Examples with JcaX509CertificateConverter org.bouncycastle.cert.jcajce.JcaX509CertificateConverter used on opensource projects

Example 26 with JcaX509CertificateConverter

use of org.bouncycastle.cert.jcajce.JcaX509CertificateConverter in project ddf by codice.

the class CertificateAuthority method sign.

public KeyStore.PrivateKeyEntry sign(CertificateSigningRequest csr) {
    //Converters, holders, and builders! Oh my!
    JcaX509v3CertificateBuilder builder = csr.newCertificateBuilder(getCertificate());
    X509CertificateHolder holder = builder.build(getContentSigner());
    JcaX509CertificateConverter converter = newCertConverter();
    X509Certificate signedCert;
    try {
        signedCert = converter.getCertificate(holder);
    } catch (CertificateException e) {
        throw new CertificateGeneratorException("Could not create signed certificate.", e.getCause());
    }
    X509Certificate[] chain = new X509Certificate[2];
    chain[0] = signedCert;
    chain[1] = getCertificate();
    return new KeyStore.PrivateKeyEntry(csr.getSubjectPrivateKey(), chain);
}