CODEWITHSUNDEEP
certificatedeprecatedbouncycastlex509
Steffen Heil
Steffen Heil

Reputation: 4346

Bouncycastle: X509CertificateHolder to X509Certificate?

In versions prior to r146 it was possible to create X509Certificate objects directly. Now that API is deprecated and the new one only deliveres a X509CertificateHolder object.

I cannot find a way to transform a X509CertificateHolder to X509Certificate.

How can this be done?

Upvotes: 50

Views: 24413

Answers (3)

Steffen Heil
Steffen Heil

Reputation: 4346

I will answer to my own questions, but not delete it, in case someone else got the same problems:

return new JcaX509CertificateConverter().getCertificate(certificateHolder);

And for attribute certificates:

return new X509V2AttributeCertificate(attributeCertificateHolder.getEncoded());

Not nice, as it is encoding and decoding, but it works.

Upvotes: 101

Paul
Paul

Reputation: 1

This is an possibility to get the X509CertificateHolder to X509Certificate and toString. (first sentence of the code is irrelevant)

X509CertificateHolder selfSignedCertificate = CertificateUtils.selfSignCertificate(certificationRequest, keyPair.getPrivate());
byte[] content = selfSignedCertificate.getEncoded();
CertificateFactory certificateFactory = CertificateFactory.getInstance("X.509");
X509Certificate cert = (X509Certificate) certificateFactory.generateCertificate(new ByteArrayInputStream(content));
logger.debug("cert: {}", cert.toString());

........

Upvotes: -2

Diego Palomar
Diego Palomar

Reputation: 7061

Another option is this one :)

CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
InputStream in = new ByteArrayInputStream(certificateHolder.getEncoded());
X509Certificate cert = (X509Certificate) certFactory.generateCertificate(in);

Upvotes: 5

Related Questions