A class represents an acls exception.

This class represents authentication exceptions.

Exception for authentication manager not found.

Exception for invalid attribute value

An exception for Error formulating the subject name (X500Name)

Exception for missing a required authentication credential.

Returns CA's certificate implementaion.

Exception for authorization failure

An exception for internal error for authorization.

Exception for authorization manager plugin not found.

Exception for protected resource unknown to the authorization manager

This class represents an exception thrown when a property is not found in the configuration store.

Store config into storage (file or LDAP).

Deletes an attribute value from this CertAttrSet.

Gets an attribute value.

Retrieves the given property as a big integer.

Retrieves the given property as a boolean.

Retrieves the value of a property as a byte array.

Retrieves the given property as an integer.

Get properties as a map.

Retrieves the value of a given property as a string or the given default value if the property is not present.

Retrieves argument value as big integer.

Retrieves argument value as integer.

Retrieves PKCS10

Gets PKCS10 request.

Retrieves argument value as string.

Initializes this subsystem.

Initializes this subsystem with the given configuration store.

Sets an attribute value.

Sets specific to this subsystem.

Called to validate the config store parameters that changed

Exception to throw when a (sub-)CA cannot perform an operation because it is disabled.

Exception to throw when a (sub-)CA's signing certificate is not (yet) present in the local NSSDB.

Exception to throw when a (sub-)CA cannot be found.

Exception to throw when an operation cannot be completed because the CA is the wrong type (e.g., an operation that only applies to lightweight CAs).

A class represents a CA exception associated with publishing error.

"import" the CA cert cross-signed by another CA (potentially a bridge CA) into internal ldap db.

Request access to a Ldap connection from the pool.

Sends the request to a remote authority.

Sends the PKI message to the remote authority.

Sets the HttpRequest URI before send

A class represents a database exception.

Indicates internal db is down.

Creates attribute set from object.

Retrieves a list of objects.

Retrieves a list of objects.

Deletes object from database.

Creates LDAP-based search filters with help of registered mappers.

Maps LDAP attributes into object, and puts the object into 'parent'.

Maps object attribute into LDAP attributes.

Modify an object in the database.

Handles object

Reads an object from the database.

Searchs for a list of objects that match the filter.

Searchs for a list of objects that match the filter.

Searchs for a list of objects that match the filter.

Sets the sort key

Gets one single record at a time similar to processCertRecords but no extra class needed.

returns the revocation reason

Archives a key to the repository.

Searchs for a list of key records.

Retrieves client ID.

Retrieves dates of recovery.

Retrieves key length.

Retrieves key owner name.

Retrieves authorization realm.

Retrieves the state of the key.

Modifies key record in this repository.

Reads an archived key by serial number.

Reads an archived key by owner name.

Searches for private keys.

Checks to see if a new range is needed, or if we have reached the end of the current range, or if a range conflict has occurred.

Retrieves the next serial number without increasing the serial number.

Sets whether serial number management is enabled for certs and requests.

Set the maximum serial number in next range.

This represents the extensions exception.

Get an instance of the extension given http input.

initialize from configuration file

A class represents a jobs exception.

Initialize from the configuration file.

A class represents a KRA exception.

add approving agent in asynchronous key recovery

Creates error for a specific recovery operation.

Creates recovery parameters for the given recovery operation.

Async Recovers key for administrators.

Generate an asymmetric key pair.

Retrieves error by recovery identifier.

Returns the new nickname of the transport certifiate.

Retrieves number of agent required to perform key recovery operation.

Retrieves recovery parameters for the given recovery operation.

is async recovery request status APPROVED - i.e.

Sets the number of required recovery agents

A class that represents a Ldap exception.

Initialize ldap publishing module with config store.

A class represents a listener exception.

get the configuration parameters of the plug-in.

This class implements a Log exception.

Exception for log plugin not found.

Retrieve last "maxLine" number of system log with log lever >"level" and from source "source".

Retrieve log file list.

A class represents a notification exception.

returns an email address by using the resolver keys.

This method adds a CRL issuing point

This method deletes a CRL issuing point record

This method attempts to read the CRL issuing point.

This method searches all CRL issuing points constrained by the specified filtering mechanism.

This method sets the supplied algorithm as the default signing algorithm.

This method validates the information associated with the specified OCSP request and returns an OCSP response.

A class represents a password checker exception.

This represents a profile specific exception for handling CMC badIdentity condition.

This represents a profile specific exception for handling CMC badRequest condition.

This represents a profile specific exception for handling CMC popRequired condition.

This represents a profile specific exception.

This represents a profile specific exception.

This is the base exception for property handling.

This type of exception is thrown in cases where an parsing error is found while evaluating a PKI component.

Exception for Mapper Plugin not found.

Exception for Publisher Plugin not found.

Exception for Publisher Rule plugin not found.

initialize from config store.

initialize from config store and Isubsystem.

Initialize the plugin.

Retrieves the nickname of the RA certificate from configuration store.

This represents a registry exception.

A (localizable) message recorded by a policy module that describes the reason for rejecting a request.

Approves a request.

Clones a request object and mark it pending.

Removes attribute from the request.

Initializes request listener for the specific subsystem and configuration store.

Creates a new request object.

Begins processing for this request.

Removes all objects with this repository.

Performs the service (such as certificate generation) represented by this request.

Changes M-N recovery scheme.

Checks if the given base-64 encoded string contains an extension or a sequence of extensions.

Delete certificate of the given nickname.

Deletes certificate of the given nickname.

Retrieves CA's signing algorithm id.

Retrieves a list of nicknames of certificates that are in the installed tokens.

Gets all CA certificates on all tokens.

Retrieves all certificates.

Retrieves certificate in pretty-print format by the nickname.

Retrieves subject name of the certificate that is identified by the given nickname.

Retrieves the SSL cipher version.

Generates an ECC key pair based on the given parameters.

Retrieves the token name of the internal (software) token.

Retrieves the key pair based on the given nickname.

Generates a key pair based on the given parameters.

Retrieves total number of recovery agents.

Retrieves the signature algorithm of the certificate named by the given nickname.

Returns this Unit's signing algorithm in String format.

Retrieves a list of currently registered token names.

Imports certificate into the server.

Checks if fortezza is enabled.

Checks if the given dn is a valid distinguished name.

Logins to this unit.

Sets the current SSL cipher preferences.

Signs the given data in specific algorithm.

Verifies the given key pair.

This class implements a duplicate self test exception.

This class implements a missing self test exception.

A class represents a Identity exception.

authenticates user(agent) by certificate

Authenticates user through LDAP by a set of credentials.

Authenticate the request

Authenticates a user based on uid, pwd in the directory.

authenticates user by certificate

Authenticates a user based on uid, pwd in the directory.

Authenticates a user based on attr, pwd in the directory.

Formulate the cert info.

Get the named property If the property is not set, use s as the default, and create a new value for the property in the config file.

getSharedToken(BigInteger serial) retrieves the shared secret data from CA's internal certificate db based on serial number to revoke shared secret based revocation Note that unlike the shared token attribute for enrollment, the metaInfo attribute for shared token in revocatoiin is not configurable.

initializes the CertUserDBAuthentication auth manager

Initializes the UidPwdDirBasedAuthentication auth manager.

Initializes the PortalEnrollment auth manager.

initializes the TokenAuthentication auth manager

Initializes the UserPwdDirAuthentication auth manager.

Default constructor, initialization must follow.

Parse ACL resource attributes, then update the ACLs memory store This is intended to be used if storing ACLs on ldap is not desired, and the caller is expected to call this method to add resource and acl info into acls memory store.

Initializes

abstract methods

Initialize and open the log using the parameters from a config store

Initialize and open a RollingLogFile using the prop config store

Retrieve log file list.

Startup the instance

Creates a new issuing point in OCSP.

Locates the CRL.

Returns an issuing point.

Validate an OCSP request.

Initializes this profile.

for initializing from config store.

for initializing from config store.

common initialization routine.

common initialization routine.

authorize a user based on its authentication credentials.

Lists configuration store.

Generic configuration store set operation.

Output exception (unexpected error) template This is different from other templates in that if an exception occurs while rendering the exception a message is printed out directly.

Authorize must occur after Authenticate

check if a certificate (serial number) is revoked on a CA.

make a CRL entry from a serial number and revocation reason.

get ssl client authenticated certificate

get a template based on result status.

A system certificate such as the CA signing certificate should not be allowed to delete.

Process the HTTP request.

Serves HTTP request.

Process the HTTP request.

Services the request

Process the HTTP request.

Serves HTTPS request.

A class represents a CMS gateway exception.

construct a authentication credentials to pass into authentication manager.

get a template

Process request

Process the HTTP request.

Process the HTTP request.

Process the HTTP request.

Process the HTTP request.

Process the HTTP request.

Gets info for a specific request

Finds list of requests matching the specified search filter.

Process the HTTP request.

Process the HTTP request.

Process the HTTP request.

Process the HTTP request.

Process the HTTP request.

Process the HTTP request.

Submits an archival request and processes it.

Process the HTTP request.

fill subject name, validity, extensions from authoken if any, overriding what was in pkcs10.

Fills in certificate specific request attributes.

Fills in certificate specific request attributes.

Finds list of requests matching the specified search filter.

Process the HTTP request.

This function is used for installation and upgrade.

Authenticate to the named authentication manager instance

authenticates revocation of a certification by a challenge phrase

authenticates administratrators by LDAP uid/pwd

Gets configuration parameters for the given authentication manager plugin.