Package com.venafi.vcert.sdk.connectors.tpp

Class TppConnector

java.lang.Object

com.venafi.vcert.sdk.connectors.tpp.AbstractTppConnector

com.venafi.vcert.sdk.connectors.tpp.TppConnector

All Implemented Interfaces:

Connector

public class TppConnector
extends AbstractTppConnector
implements Connector

Nested Class Summary

Nested classes/interfaces inherited from class com.venafi.vcert.sdk.connectors.tpp.AbstractTppConnector

AbstractTppConnector.AuthorizeRequest, AbstractTppConnector.CertificateRenewalRequest, AbstractTppConnector.CertificateRequestsPayload, AbstractTppConnector.CertificateRetrieveRequest, AbstractTppConnector.CertificateRevokeRequest, AbstractTppConnector.NameValuePair<K,V>, AbstractTppConnector.ReadZoneConfigurationRequest, AbstractTppConnector.ReadZoneConfigurationResponse, AbstractTppConnector.SANItem

Field Summary

Fields inherited from class com.venafi.vcert.sdk.connectors.tpp.AbstractTppConnector

FAILED_TO_AUTHENTICATE_MESSAGE, HEADER_VALUE_AUTHORIZATION, MISSING_ACCESS_TOKEN_MESSAGE, MISSING_CREDENTIALS_MESSAGE, MISSING_REFRESH_TOKEN_MESSAGE, revocationReasons, tpp, TPP_ATTRIBUTE_MANAGEMENT_TYPE, TPP_ATTRIBUTE_MANUAL_CSR, vendorAndProductName, zone

Constructor Summary

Constructors

Constructor	Description
TppConnector(Tpp tpp)

Method Summary

Modifier and Type	Method	Description
void	authenticate(Authentication auth)	Authenticate the user with Venafi using either API key for Venafi Cloud or user and password for TPP
CertificateRequest	generateRequest(ZoneConfiguration config, CertificateRequest request)	GenerateRequest creates a new certificate request, based on the zone/policy configuration and the user data
PolicySpecification	getPolicy(String policyName)	Returns the policySpecification from the policy which matches with the policyName argument.
protected TppAPI	getTppAPI()
ConnectorType	getType()
String	getVendorAndProductName()
ImportResponse	importCertificate(ImportRequest request)	Import an external certificate into Venafi.
void	ping()	Attempt to connect the Venafi API and returns an error if it cannot
Policy	readPolicyConfiguration(String zone)	Reads the policy configuration for a specific zone in Venafi
ZoneConfiguration	readZoneConfiguration(String zone)	Reads the zone configuration needed for generating and requesting a certificate
String	renewCertificate(RenewalRequest request)	Attempts to renew a certificate
String	requestCertificate(CertificateRequest request, ZoneConfiguration zoneConfiguration)	Submits the CSR to Venafi for processing
String	requestCertificate(CertificateRequest request, String zone)	Submits the CSR to Venafi for processing
String	requestSshCertificate(SshCertificateRequest sshCertificateRequest)	Request a new SSH Certificate.
PEMCollection	retrieveCertificate(CertificateRequest request)	Retrieves the certificate for the specific ID
SshCertRetrieveDetails	retrieveSshCertificate(SshCertificateRequest sshCertificateRequest)	Retrieve a requested SSH Certificate
SshConfig	retrieveSshConfig(SshCaTemplateRequest sshCaTemplateRequest)	Retrieve the SshConfig of the CA specified in the SshCaTemplateRequest.
void	revokeCertificate(RevocationRequest request)	Attempts to revoke a certificate
void	setBaseUrl(String url)	Allows overriding the default URL used to communicate with Venafi
void	setPolicy(String policyName, PolicySpecification policySpecification)	Create/update a policy based on the policySpecification passed as argument.
void	setVendorAndProductName(String vendorAndProductName)	Set the vendor and product name
void	setZone(String zone)	Set the default zone

Methods inherited from class com.venafi.vcert.sdk.connectors.tpp.AbstractTppConnector

getTPPPolicy, requestTppSshCertificate, retrieveTppSshCertificate, retrieveTppSshConfig, setPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TppConnector

public TppConnector(Tpp tpp)

Method Detail

getType

public ConnectorType getType()

Specified by:

getType in interface Connector

Returns:

ConnectorType the type of connector Cloud or TPP

setBaseUrl

public void setBaseUrl(String url)
                throws VCertException

Description copied from interface: Connector

Allows overriding the default URL used to communicate with Venafi

Specified by:

setBaseUrl in interface Connector

Throws:

VCertException

setZone

public void setZone(String zone)

Description copied from interface: Connector

Set the default zone

Specified by:

setZone in interface Connector

setVendorAndProductName

public void setVendorAndProductName(String vendorAndProductName)

Description copied from interface: Connector

Set the vendor and product name

Specified by:

setVendorAndProductName in interface Connector

getVendorAndProductName

public String getVendorAndProductName()

Specified by:

getVendorAndProductName in interface Connector

Returns:

the vendor and product name

ping

public void ping()
          throws VCertException

Description copied from interface: Connector

Attempt to connect the Venafi API and returns an error if it cannot

Specified by:

ping in interface Connector

Throws:

VCertException

authenticate

public void authenticate(Authentication auth)
                  throws VCertException

Description copied from interface: Connector

Authenticate the user with Venafi using either API key for Venafi Cloud or user and password for TPP

Specified by:

authenticate in interface Connector

Throws:

VCertException

readZoneConfiguration

public ZoneConfiguration readZoneConfiguration(String zone)
                                        throws VCertException

Description copied from interface: Connector

Reads the zone configuration needed for generating and requesting a certificate

Specified by:

readZoneConfiguration in interface Connector

Parameters:

zone - ID (e.g. 2ebd4ec1-57f7-4994-8651-e396b286a3a8) or zone path (e.g. "ProjectName\ZoneName")

Returns:

Throws:

VCertException

generateRequest

public CertificateRequest generateRequest(ZoneConfiguration config,
                                          CertificateRequest request)
                                   throws VCertException

Description copied from interface: Connector

GenerateRequest creates a new certificate request, based on the zone/policy configuration and the user data

Specified by:

generateRequest in interface Connector

Returns:

the zone configuration

Throws:

VCertException

requestCertificate

public String requestCertificate(CertificateRequest request,
                                 String zone)
                          throws VCertException

Description copied from interface: Connector

Submits the CSR to Venafi for processing

Specified by:

requestCertificate in interface Connector

Returns:

request id to track the certificate status.

Throws:

VCertException

requestCertificate

public String requestCertificate(CertificateRequest request,
                                 ZoneConfiguration zoneConfiguration)
                          throws VCertException

Description copied from interface: Connector

Submits the CSR to Venafi for processing

Specified by:

requestCertificate in interface Connector

Returns:

request id to track the certificate status.

Throws:

VCertException

retrieveCertificate

public PEMCollection retrieveCertificate(CertificateRequest request)
                                  throws VCertException

Description copied from interface: Connector

Retrieves the certificate for the specific ID

Specified by:

retrieveCertificate in interface Connector

Returns:

A collection of PEM files including certificate, chain and potentially a private key.

Throws:

VCertException

revokeCertificate

public void revokeCertificate(RevocationRequest request)
                       throws VCertException

Description copied from interface: Connector

Attempts to revoke a certificate

Specified by:

revokeCertificate in interface Connector

Throws:

VCertException

renewCertificate

public String renewCertificate(RenewalRequest request)
                        throws VCertException

Description copied from interface: Connector

Attempts to renew a certificate

Specified by:

renewCertificate in interface Connector

Returns:

Throws:

VCertException

importCertificate

public ImportResponse importCertificate(ImportRequest request)
                                 throws VCertException

Description copied from interface: Connector

Import an external certificate into Venafi.

Specified by:

importCertificate in interface Connector

Returns:

Throws:

VCertException

readPolicyConfiguration

public Policy readPolicyConfiguration(String zone)
                               throws VCertException

Description copied from interface: Connector

Reads the policy configuration for a specific zone in Venafi

Specified by:

readPolicyConfiguration in interface Connector

Returns:

Throws:

VCertException

setPolicy

public void setPolicy(String policyName,
                      PolicySpecification policySpecification)
               throws VCertException

Description copied from interface: Connector

Create/update a policy based on the policySpecification passed as argument.

Specified by:

setPolicy in interface Connector

Throws:

VCertException

getPolicy

public PolicySpecification getPolicy(String policyName)
                              throws VCertException

Description copied from interface: Connector

Returns the policySpecification from the policy which matches with the policyName argument.

Specified by:

getPolicy in interface Connector

Returns:

Throws:

VCertException

requestSshCertificate

public String requestSshCertificate(SshCertificateRequest sshCertificateRequest)
                             throws VCertException

Description copied from interface: Connector

Request a new SSH Certificate.

Specified by:

requestSshCertificate in interface Connector

Parameters:

sshCertificateRequest - The SshCertificateRequest instance needed to do the request. For more information about of which properties should be filled, please review the documentation of SshCertificateRequest.

Returns:

The DN of the created SSH certificate object. It can be used as pickup ID to retrieve the created SSH Certificate. For more details review the retrieveSshCertificate(SshCertificateRequest) method.

Throws:

VCertException

retrieveSshCertificate

public SshCertRetrieveDetails retrieveSshCertificate(SshCertificateRequest sshCertificateRequest)
                                              throws VCertException

Description copied from interface: Connector

Retrieve a requested SSH Certificate

Specified by:

retrieveSshCertificate in interface Connector

Parameters:

sshCertificateRequest - The SshCertificateRequest instance needed to do the request.
It's mandatory to set the PickUpID which is the value of the DN returned when the SSH Certificate was requested. For more information about of which properties should be filled, please review the documentation of SshCertificateRequest.

Returns:

A SshCertRetrieveDetails containing the Certificate Data of the created Certificate.

Throws:

VCertException

retrieveSshConfig

public SshConfig retrieveSshConfig(SshCaTemplateRequest sshCaTemplateRequest)
                            throws VCertException

Description copied from interface: Connector

Retrieve the SshConfig of the CA specified in the SshCaTemplateRequest.

Specified by:

retrieveSshConfig in interface Connector

Returns:

A SshConfig.

Throws:

VCertException

getTppAPI

protected TppAPI getTppAPI()

Specified by:

getTppAPI in class AbstractTppConnector