io.confluent.security.mtls

Class CertificateMetadata

java.lang.Object

io.confluent.security.mtls.CertificateMetadata

public class CertificateMetadata
extends Object

Utility class for generating certificate metadata.

Constructor Summary

Constructors

Constructor and Description
CertificateMetadata(X509Certificate certificate)

Method Summary

Modifier and Type	Method and Description
Map<String,String>	getCelVars() Get the certificate metadata variables for Cert Identity Pool CEL filter evaluation.
String	getCn() Get the CN (Common Name) of the certificate.
String	getDn() Get the subject DN of the certificate.
String	getIssuerDn() Get the Issuer DN of the certificate (in RFC2253 format).
static String	getIssuerDn(X509CRL crlEntry) Get the Issuer DN of the CRL entry (in RFC2253 format).
String	getSan() Get the subject alternative name of the certificate.
static String	getSerialNumber(X509CRLEntry crlEntry)
String	getSha1() Get the SHA-1 fingerprint of the certificate.
String	getSnid() Get the serial number of the certificate.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateMetadata

public CertificateMetadata(X509Certificate certificate)

Method Detail

getCelVars

public Map<String,String> getCelVars()

Get the certificate metadata variables for Cert Identity Pool CEL filter evaluation. The variables (mapping of key value) include: 1. "DN" subject DN, 2. DN components, including (inclusive): DC, CN, OU, O, STREET, L, ST, C, and UID, 3. "SAN" subject alternative name, 4. "SNID" serial number, and 5. SHA-1 fingerprint. If any of the metadata is not available, the corresponding variable is not included in the result.

getIssuerDn

public String getIssuerDn()

Get the Issuer DN of the certificate (in RFC2253 format).

getDn

public String getDn()

Get the subject DN of the certificate.

getSan

public String getSan()

Get the subject alternative name of the certificate.

getCn

public String getCn()

Get the CN (Common Name) of the certificate.

getSnid

public String getSnid()

Get the serial number of the certificate.

getSha1

public String getSha1()

Get the SHA-1 fingerprint of the certificate.

getIssuerDn

public static String getIssuerDn(X509CRL crlEntry)

Get the Issuer DN of the CRL entry (in RFC2253 format).

getSerialNumber

public static String getSerialNumber(X509CRLEntry crlEntry)