certificatebuilder
Simple Builder API for X.509 certificates using Bouncy Castle.
Usage
Maven dependency:
<dependency>
<groupId>de.mklinger.commons</groupId>
<artifactId>certificatebuilder</artifactId>
<version>1.0</version>
</dependency>
Create a self-signed server certificate:
CertificateAndKeyPair certificateAndKeyPair = new CertificateBuilder()
.subjectCn("selfsigned-cert")
.subjectO("My Organization")
.serverAuth(true)
.dnsSan("example.org")
.ipSan("127.0.0.1")
.validDays(365)
.keySize(2048)
.build();
Create CA root certificate, intermediated certificate and signed certificate:
CertificateAndKeyPair root = new CertificateBuilder()
.subjectCn("ca-root")
.ca()
.build();
CertificateAndKeyPair intermediate = new CertificateBuilder()
.subjectCn("ca-intermediate")
.ca()
.validDays(365)
.issuer(root)
.build();
CertificateAndKeyPair cert = new CertificateBuilder()
.subjectCn("cert")
.validDays(365)
.issuer(intermediate)
.serverAuth(true)
.dnsSan("example.org")
.ipSan("127.0.0.1")
.build();
PrivateKey privateKey = certificateAndKeyPair.getKeyPair().getPrivate();
Certificate[] certificateChain = {
cert.getCertificate(),
intermediate.getCertificate(),
root.getCertificate()
};