Package net.jsign.jca

Class AzureKeyVaultSigningService

java.lang.Object

net.jsign.jca.AzureKeyVaultSigningService

All Implemented Interfaces:

SigningService

public class AzureKeyVaultSigningService
extends Object
implements SigningService

Signing service using the Azure KeyVault API.

Since:

4.0

See Also:

Azure Key Vault REST API reference

Constructor Summary

Constructors

Constructor	Description
AzureKeyVaultSigningService(String vault, String token)	Creates a new Azure Key Vault signing service.

Method Summary

Modifier and Type	Method	Description
List<String>	aliases()	Returns the certificate aliases available.
Certificate[]	getCertificateChain(String alias)	Returns the certificate chain for the alias specified.
String	getName()	Returns the name of the service.
SigningServicePrivateKey	getPrivateKey(String alias, char[] password)	Returns the private key for the certificate alias specified.
byte[]	sign(SigningServicePrivateKey privateKey, String algorithm, byte[] data)	Sign the data with the private key specified.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AzureKeyVaultSigningService

public AzureKeyVaultSigningService(String vault,
                                   String token)

Creates a new Azure Key Vault signing service.

Parameters:

vault - the name of the key vault, either the short name (e.g. myvault), or the full URL (e.g. https://myvault.vault.azure.net).

token - the Azure API access token

Method Detail

getName

public String getName()

Description copied from interface: SigningService

Returns the name of the service.

Specified by:

getName in interface SigningService

aliases

public List<String> aliases()
                     throws KeyStoreException

Description copied from interface: SigningService

Returns the certificate aliases available.

Specified by:

aliases in interface SigningService

Throws:

KeyStoreException

getCertificateChain

public Certificate[] getCertificateChain(String alias)
                                  throws KeyStoreException

Description copied from interface: SigningService

Returns the certificate chain for the alias specified.

Specified by:

getCertificateChain in interface SigningService

Parameters:

alias - the name of the certificate

Throws:

KeyStoreException

getPrivateKey

public SigningServicePrivateKey getPrivateKey(String alias,
                                              char[] password)
                                       throws UnrecoverableKeyException

Description copied from interface: SigningService

Returns the private key for the certificate alias specified.

Specified by:

getPrivateKey in interface SigningService

Parameters:

alias - the name of the certificate

password - the secret required to access the key

Throws:

UnrecoverableKeyException

sign

public byte[] sign(SigningServicePrivateKey privateKey,
                   String algorithm,
                   byte[] data)
            throws GeneralSecurityException

Description copied from interface: SigningService

Sign the data with the private key specified.

Specified by:

sign in interface SigningService

Parameters:

privateKey - the private key

algorithm - the signing algorithm (for example SHA256withRSA)

data - the data to be signed

Throws:

GeneralSecurityException