

      public static final int CONTENT_DATA
      -
      See Also:
    • CONTENT_SIGNEDDATA

      public static final int CONTENT_SIGNEDDATA
      -
      See Also:
    • CONTENT_ENVELOPEDDATA

      public static final int CONTENT_ENVELOPEDDATA
      -
      See Also:
    • CONTENT_SIGNEDANDENVELOPEDDATA

      public static final int CONTENT_SIGNEDANDENVELOPEDDATA
      -
      See Also:
    • CONTENT_DIGESTEDDATA

      public static final int CONTENT_DIGESTEDDATA
      -
      See Also:
    • CONTENT_ENCRYPTEDDATA

      public static final int CONTENT_ENCRYPTEDDATA
      -
      See Also:
    • CONTENT_COMPRESSEDDATA

      public static final int CONTENT_COMPRESSEDDATA
      -
      See Also:
    • CONTENT_AUTHDATA

      public static final int CONTENT_AUTHDATA
      -
      See Also:
    • CONTENT_AUTHENVDATA

      public static final int CONTENT_AUTHENVDATA
      -
      See Also:
    • CONTENT_TSTINFO

      public static final int CONTENT_TSTINFO
      -
      See Also:
    • CONTENT_SPCINDIRECTDATACONTEXT

      public static final int CONTENT_SPCINDIRECTDATACONTEXT
      -
      See Also:
    • CONTENT_RTCSREQUEST

      public static final int CONTENT_RTCSREQUEST
      -
      See Also:
    • CONTENT_RTCSRESPONSE

      public static final int CONTENT_RTCSRESPONSE
      -
      See Also:
    • CONTENT_RTCSRESPONSE_EXT

      public static final int CONTENT_RTCSRESPONSE_EXT
      -
      See Also:
    • CONTENT_SCVPCERTVALREQUEST

      public static final int CONTENT_SCVPCERTVALREQUEST
      -
      See Also:
    • CONTENT_SCVPCERTVALRESPONSE

      public static final int CONTENT_SCVPCERTVALRESPONSE
      -
      See Also:
    • CONTENT_SCVPVALPOLREQUEST

      public static final int CONTENT_SCVPVALPOLREQUEST
      -
      See Also:
    • CONTENT_SCVPVALPOLRESPONSE

      public static final int CONTENT_SCVPVALPOLRESPONSE
      -
      See Also:
    • CONTENT_MRTD

      public static final int CONTENT_MRTD
      -
      See Also:
    • CONTENT_LAST

      public static final int CONTENT_LAST
      -
      See Also:
    • CLASSIFICATION_UNMARKED

      public static final int CLASSIFICATION_UNMARKED
      See Also:
    • CLASSIFICATION_UNCLASSIFIED

      public static final int CLASSIFICATION_UNCLASSIFIED
      See Also:
    • CLASSIFICATION_RESTRICTED

      public static final int CLASSIFICATION_RESTRICTED
      See Also:
    • CLASSIFICATION_CONFIDENTIAL

      public static final int CLASSIFICATION_CONFIDENTIAL
      See Also:
    • CLASSIFICATION_SECRET

      public static final int CLASSIFICATION_SECRET
      See Also:
    • CLASSIFICATION_TOP_SECRET

      public static final int CLASSIFICATION_TOP_SECRET
      See Also:
    • CLASSIFICATION_LAST

      public static final int CLASSIFICATION_LAST
      See Also:
    • CERTSTATUS_NONE

      public static final int CERTSTATUS_NONE
      No certificate status
      See Also:
    • CERTSTATUS_VALID

      public static final int CERTSTATUS_VALID
      Certificate valid
      See Also:
    • CERTSTATUS_NOTVALID

      public static final int CERTSTATUS_NOTVALID
      Certificate isn't valid
      See Also:
    • CERTSTATUS_NONAUTHORITATIVE

      public static final int CERTSTATUS_NONAUTHORITATIVE
      Response is non-authoritative
      See Also:
    • CERTSTATUS_UNKNOWN

      public static final int CERTSTATUS_UNKNOWN
      Certificate status unknown
      See Also:
    • CERTSTATUS_LAST

      public static final int CERTSTATUS_LAST
      Last possible certificate status
      See Also:
    • OCSPSTATUS_NOTREVOKED

      public static final int OCSPSTATUS_NOTREVOKED
      See Also:
    • OCSPSTATUS_REVOKED

      public static final int OCSPSTATUS_REVOKED
      See Also:
    • OCSPSTATUS_UNKNOWN

      public static final int OCSPSTATUS_UNKNOWN
      See Also:
    • SIGNATURELEVEL_NONE

      public static final int SIGNATURELEVEL_NONE
      Include only signature
      See Also:
    • SIGNATURELEVEL_SIGNERCERT

      public static final int SIGNATURELEVEL_SIGNERCERT
      Include signer cert
      See Also:
    • SIGNATURELEVEL_ALL

      public static final int SIGNATURELEVEL_ALL
      Include all relevant info
      See Also:
    • SIGNATURELEVEL_LAST

      public static final int SIGNATURELEVEL_LAST
      Last possible sig.level type
      See Also:
    • INTEGRITY_NONE

      public static final int INTEGRITY_NONE
      No integrity protection
      See Also:
    • INTEGRITY_MACONLY

      public static final int INTEGRITY_MACONLY
      MAC only, no encryption
      See Also:
    • INTEGRITY_FULL

      public static final int INTEGRITY_FULL
      Encryption + ingerity protection
      See Also:
    • CERTFORMAT_NONE

      public static final int CERTFORMAT_NONE
      No certificate format
      See Also:
    • CERTFORMAT_CERTIFICATE

      public static final int CERTFORMAT_CERTIFICATE
      DER-encoded certificate
      See Also:
    • CERTFORMAT_CERTCHAIN

      public static final int CERTFORMAT_CERTCHAIN
      PKCS #7 certificate chain
      See Also:
    • CERTFORMAT_TEXT_CERTIFICATE

      public static final int CERTFORMAT_TEXT_CERTIFICATE
      base-64 wrapped cert
      See Also:
    • CERTFORMAT_TEXT_CERTCHAIN

      public static final int CERTFORMAT_TEXT_CERTCHAIN
      base-64 wrapped cert chain
      See Also:
    • CERTFORMAT_XML_CERTIFICATE

      public static final int CERTFORMAT_XML_CERTIFICATE
      XML wrapped cert
      See Also:
    • CERTFORMAT_XML_CERTCHAIN

      public static final int CERTFORMAT_XML_CERTCHAIN
      XML wrapped cert chain
      See Also:
    • CERTFORMAT_LAST

      public static final int CERTFORMAT_LAST
      Last possible cert.format type
      See Also:
    • REQUESTTYPE_NONE

      public static final int REQUESTTYPE_NONE
      No request type
      See Also:
    • REQUESTTYPE_INITIALISATION

      public static final int REQUESTTYPE_INITIALISATION
      Initialisation request
      See Also:
    • REQUESTTYPE_INITIALIZATION

      public static final int REQUESTTYPE_INITIALIZATION
      -
      See Also:
    • REQUESTTYPE_CERTIFICATE

      public static final int REQUESTTYPE_CERTIFICATE
      Certification request
      See Also:
    • REQUESTTYPE_KEYUPDATE

      public static final int REQUESTTYPE_KEYUPDATE
      Key update request
      See Also:
    • REQUESTTYPE_REVOCATION

      public static final int REQUESTTYPE_REVOCATION
      Cert revocation request
      See Also:
    • REQUESTTYPE_PKIBOOT

      public static final int REQUESTTYPE_PKIBOOT
      PKIBoot request
      See Also:
    • REQUESTTYPE_LAST

      public static final int REQUESTTYPE_LAST
      Last possible request type
      See Also:
    • KEYID_NONE

      public static final int KEYID_NONE
      No key ID type
      See Also:
    • KEYID_NAME

      public static final int KEYID_NAME
      Key owner name
      See Also:
    • KEYID_URI

      public static final int KEYID_URI
      Key owner URI
      See Also:
    • KEYID_EMAIL

      public static final int KEYID_EMAIL
      Synonym: owner email addr.
      See Also:
    • KEYID_LAST

      public static final int KEYID_LAST
      Last possible key ID type
      See Also:
    • OBJECT_NONE

      public static final int OBJECT_NONE
      No object type
      See Also:
    • OBJECT_ENCRYPTED_KEY

      public static final int OBJECT_ENCRYPTED_KEY
      Conventionally encrypted key
      See Also:
    • OBJECT_PKCENCRYPTED_KEY

      public static final int OBJECT_PKCENCRYPTED_KEY
      PKC-encrypted key
      See Also:
    • OBJECT_KEYAGREEMENT

      public static final int OBJECT_KEYAGREEMENT
      Key agreement information
      See Also:
    • OBJECT_SIGNATURE

      public static final int OBJECT_SIGNATURE
      Signature
      See Also:
    • OBJECT_LAST

      public static final int OBJECT_LAST
      Last possible object type
      See Also:
    • ERRTYPE_NONE

      public static final int ERRTYPE_NONE
      No error information
      See Also:
    • ERRTYPE_ATTR_SIZE

      public static final int ERRTYPE_ATTR_SIZE
      Attribute data too small or large
      See Also:
    • ERRTYPE_ATTR_VALUE

      public static final int ERRTYPE_ATTR_VALUE
      Attribute value is invalid
      See Also:
    • ERRTYPE_ATTR_ABSENT

      public static final int ERRTYPE_ATTR_ABSENT
      Required attribute missing
      See Also:
    • ERRTYPE_ATTR_PRESENT

      public static final int ERRTYPE_ATTR_PRESENT
      Non-allowed attribute present
      See Also:
    • ERRTYPE_CONSTRAINT

      public static final int ERRTYPE_CONSTRAINT
      Cert: Constraint violation in object
      See Also:
    • ERRTYPE_ISSUERCONSTRAINT

      public static final int ERRTYPE_ISSUERCONSTRAINT
      Cert: Constraint viol.in issuing cert
      See Also:
    • ERRTYPE_LAST

      public static final int ERRTYPE_LAST
      Last possible error info type
      See Also:
    • CERTACTION_NONE

      public static final int CERTACTION_NONE
      No cert management action
      See Also:
    • CERTACTION_CREATE

      public static final int CERTACTION_CREATE
      Create cert store
      See Also:
    • CERTACTION_CONNECT

      public static final int CERTACTION_CONNECT
      Connect to cert store
      See Also:
    • CERTACTION_DISCONNECT

      public static final int CERTACTION_DISCONNECT
      Disconnect from cert store
      See Also:
    • CERTACTION_ERROR

      public static final int CERTACTION_ERROR
      Error information
      See Also:
    • CERTACTION_ADDUSER

      public static final int CERTACTION_ADDUSER
      Add PKI user
      See Also:
    • CERTACTION_DELETEUSER

      public static final int CERTACTION_DELETEUSER
      Delete PKI user
      See Also:
    • CERTACTION_REQUEST_CERT

      public static final int CERTACTION_REQUEST_CERT
      Cert request
      See Also:
    • CERTACTION_REQUEST_RENEWAL

      public static final int CERTACTION_REQUEST_RENEWAL
      Cert renewal request
      See Also:
    • CERTACTION_REQUEST_REVOCATION

      public static final int CERTACTION_REQUEST_REVOCATION
      Cert revocation request
      See Also:
    • CERTACTION_CERT_CREATION

      public static final int CERTACTION_CERT_CREATION
      Cert creation
      See Also:
    • CERTACTION_CERT_CREATION_COMPLETE

      public static final int CERTACTION_CERT_CREATION_COMPLETE
      Confirmation of cert creation
      See Also:
    • CERTACTION_CERT_CREATION_DROP

      public static final int CERTACTION_CERT_CREATION_DROP
      Cancellation of cert creation
      See Also:
    • CERTACTION_CERT_CREATION_REVERSE

      public static final int CERTACTION_CERT_CREATION_REVERSE
      Cancel of creation w.revocation
      See Also:
    • CERTACTION_RESTART_CLEANUP

      public static final int CERTACTION_RESTART_CLEANUP
      Delete reqs after restart
      See Also:
    • CERTACTION_RESTART_REVOKE_CERT

      public static final int CERTACTION_RESTART_REVOKE_CERT
      Complete revocation after restart
      See Also:
    • CERTACTION_ISSUE_CERT

      public static final int CERTACTION_ISSUE_CERT
      Cert issue
      See Also:
    • CERTACTION_ISSUE_CRL

      public static final int CERTACTION_ISSUE_CRL
      CRL issue
      See Also:
    • CERTACTION_REVOKE_CERT

      public static final int CERTACTION_REVOKE_CERT
      Cert revocation
      See Also:
    • CERTACTION_EXPIRE_CERT

      public static final int CERTACTION_EXPIRE_CERT
      Cert expiry
      See Also:
    • CERTACTION_CLEANUP

      public static final int CERTACTION_CLEANUP
      Clean up on restart
      See Also:
    • CERTACTION_LAST

      public static final int CERTACTION_LAST
      Last possible cert store log action
      See Also:
    • SUBPROTOCOL_NONE

      public static final int SUBPROTOCOL_NONE
      No sub-protocol type
      See Also:
    • SUBPROTOCOL_WEBSOCKETS

      public static final int SUBPROTOCOL_WEBSOCKETS
      Websockets
      See Also:
    • SUBPROTOCOL_EAPTTLS

      public static final int SUBPROTOCOL_EAPTTLS
      EAP-TTLS
      See Also:
    • SUBPROTOCOL_PEAP

      public static final int SUBPROTOCOL_PEAP
      PEAP
      See Also:
    • SUBPROTOCOL_LAST

      public static final int SUBPROTOCOL_LAST
      Last possible sub-protocol type
      See Also:
    • CMPOPTION_NONE

      public static final int CMPOPTION_NONE
      -
      See Also:
    • CMPOPTION_3GPP

      public static final int CMPOPTION_3GPP
      Peer is following 33.310
      See Also:
    • TLSOPTION_NONE

      public static final int TLSOPTION_NONE
      -
      See Also:
    • TLSOPTION_MINVER_SSLV3

      public static final int TLSOPTION_MINVER_SSLV3
      Min.protocol version
      See Also:
    • TLSOPTION_MINVER_TLS10

      public static final int TLSOPTION_MINVER_TLS10
      -
      See Also:
    • TLSOPTION_MINVER_TLS11

      public static final int TLSOPTION_MINVER_TLS11
      -
      See Also:
    • TLSOPTION_MINVER_TLS12

      public static final int TLSOPTION_MINVER_TLS12
      -
      See Also:
    • TLSOPTION_MINVER_TLS13

      public static final int TLSOPTION_MINVER_TLS13
      -
      See Also:
    • TLSOPTION_MANUAL_CERTCHECK

      public static final int TLSOPTION_MANUAL_CERTCHECK
      Require manual cert.verif.
      See Also:
    • TLSOPTION_DISABLE_NAMEVERIFY

      public static final int TLSOPTION_DISABLE_NAMEVERIFY
      Disable cert hostname check
      See Also:
    • TLSOPTION_DISABLE_CERTVERIFY

      public static final int TLSOPTION_DISABLE_CERTVERIFY
      Disable certificate check
      See Also:
    • TLSOPTION_SERVER_SNI

      public static final int TLSOPTION_SERVER_SNI
      Enable SNI-based key selection
      See Also:
    • TLSOPTION_RESUMED

      public static final int TLSOPTION_RESUMED
      TLS session is resumed
      See Also:
    • MAX_KEYSIZE

      public static final int MAX_KEYSIZE
      -
      See Also:
    • MAX_IVSIZE

      public static final int MAX_IVSIZE
      -
      See Also:
    • MAX_PKCSIZE_ECC

      public static final int MAX_PKCSIZE_ECC
      -
      See Also:
    • MAX_PKCSIZE_PQC

      public static final int MAX_PKCSIZE_PQC
      -
      See Also:
    • MAX_HASHSIZE

      public static final int MAX_HASHSIZE
      -
      See Also:
    • MAX_TEXTSIZE

      public static final int MAX_TEXTSIZE
      -
      See Also:
    • USE_DEFAULT

      public static final int USE_DEFAULT
      -
      See Also:
    • UNUSED

      public static final int UNUSED
      -
      See Also:
    • CURSOR_FIRST

      public static final int CURSOR_FIRST
      -
      See Also:
    • CURSOR_PREVIOUS

      public static final int CURSOR_PREVIOUS
      -
      See Also:
    • CURSOR_NEXT

      public static final int CURSOR_NEXT
      -
      See Also:
    • CURSOR_LAST

      public static final int CURSOR_LAST
      -
      See Also:
    • RANDOM_FASTPOLL

      public static final int RANDOM_FASTPOLL
      -
      See Also:
    • RANDOM_SLOWPOLL

      public static final int RANDOM_SLOWPOLL
      -
      See Also:
    • KEYTYPE_PRIVATE

      public static final int KEYTYPE_PRIVATE
      -
      See Also:
    • KEYTYPE_PUBLIC

      public static final int KEYTYPE_PUBLIC
      -
      See Also:
    • KEYOPT_NONE

      public static final int KEYOPT_NONE
      No options
      See Also:
    • KEYOPT_READONLY

      public static final int KEYOPT_READONLY
      Open keyset in read-only mode
      See Also:
    • KEYOPT_CREATE

      public static final int KEYOPT_CREATE
      Create a new keyset
      See Also:
    • KEYOPT_LAST

      public static final int KEYOPT_LAST
      Last possible key option type
      See Also:
    • ECCCURVE_NONE

      public static final int ECCCURVE_NONE
      No ECC curve type
      See Also:
    • ECCCURVE_P256

      public static final int ECCCURVE_P256
      NIST P256/X9.62 P256v1/SECG p256r1 curve
      See Also:
    • ECCCURVE_P384

      public static final int ECCCURVE_P384
      NIST P384, SECG p384r1 curve
      See Also:
    • ECCCURVE_P521

      public static final int ECCCURVE_P521
      NIST P521, SECG p521r1
      See Also:
    • ECCCURVE_BRAINPOOL_P256

      public static final int ECCCURVE_BRAINPOOL_P256
      Brainpool p256r1
      See Also:
    • ECCCURVE_BRAINPOOL_P384

      public static final int ECCCURVE_BRAINPOOL_P384
      Brainpool p384r1
      See Also:
    • ECCCURVE_BRAINPOOL_P512

      public static final int ECCCURVE_BRAINPOOL_P512
      Brainpool p512r1
      See Also:
    • ECCCURVE_25519

      public static final int ECCCURVE_25519
      X25519/Ed25519
      See Also:
    • ECCCURVE_448

      public static final int ECCCURVE_448
      X448/Ed448
      See Also:
    • ECCCURVE_LAST

      public static final int ECCCURVE_LAST
      Last valid ECC curve type
      See Also:
    • OK

      public static final int OK
      No error
      See Also:
    • ERROR_PARAM1

      public static final int ERROR_PARAM1
      Bad argument, parameter 1
      See Also:
    • ERROR_PARAM2

      public static final int ERROR_PARAM2
      Bad argument, parameter 2
      See Also:
    • ERROR_PARAM3

      public static final int ERROR_PARAM3
      Bad argument, parameter 3
      See Also:
    • ERROR_PARAM4

      public static final int ERROR_PARAM4
      Bad argument, parameter 4
      See Also:
    • ERROR_PARAM5

      public static final int ERROR_PARAM5
      Bad argument, parameter 5
      See Also:
    • ERROR_PARAM6

      public static final int ERROR_PARAM6
      Bad argument, parameter 6
      See Also:
    • ERROR_PARAM7

      public static final int ERROR_PARAM7
      Bad argument, parameter 7
      See Also:
    • ERROR_MEMORY

      public static final int ERROR_MEMORY
      Out of memory
      See Also:
    • ERROR_NOTINITED

      public static final int ERROR_NOTINITED
      Data has not been initialised
      See Also:
    • ERROR_INITED

      public static final int ERROR_INITED
      Data has already been init'd
      See Also:
    • ERROR_NOSECURE

      public static final int ERROR_NOSECURE
      Opn.not avail.at requested sec.level
      See Also:
    • ERROR_RANDOM

      public static final int ERROR_RANDOM
      No reliable random data available
      See Also:
    • ERROR_FAILED

      public static final int ERROR_FAILED
      Operation failed
      See Also:
    • ERROR_INTERNAL

      public static final int ERROR_INTERNAL
      Internal consistency check failed
      See Also:
    • ERROR_NOTAVAIL

      public static final int ERROR_NOTAVAIL
      This type of opn.not available
      See Also:
    • ERROR_PERMISSION

      public static final int ERROR_PERMISSION
      No permiss.to perform this operation
      See Also:
    • ERROR_WRONGKEY

      public static final int ERROR_WRONGKEY
      Incorrect key used to decrypt data
      See Also:
    • ERROR_INCOMPLETE

      public static final int ERROR_INCOMPLETE
      Operation incomplete/still in progress
      See Also:
    • ERROR_COMPLETE

      public static final int ERROR_COMPLETE
      Operation complete/can't continue
      See Also:
    • ERROR_TIMEOUT

      public static final int ERROR_TIMEOUT
      Operation timed out before completion
      See Also:
    • ERROR_INVALID

      public static final int ERROR_INVALID
      Invalid/inconsistent information
      See Also:
    • ERROR_SIGNALLED

      public static final int ERROR_SIGNALLED
      Resource destroyed by extnl.event
      See Also:
    • ERROR_OVERFLOW

      public static final int ERROR_OVERFLOW
      Resources/space exhausted
      See Also:
    • ERROR_UNDERFLOW

      public static final int ERROR_UNDERFLOW
      Not enough data available
      See Also:
    • ERROR_BADDATA

      public static final int ERROR_BADDATA
      Bad/unrecognised data format
      See Also:
    • ERROR_SIGNATURE

      public static final int ERROR_SIGNATURE
      Signature/integrity check failed
      See Also:
    • ERROR_OPEN

      public static final int ERROR_OPEN
      Cannot open object
      See Also:
    • ERROR_READ

      public static final int ERROR_READ
      Cannot read item from object
      See Also:
    • ERROR_WRITE

      public static final int ERROR_WRITE
      Cannot write item to object
      See Also:
    • ERROR_NOTFOUND

      public static final int ERROR_NOTFOUND
      Requested item not found in object
      See Also:
    • ERROR_DUPLICATE

      public static final int ERROR_DUPLICATE
      Item already present in object
      See Also:
    • ENVELOPE_RESOURCE

      public static final int ENVELOPE_RESOURCE
      Need resource to proceed
      See Also:
  • Constructor Details

    • crypt

      public crypt()
  • Method Details

    • Init

      public static void Init() throws CryptException
      The cryptInit function is used to initialise cryptlib before use. This function should be called before any other cryptlib function is called.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • End

      public static void End() throws CryptException
      The cryptEnd function is used to shut down cryptlib after use. This function should be called after you have finished using cryptlib.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • QueryCapability

      public static CRYPT_QUERY_INFO QueryCapability(int cryptAlgo) throws CryptException
      The cryptQueryCapability function is used to obtain information about the characteristics of a particular encryption algorithm. The information returned covers the algorithm’s key size, data block size, and other algorithm-specific information.

      Remarks: Any fields in the CRYPT_QUERY_INFO structure that don’t apply to the algorithm being queried are set to CRYPT_ERROR, null or zero as appropriate. To determine whether an algorithm is available (without returning information on it), set the query information pointer to null.

      Parameters:
      cryptAlgo - The encryption algorithm to be queried.
      Returns:
      The address of a CRYPT_QUERY_INFO structure which is filled with the information on the requested algorithm and mode, or null if this information isn’t required.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CreateContext

      public static int CreateContext(int cryptUser, int cryptAlgo) throws CryptException
      The cryptCreateContext function is used to create an encryption context for a given encryption algorithm.
      Parameters:
      cryptUser - The user who is to own the encryption context or CRYPT_UNUSED for the default, normal user.
      cryptAlgo - The encryption algorithm to be used in the context.
      Returns:
      The address of the encryption context to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DestroyContext

      public static void DestroyContext(int cryptContext) throws CryptException
      The cryptDestroyContext function is used to destroy an encryption context after use. This erases all keying and security information used by the context and frees up any memory it uses.
      Parameters:
      cryptContext - The encryption context to be destroyed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DestroyObject

      public static void DestroyObject(int cryptObject) throws CryptException
      The cryptDestroyObject function is used to destroy a cryptlib object after use. This erases all security information used by the object, closes any open data sources, and frees up any memory it uses.

      Remarks: This function is a generic form of the specialised functions that destroy/close specific cryptlib object types such as encryption contexts and certificate and keyset objects. In some cases it may not be possible to determine the exact type of an object (for example the keyset access functions may return a key certificate object or only an encryption context depending on the keyset type), cryptDestroyObject can be used to destroy an object of an unknown type.

      Parameters:
      cryptObject - The object to be destroyed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GenerateKey

      public static void GenerateKey(int cryptContext) throws CryptException
      The cryptGenerateKey function is used to generate a new key into an encryption context.

      Remarks: Hash contexts don’t require keys, so an attempt to generate a key into a hash context will return CRYPT_ERROR_NOTAVAIL. cryptGenerateKey will generate a key of a length appropriate for the algorithm being used into an encryption context. If you want to specify the generation of a key of a particular length, you should set the CRYPT_CTXINFO_KEYSIZE attribute before calling this function.

      Parameters:
      cryptContext - The encryption context into which the key is to be generated.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • Encrypt

      public static void Encrypt(int cryptContext, ByteBuffer buffer, int bufferOffset, int length) throws CryptException
      The cryptEncrypt function is used to encrypt or hash data.

      Remarks: Public-key encryption and signature algorithms have special data formatting requirements that need to be taken into account when this function is called. You shouldn’t use this function with these algorithm types, but instead should use the higher-level functions cryptCreateSignature, cryptCheckSignature, cryptWrapKey, and cryptUnwrapKey.

      Parameters:
      cryptContext - The encryption context to use to encrypt or hash the data.
      buffer - The address of the data to be encrypted or hashed.
      length - The length in bytes of the data to be encrypted or hashed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • Encrypt

      public static void Encrypt(int cryptContext, byte[] buffer, int bufferOffset, int length) throws CryptException
      Throws:
      CryptException
    • Encrypt

      public static void Encrypt(int cryptContext, ByteBuffer buffer) throws CryptException
      Throws:
      CryptException
    • Encrypt

      public static void Encrypt(int cryptContext, byte[] buffer) throws CryptException
      Throws:
      CryptException
    • Decrypt

      public static void Decrypt(int cryptContext, ByteBuffer buffer, int bufferOffset, int length) throws CryptException
      The cryptDecrypt function is used to decrypt or hash data.

      Remarks: Public-key encryption and signature algorithms have special data formatting requirements that need to be taken into account when this function is called. You shouldn’t use this function with these algorithm types, but instead should use the higher-level functions cryptCreateSignature, cryptCheckSignature, cryptWrapKey, and cryptUnwrapKey.

      Parameters:
      cryptContext - The encryption context to use to decrypt or hash the data.
      buffer - The address of the data to be decrypted or hashed.
      length - The length in bytes of the data to be decrypted or hashed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • Decrypt

      public static void Decrypt(int cryptContext, byte[] buffer, int bufferOffset, int length) throws CryptException
      Throws:
      CryptException
    • Decrypt

      public static void Decrypt(int cryptContext, ByteBuffer buffer) throws CryptException
      Throws:
      CryptException
    • Decrypt

      public static void Decrypt(int cryptContext, byte[] buffer) throws CryptException
      Throws:
      CryptException
    • SetAttribute

      public static void SetAttribute(int cryptHandle, int attributeType, int value) throws CryptException
      The cryptSetAttribute function is used to add boolean or numeric information, command codes, and objects to a cryptlib object.
      Parameters:
      cryptHandle - The object to which to add the value.
      attributeType - The attribute which is being added.
      value - The boolean or numeric value, command code, or object which is being added.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • SetAttributeString

      public static void SetAttributeString(int cryptHandle, int attributeType, ByteBuffer value, int valueOffset, int valueLength) throws CryptException
      The cryptSetAttributeString function is used to add text or binary strings or time values to an object.
      Parameters:
      cryptHandle - The object to which to add the text or binary string or time value.
      attributeType - The attribute which is being added.
      value - The address of the data being added.
      valueLength - The length in bytes of the data being added.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • SetAttributeString

      public static void SetAttributeString(int cryptHandle, int attributeType, byte[] value, int valueOffset, int valueLength) throws CryptException
      Throws:
      CryptException
    • SetAttributeString

      public static void SetAttributeString(int cryptHandle, int attributeType, ByteBuffer value) throws CryptException
      Throws:
      CryptException
    • SetAttributeString

      public static void SetAttributeString(int cryptHandle, int attributeType, byte[] value) throws CryptException
      Throws:
      CryptException
    • SetAttributeString

      public static void SetAttributeString(int cryptHandle, int attributeType, String value) throws CryptException
      Throws:
      CryptException
    • GetAttribute

      public static int GetAttribute(int cryptHandle, int attributeType) throws CryptException
      The cryptGetAttribute function is used to obtain a boolean or numeric value, status information, or object from a cryptlib object.
      Parameters:
      cryptHandle - The object from which to read the boolean or numeric value, status information, or object.
      attributeType - The attribute which is being read.
      Returns:
      The boolean or numeric value, status information, or object.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GetAttributeString

      public static int GetAttributeString(int cryptHandle, int attributeType, ByteBuffer value, int valueOffset) throws CryptException
      The cryptGetAttributeString function is used to obtain text or binary strings or time values from a cryptlib object.
      Parameters:
      cryptHandle - The object from which to read the text or binary string or time value.
      attributeType - The attribute which is being read.
      value - The address of a buffer to contain the data. If you set this parameter to null, cryptGetAttributeString will return the length of the data in attributeLength without returning the data itself.
      Returns:
      The address of a buffer to contain the data. If you set this parameter to null, cryptGetAttributeString will return the length of the data in attributeLength without returning the data itself.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GetAttributeString

      public static int GetAttributeString(int cryptHandle, int attributeType, byte[] value, int valueOffset) throws CryptException
      Throws:
      CryptException
    • GetAttributeString

      public static int GetAttributeString(int cryptHandle, int attributeType, ByteBuffer value) throws CryptException
      Throws:
      CryptException
    • GetAttributeString

      public static int GetAttributeString(int cryptHandle, int attributeType, byte[] value) throws CryptException
      Throws:
      CryptException
    • GetAttributeString

      public static String GetAttributeString(int cryptHandle, int attributeType) throws CryptException
      Throws:
      CryptException
    • DeleteAttribute

      public static void DeleteAttribute(int cryptHandle, int attributeType) throws CryptException
      The cryptDeleteAttribute function is used to delete an attribute from an object.

      Remarks. Most attributes are always present and can’t be deleted, in general only certificate attributes are deletable.

      Parameters:
      cryptHandle - The object from which to delete the attribute.
      attributeType - The attribute to delete.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • AddRandom

      public static void AddRandom(ByteBuffer randomData, int randomDataOffset, int randomDataLength) throws CryptException
      The cryptAddRandom function is used to add random data to the internal random data pool maintained by cryptlib, or to tell cryptlib to poll the system for random information. The random data pool is used to generate session keys and public/private keys, and by several of the high-level cryptlib functions.
      Parameters:
      randomData - The address of the random data to be added, or null if cryptlib should poll the system for random information.
      randomDataLength - The length of the random data being added, or CRYPT_RANDOM_SLOWPOLL to perform an in-depth, slow poll or CRYPT_RANDOM_FASTPOLL to perform a less thorough but faster poll for random information.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • AddRandom

      public static void AddRandom(byte[] randomData, int randomDataOffset, int randomDataLength) throws CryptException
      Throws:
      CryptException
    • AddRandom

      public static void AddRandom(ByteBuffer randomData) throws CryptException
      Throws:
      CryptException
    • AddRandom

      public static void AddRandom(byte[] randomData) throws CryptException
      Throws:
      CryptException
    • AddRandom

      public static void AddRandom(String randomData) throws CryptException
      Throws:
      CryptException
    • AddRandom

      public static void AddRandom(int pollType) throws CryptException
      Throws:
      CryptException
    • QueryObject

      public static CRYPT_OBJECT_INFO QueryObject(ByteBuffer objectData, int objectDataOffset, int objectDataLength) throws CryptException
      The cryptQueryObject function is used to obtain information about an exported key object created with cryptWrapKey or a signature object created with cryptCreateSignature. It returns information such as the type and algorithms used by the object.

      Remarks: Any fields in the CRYPT_OBJECT_INFO structure that don’t apply to the object being queried are set to CRYPT_ERROR, null or zero as appropriate.

      Parameters:
      objectData - The address of a buffer that contains the object created by cryptWrapKey or
      objectDataLength - The length in bytes of the object data.
      Returns:
      The address of a CRYPT_OBJECT_INFO structure that contains information on the exported key or signature.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • QueryObject

      public static CRYPT_OBJECT_INFO QueryObject(byte[] objectData, int objectDataOffset, int objectDataLength) throws CryptException
      Throws:
      CryptException
    • QueryObject

      public static CRYPT_OBJECT_INFO QueryObject(ByteBuffer objectData) throws CryptException
      Throws:
      CryptException
    • QueryObject

      public static CRYPT_OBJECT_INFO QueryObject(byte[] objectData) throws CryptException
      Throws:
      CryptException
    • QueryObject

      public static CRYPT_OBJECT_INFO QueryObject(String objectData) throws CryptException
      Throws:
      CryptException
    • WrapKey

      public static int WrapKey(ByteBuffer encryptedKey, int encryptedKeyOffset, int encryptedKeyMaxLength, int exportKey, int sessionKeyContext) throws CryptException
      The cryptWrapKey function is used to share a session key between two parties by wrapping a session key from a context in a secure manner. The wrapped key is placed in a buffer in a portable format that allows it to be unwrapped back into a context using cryptUnwrapKey. A session key can be wrapped using either a public key or key certificate or a conventional encryption key.
      Parameters:
      encryptedKey - The address of a buffer to contain the wrapped key. If you set this parameter to null, cryptWrapKey will return the length of the wrapped key in encryptedKeyLength without actually wrapping the key.
      encryptedKeyMaxLength - The maximum size in bytes of the buffer to contain the wrapped key.
      exportKey - A public-key or conventional encryption context or key certificate object containing the public or conventional key used to wrap the session key.
      sessionKeyContext - An encryption context containing the session key to wrap.
      Returns:
      The address of the wrapped key length.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • WrapKey

      public static int WrapKey(byte[] encryptedKey, int encryptedKeyOffset, int encryptedKeyMaxLength, int exportKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • WrapKey

      public static int WrapKey(ByteBuffer encryptedKey, int encryptedKeyMaxLength, int exportKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • WrapKey

      public static int WrapKey(byte[] encryptedKey, int encryptedKeyMaxLength, int exportKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • WrapKeyEx

      public static int WrapKeyEx(ByteBuffer encryptedKey, int encryptedKeyOffset, int encryptedKeyMaxLength, int formatType, int exportKey, int sessionKeyContext) throws CryptException
      The cryptWrapKeyEx function is used to share a session key between two parties by wrapping a session key from a context in a secure manner with extended control over the wrapped key format. The wrapped key is placed in a buffer in a portable format that allows it to be unwrapped back into a context using cryptUnwrapKey. A session key can be wrapped using either a public key or key certificate or a conventional encryption key.
      Parameters:
      encryptedKey - The address of a buffer to contain the wrapped key. If you set this parameter to null, cryptWrapKeyEx will return the length of the wrapped key in encryptedKeyLength without actually wrapping the key.
      encryptedKeyMaxLength - The maximum size in bytes of the buffer to contain the wrapped key.
      formatType - The format for the wrapped key.
      exportKey - A public-key or conventional encryption context or key certificate object containing the public or conventional key used to wrap the session key.
      sessionKeyContext - An encryption context containing the session key to wrap.
      Returns:
      The address of the wrapped key length.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • WrapKeyEx

      public static int WrapKeyEx(byte[] encryptedKey, int encryptedKeyOffset, int encryptedKeyMaxLength, int formatType, int exportKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • WrapKeyEx

      public static int WrapKeyEx(ByteBuffer encryptedKey, int encryptedKeyMaxLength, int formatType, int exportKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • WrapKeyEx

      public static int WrapKeyEx(byte[] encryptedKey, int encryptedKeyMaxLength, int formatType, int exportKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKey

      public static void UnwrapKey(ByteBuffer encryptedKey, int encryptedKeyOffset, int encryptedKeyLength, int importKey, int sessionKeyContext) throws CryptException
      The cryptUnwrapKey function is used to share a session key between two parties by unwrapping an encrypted session key that was previously wrapped with cryptWrapKey into an encryption context. A session key is unwrapped using either a private key or a conventional encryption key.
      Parameters:
      encryptedKey - The address of a buffer that contains the wrapped key created by cryptWrapKey.
      encryptedKeyLength - The length in bytes of the encrypted key data.
      importKey - A public-key or conventional encryption context containing the private or conventional key required to unwrap the session key.
      sessionKeyContext - The context used to contain the unwrapped session key.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • UnwrapKey

      public static void UnwrapKey(byte[] encryptedKey, int encryptedKeyOffset, int encryptedKeyLength, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKey

      public static void UnwrapKey(ByteBuffer encryptedKey, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKey

      public static void UnwrapKey(byte[] encryptedKey, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKey

      public static void UnwrapKey(String encryptedKey, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKeyEx

      public static int UnwrapKeyEx(ByteBuffer encryptedKey, int encryptedKeyOffset, int encryptedKeyLength, int importKey, int sessionKeyContext) throws CryptException
      cryptUnwrapKeyEx takes one extra parameter, a pointer to the wrapped key, which is required for OpenPGP key import. For all other formats this value is set to NULL, for OpenPGP the imported key parameter is set to CRYPT_UNUSED and the key is returned in the extra parameter:

      /* Import a non-PGP format key *\/
      cryptUnwrapKeyEx( encryptedKey, encryptedKeyLength, importContext, cryptContext, NULL );

      /* Import a PGP-format key *\/
      cryptImportKeyEx( encryptedKey, encryptedKeyLength, importContext, CRYPT_UNUSED, &cryptContext );

      This is required because PGP’s handling of keys differs somewhat from that used with other formats.

      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • UnwrapKeyEx

      public static int UnwrapKeyEx(byte[] encryptedKey, int encryptedKeyOffset, int encryptedKeyLength, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKeyEx

      public static int UnwrapKeyEx(ByteBuffer encryptedKey, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKeyEx

      public static int UnwrapKeyEx(byte[] encryptedKey, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • UnwrapKeyEx

      public static int UnwrapKeyEx(String encryptedKey, int importKey, int sessionKeyContext) throws CryptException
      Throws:
      CryptException
    • CreateSignature

      public static int CreateSignature(ByteBuffer signature, int signatureOffset, int signatureMaxLength, int signContext, int hashContext) throws CryptException
      The cryptCreateSignature function digitally signs a piece of data. The signature is placed in a buffer in a portable format that allows it to be checked using cryptCheckSignature.
      Parameters:
      signature - The address of a buffer to contain the signature. If you set this parameter to null, cryptCreateSignature will return the length of the signature in signatureLength without actually generating the signature.
      signatureMaxLength - The maximum size in bytes of the buffer to contain the signature data.
      signContext - A public-key encryption or signature context containing the private key used to sign the data.
      hashContext - A hash context containing the hash of the data to sign.
      Returns:
      The address of the signature length.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CreateSignature

      public static int CreateSignature(byte[] signature, int signatureOffset, int signatureMaxLength, int signContext, int hashContext) throws CryptException
      Throws:
      CryptException
    • CreateSignature

      public static int CreateSignature(ByteBuffer signature, int signatureMaxLength, int signContext, int hashContext) throws CryptException
      Throws:
      CryptException
    • CreateSignature

      public static int CreateSignature(byte[] signature, int signatureMaxLength, int signContext, int hashContext) throws CryptException
      Throws:
      CryptException
    • CreateSignatureEx

      public static int CreateSignatureEx(ByteBuffer signature, int signatureOffset, int signatureMaxLength, int formatType, int signContext, int hashContext, int extraData) throws CryptException
      The cryptCreateSignatureEx function digitally signs a piece of data with extended control over the signature format. The signature is placed in a buffer in a portable format that allows it to be checked using cryptCheckSignatureEx.
      Parameters:
      signature - The address of a buffer to contain the signature. If you set this parameter to null, cryptCreateSignature will return the length of the signature in signatureLength without actually generating the signature.
      signatureMaxLength - The maximum size in bytes of the buffer to contain the signature data.
      formatType - The format of the signature to create.
      signContext - A public-key encryption or signature context containing the private key used to sign the data.
      hashContext - A hash context containing the hash of the data to sign.
      extraData - Extra information to include with the signature or CRYPT_UNUSED if the format is the default signature format (which doesn’t use the extra data) or CRYPT_USE_DEFAULT if the signature isn’t the default format and you want to use the default extra information.
      Returns:
      The address of the signature length.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CreateSignatureEx

      public static int CreateSignatureEx(byte[] signature, int signatureOffset, int signatureMaxLength, int formatType, int signContext, int hashContext, int extraData) throws CryptException
      Throws:
      CryptException
    • CreateSignatureEx

      public static int CreateSignatureEx(ByteBuffer signature, int signatureMaxLength, int formatType, int signContext, int hashContext, int extraData) throws CryptException
      Throws:
      CryptException
    • CreateSignatureEx

      public static int CreateSignatureEx(byte[] signature, int signatureMaxLength, int formatType, int signContext, int hashContext, int extraData) throws CryptException
      Throws:
      CryptException
    • CheckSignature

      public static void CheckSignature(ByteBuffer signature, int signatureOffset, int signatureLength, int sigCheckKey, int hashContext) throws CryptException
      The cryptCheckSignature function is used to check the digital signature on a piece of data.
      Parameters:
      signature - The address of a buffer that contains the signature.
      signatureLength - The length in bytes of the signature data.
      sigCheckKey - A public-key context or key certificate object containing the public key used to verify the signature.
      hashContext - A hash context containing the hash of the data.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CheckSignature

      public static void CheckSignature(byte[] signature, int signatureOffset, int signatureLength, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • CheckSignature

      public static void CheckSignature(ByteBuffer signature, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • CheckSignature

      public static void CheckSignature(byte[] signature, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • CheckSignature

      public static void CheckSignature(String signature, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • CheckSignatureEx

      public static int CheckSignatureEx(ByteBuffer signature, int signatureOffset, int signatureLength, int sigCheckKey, int hashContext) throws CryptException
      The cryptCheckSignatureEx function is used to check the digital signature on a piece of data with extended control over the signature information.
      Parameters:
      signature - The address of a buffer that contains the signature.
      signatureLength - The length in bytes of the signature data.
      sigCheckKey - A public-key context or key certificate object containing the public key used to verify the signature.
      hashContext - A hash context containing the hash of the data.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CheckSignatureEx

      public static int CheckSignatureEx(byte[] signature, int signatureOffset, int signatureLength, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • CheckSignatureEx

      public static int CheckSignatureEx(ByteBuffer signature, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • CheckSignatureEx

      public static int CheckSignatureEx(byte[] signature, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • CheckSignatureEx

      public static int CheckSignatureEx(String signature, int sigCheckKey, int hashContext) throws CryptException
      Throws:
      CryptException
    • KeysetOpen

      public static int KeysetOpen(int cryptUser, int keysetType, String name, int options) throws CryptException
      The cryptKeysetOpen function is used to establish a connection to a key collection or keyset.
      Parameters:
      cryptUser - The user who is to own the keyset object or CRYPT_UNUSED for the default, normal user.
      keysetType - The keyset type to be used.
      name - The name of the keyset.
      options - Option flags to apply when opening or accessing the keyset.
      Returns:
      The address of the keyset object to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • KeysetClose

      public static void KeysetClose(int keyset) throws CryptException
      The cryptKeysetClose function is used to destroy a keyset object after use. This closes the connection to the key collection or keyset and frees up any memory it uses.
      Parameters:
      keyset - The keyset object to be destroyed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GetPublicKey

      public static int GetPublicKey(int keyset, int keyIDtype, String keyID) throws CryptException
      The cryptGetPublicKey function is used to create an encryption context from a public key in a keyset or crypto device. The public key is identified either through the key owner’s name or their email address.
      Parameters:
      keyset - The keyset or device from which to obtain the key.
      keyIDtype - The type of the key ID, either CRYPT_KEYID_NAME for the name or key label, or CRYPT_KEYID_EMAIL for the email address.
      keyID - The key ID of the key to read.
      Returns:
      The address of the context or certificate to be fetched.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GetPrivateKey

      public static int GetPrivateKey(int keyset, int keyIDtype, String keyID, String password) throws CryptException
      The cryptGetPrivateKey function is used to create an encryption context from a private key in a keyset or crypto device. The private key is identified either through the key owner’s name or their email address.

      Remarks: cryptGetPrivateKey will return CRYPT_ERROR_WRONGKEY if an incorrect password is supplied. This can be used to determine whether a password is necessary by first calling the function with a null password and then retrying the read with a user-supplied password if the first call returns with CRYPT_ERROR_WRONGKEY.

      Parameters:
      keyset - The keyset or device from which to obtain the key.
      keyIDtype - The type of the key ID, either CRYPT_KEYID_NAME for the name or key label, or CRYPT_KEYID_EMAIL for the email address.
      keyID - The key ID of the key to read.
      password - The password required to decrypt the private key, or null if no password is required.
      Returns:
      The address of the context to be fetched.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GetKey

      public static int GetKey(int keyset, int keyIDtype, String keyID, String password) throws CryptException
      see GetPublicKey
      Throws:
      CryptException
    • AddPublicKey

      public static void AddPublicKey(int keyset, int certificate) throws CryptException
      The cryptAddPublicKey function is used to add a user’s public key or certificate to a keyset.

      Remarks: This function requires a key certificate object rather than an encryption context, since the certificate contains additional identification information which is used when the certificate is written to the keyset.

      Parameters:
      keyset - The keyset object to which to write the key.
      certificate - The certificate to add to the keyset.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • AddPrivateKey

      public static void AddPrivateKey(int keyset, int cryptKey, String password) throws CryptException
      The cryptAddPrivateKey function is used to add a user’s private key to a keyset.

      Remarks: The use of a password to encrypt the private key is required when storing a private key to a keyset, but not to a crypto device such as a smart card or HSM or TPM, since these provide their own protection for the key data.

      Parameters:
      keyset - The keyset object to which to write the key.
      cryptKey - The private key to write to the keyset.
      password - The password used to encrypt the private key.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DeleteKey

      public static void DeleteKey(int keyset, int keyIDtype, String keyID) throws CryptException
      The cryptDeleteKey function is used to delete a key or certificate from a keyset ordevice. The key to delete is identified either through the key owner’s name or theiremail address.
      Parameters:
      keyset - The keyset or device object from which to delete the key.
      keyIDtype - The type of the key ID, either CRYPT_KEYID_NAME for the name or key label, or CRYPT_KEYID_EMAIL for the email address.
      keyID - The key ID of the key to delete.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CreateCert

      public static int CreateCert(int cryptUser, int certType) throws CryptException
      The cryptCreateCert function is used to create a certificate object that contains a certificate
      Parameters:
      cryptUser - The user who is to own the certificate object or CRYPT_UNUSED for the default, normal user.
      certType - The type of certificate item that will be created in the certificate object.
      Returns:
      The address of the certificate object to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DestroyCert

      public static void DestroyCert(int certificate) throws CryptException
      The cryptDestroyCert function is used to destroy a certificate object after use. This erases all keying and security information used by the object and frees up any memory it uses.
      Parameters:
      certificate - The certificate object to be destroyed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GetCertExtension

      public static int GetCertExtension(int certificate, String oid, ByteBuffer extension, int extensionOffset, int extensionMaxLength) throws CryptException
      The cryptGetCertExtension function is used to obtain a generic blob-type certificate extension from a certificate object or public or private key with an attached certificate.

      Remarks: cryptlib directly supports extensions from X.509, PKIX, SET, SigG, and various vendors itself, so you shouldn’t use this function for anything other than unknown, proprietary extensions.

      Parameters:
      certificate - The certificate or public/private key object from which to read the extension.
      oid - The object identifier value for the extension being queried, specified as a sequence of integers.
      extension - The address of a buffer to contain the data. If you set this parameter to null, cryptGetCertExtension will return the length of the data in extensionLength without returning the data itself.
      extensionMaxLength - The maximum size in bytes of the buffer to contain the extension data.
      Returns:
      The length in bytes of the extension data.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • GetCertExtension

      public static int GetCertExtension(int certificate, String oid, byte[] extension, int extensionOffset, int extensionMaxLength) throws CryptException
      Throws:
      CryptException
    • GetCertExtension

      public static int GetCertExtension(int certificate, String oid, ByteBuffer extension, int extensionMaxLength) throws CryptException
      Throws:
      CryptException
    • GetCertExtension

      public static int GetCertExtension(int certificate, String oid, byte[] extension, int extensionMaxLength) throws CryptException
      Throws:
      CryptException
    • AddCertExtension

      public static void AddCertExtension(int certificate, String oid, int criticalFlag, ByteBuffer extension, int extensionOffset, int extensionLength) throws CryptException
      The cryptAddCertExtension function is used to add a generic blob-type certificate extension to a certificate object.

      Remarks: cryptlib directly supports extensions from X.509, PKIX, SET, SigG, and various vendors itself, so you shouldn’t use this function for anything other than unknown, proprietary extensions.

      Parameters:
      certificate - The certificate object to which to add the extension.
      oid - The object identifier value for the extension being added, specified as a sequence of integers
      criticalFlag - The critical flag for the extension being added.
      extension - The address of the extension data.
      extensionLength - The length in bytes of the extension data.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • AddCertExtension

      public static void AddCertExtension(int certificate, String oid, int criticalFlag, byte[] extension, int extensionOffset, int extensionLength) throws CryptException
      Throws:
      CryptException
    • AddCertExtension

      public static void AddCertExtension(int certificate, String oid, int criticalFlag, ByteBuffer extension) throws CryptException
      Throws:
      CryptException
    • AddCertExtension

      public static void AddCertExtension(int certificate, String oid, int criticalFlag, byte[] extension) throws CryptException
      Throws:
      CryptException
    • AddCertExtension

      public static void AddCertExtension(int certificate, String oid, int criticalFlag, String extension) throws CryptException
      Throws:
      CryptException
    • DeleteCertExtension

      public static void DeleteCertExtension(int certificate, String oid) throws CryptException
      The cryptDeleteCertExtension function is used to delete a generic blob-type certificate extension from a certificate object.

      Remarks: cryptlib directly supports extensions from X.509, PKIX, SET, SigG, and various vendors itself, so you shouldn’t use this function for anything other than unknown, proprietary extensions.

      Parameters:
      certificate - The certificate object from which to delete the extension.
      oid - The object identifier value for the extension being deleted, specified as a sequence of integers.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • SignCert

      public static void SignCert(int certificate, int signContext) throws CryptException
      The cryptSignCert function is used to digitally sign a public key certificate, CA certificate, certification request, CRL, or other certificate-related item held in a certificate container object.

      Remarks: Once a certificate item has been signed, it can no longer be modified or updated using the usual certificate manipulation functions. If you want to add further data to the certificate item, you have to start again with a new certificate object.

      Parameters:
      certificate - The certificate container object that contains the certificate item to sign.
      signContext - A public-key encryption or signature context containing the private key used to sign the certificate.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CheckCert

      public static void CheckCert(int certificate, int sigCheckKey) throws CryptException
      The cryptCheckCert function is used to check the signature on a certificate object, or to verify a certificate object against a CRL or a keyset containing a CRL.
      Parameters:
      certificate - The certificate container object that contains the certificate item to check.
      sigCheckKey - A public-key context or key certificate object containing the public key used to verify the signature, or alternatively CRYPT_UNUSED if the certificate item is self-signed. If the certificate is to be verified against a CRL, this should be a certificate object or keyset containing the CRL. If the certificate is to be verified online, this should be a session object for the server used to verify the certificate.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • ImportCert

      public static int ImportCert(ByteBuffer certObject, int certObjectOffset, int certObjectLength, int cryptUser) throws CryptException
      The cryptImportCert function is used to import an encoded certificate, certification request, CRL, or other certificate-related item into a certificate container object.
      Parameters:
      certObject - The address of a buffer that contains the encoded certificate.
      certObjectLength - The encoded certificate length.
      cryptUser - The user who is to own the imported object or CRYPT_UNUSED for the default, normal user.
      Returns:
      The certificate object to be created using the imported certificate data.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • ImportCert

      public static int ImportCert(byte[] certObject, int certObjectOffset, int certObjectLength, int cryptUser) throws CryptException
      Throws:
      CryptException
    • ImportCert

      public static int ImportCert(ByteBuffer certObject, int cryptUser) throws CryptException
      Throws:
      CryptException
    • ImportCert

      public static int ImportCert(byte[] certObject, int cryptUser) throws CryptException
      Throws:
      CryptException
    • ImportCert

      public static int ImportCert(String certObject, int cryptUser) throws CryptException
      Throws:
      CryptException
    • ExportCert

      public static int ExportCert(ByteBuffer certObject, int certObjectOffset, int certObjectMaxLength, int certFormatType, int certificate) throws CryptException
      The cryptExportCert function is used to export an encoded signed public key certificate, certification request, CRL, or other certificate-related item from a certificate container object.

      Remarks: The certificate object needs to have all the required fields filled in and must then be signed using cryptSignCert before it can be exported.

      Parameters:
      certObject - The address of a buffer to contain the encoded certificate.
      certObjectMaxLength - The maximum size in bytes of the buffer to contain the exported certificate.
      certFormatType - The encoding format for the exported certificate object.
      certificate - The address of the certificate object to be exported.
      Returns:
      The address of the exported certificate length.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • ExportCert

      public static int ExportCert(byte[] certObject, int certObjectOffset, int certObjectMaxLength, int certFormatType, int certificate) throws CryptException
      Throws:
      CryptException
    • ExportCert

      public static int ExportCert(ByteBuffer certObject, int certObjectMaxLength, int certFormatType, int certificate) throws CryptException
      Throws:
      CryptException
    • ExportCert

      public static int ExportCert(byte[] certObject, int certObjectMaxLength, int certFormatType, int certificate) throws CryptException
      Throws:
      CryptException
    • CAAddItem

      public static void CAAddItem(int keyset, int certificate) throws CryptException
      The cryptCAAddItem function is used to add a certificate object to a certificate store. cryptAddPublicKey is used to add standard certificates, this CA-specific function can be used by CAs to add special items such as certificate requests and PKI user information.
      Parameters:
      keyset - The certificate store to which the item will be added.
      certificate - The item to add to the certificate store.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CAGetItem

      public static int CAGetItem(int keyset, int certType, int keyIDtype, String keyID) throws CryptException
      The cryptCAGetItem function is used to read a certificate object from a certificate store. cryptGetPublicKey is used to read standard certificates, this CA-specific function can be used by CAs to obtain special items such as certificate requests and PKI user information. The item to be fetched is identified either through the key owner’s name or their email address.
      Parameters:
      keyset - The certificate store from which to obtain the item.
      certType - The item type.
      keyIDtype - The type of the key ID, either CRYPT_KEYID_NAME for the name or key label, or CRYPT_KEYID_EMAIL for the email address.
      keyID - The key ID of the item to read.
      Returns:
      The address of the certificate object to be fetched.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CADeleteItem

      public static void CADeleteItem(int keyset, int certType, int keyIDtype, String keyID) throws CryptException
      no function comment avaiilable
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CACertManagement

      public static int CACertManagement(int action, int keyset, int caKey, int certRequest) throws CryptException
      The cryptCACertManagement function is used to perform a CA certificate management operation such as a certificate issue, revocation, CRL issue, certificate expiry, or other operation with a certificate store.
      Parameters:
      action - The certificate management operation to perform.
      keyset - The certificate store to use to perform the action.
      caKey - The CA key to use when performing the action, or CRYPT_UNUSED if no key is necessary for this action.
      certRequest - The certificate request to use when performing the action, or CRYPT_UNUSED if no request is necessary for this action.
      Returns:
      The address of the certificate object to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CreateEnvelope

      public static int CreateEnvelope(int cryptUser, int formatType) throws CryptException
      The cryptCreateEnvelope function is used to create an envelope object for encrypting or decrypting, signing or signature checking, compressing or decompressing, or otherwise processing data.
      Parameters:
      cryptUser - The user who is to own the envelope object or CRYPT_UNUSED for the default, normal user.
      formatType - The data format for the enveloped data.
      Returns:
      The address of the envelope to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DestroyEnvelope

      public static void DestroyEnvelope(int envelope) throws CryptException
      The cryptDestroyEnvelope function is used to destroy an envelope after use. This erases all keying and security information used by the envelope and frees up any memory it uses.
      Parameters:
      envelope - The envelope to be destroyed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • CreateSession

      public static int CreateSession(int cryptUser, int formatType) throws CryptException
      The cryptCreateSession function is used to create a secure session object for use in securing a communications link or otherwise communicating with a remote server or client.
      Parameters:
      cryptUser - The user who is to own the session object or CRYPT_UNUSED for the default, normal user.
      formatType - The type of the secure session.
      Returns:
      The address of the session to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DestroySession

      public static void DestroySession(int session) throws CryptException
      The cryptDestroySession function is used to destroy a session object after use. This close the link to the client or server, erases all keying and security information used by the session, and frees up any memory it uses.
      Parameters:
      session - The session to be destroyed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • PushData

      public static int PushData(int envelope, ByteBuffer buffer, int bufferOffset, int length) throws CryptException
      The cryptPushData function is used to add data to an envelope or session object.
      Parameters:
      envelope - The envelope or session object to which to add the data.
      buffer - The address of the data to add.
      length - The length of the data to add.
      Returns:
      bytesCopied The address of the number of bytes copied into the envelope.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • PushData

      public static int PushData(int envelope, byte[] buffer, int bufferOffset, int length) throws CryptException
      Throws:
      CryptException
    • PushData

      public static int PushData(int envelope, ByteBuffer buffer) throws CryptException
      Throws:
      CryptException
    • PushData

      public static int PushData(int envelope, byte[] buffer) throws CryptException
      Throws:
      CryptException
    • PushData

      public static int PushData(int envelope, String buffer) throws CryptException
      Throws:
      CryptException
    • FlushData

      public static void FlushData(int envelope) throws CryptException
      The cryptFlushData function is used to flush data through an envelope or session object, completing processing and (for session objects) sending the data to the remote client or server.
      Parameters:
      envelope - The envelope or session object to flush the data through.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • PopData

      public static int PopData(int envelope, ByteBuffer buffer, int bufferOffset, int length) throws CryptException
      The cryptPopData function is used to remove data from an envelope or session object.
      Parameters:
      envelope - The envelope or session object from which to remove the data.
      buffer - The address of the data to remove.
      length - The length of the data to remove.
      Returns:
      bytesCopied The address of the number of bytes copied from the envelope.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • PopData

      public static int PopData(int envelope, byte[] buffer, int bufferOffset, int length) throws CryptException
      Throws:
      CryptException
    • PopData

      public static int PopData(int envelope, ByteBuffer buffer, int length) throws CryptException
      Throws:
      CryptException
    • PopData

      public static int PopData(int envelope, byte[] buffer, int length) throws CryptException
      Throws:
      CryptException
    • DeviceOpen

      public static int DeviceOpen(int cryptUser, int deviceType, String name) throws CryptException
      The cryptDeviceOpen function is used to establish a connection to a crypto device such as a crypto hardware accelerator or a PCMCIA card or smart card.
      Parameters:
      cryptUser - The address of the device object to be created.
      deviceType - The device type to be used.
      name - The user who is to own the device object or CRYPT_UNUSED for the default, normal user.
      Returns:
      The address of the device object to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DeviceClose

      public static void DeviceClose(int device) throws CryptException
      The cryptDeviceClose function is used to destroy a device object after use. This closes the connection to the device and frees up any memory it uses.
      Parameters:
      device - The device object to be destroyed.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DeviceQueryCapability

      public static CRYPT_QUERY_INFO DeviceQueryCapability(int device, int cryptAlgo) throws CryptException
      The cryptDeviceQueryCapability function is used to obtain information about the characteristics of a particular encryption algorithm provided by an encryption device. The information returned covers the algorithm’s key size, data block size, and other algorithm-specific information.

      Remarks: Any fields in the CRYPT_QUERY_INFO structure that don’t apply to the algorithm being queried are set to CRYPT_ERROR, null or zero as appropriate. To determine whether an algorithm is available (without returning information on them), set the query information pointer to null.

      Parameters:
      device - The encryption device to be queried.
      cryptAlgo - The encryption algorithm to be queried.
      Returns:
      The address of a CRYPT_QUERY_INFO structure which is filled with the information on the requested algorithm and mode, or null if this information isn’t required.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • DeviceCreateContext

      public static int DeviceCreateContext(int device, int cryptAlgo) throws CryptException
      The cryptDeviceCreateContext function is used to create an encryption context for a given encryption algorithm via an encryption device.
      Parameters:
      device - The device object used to create the encryption context.
      cryptAlgo - The encryption algorithm to be used in the context.
      Returns:
      The address of the encryption context to be created.
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • Login

      public static int Login(String name, String password) throws CryptException
      Log on / create a user object
      Parameters:
      name - the user’s ID
      password - secret login password
      Returns:
      The address of the user login
      Throws:
      CryptException - This exception returns an integer status code and a string error message
    • Logout

      public static void Logout(int user) throws CryptException
      Log out / destroy a user object
      Parameters:
      user - The address for the user as generated by Login()
      Throws:
      CryptException - This exception returns an integer status code and a string error message