BouncyCastle - 从 X509Certificate object 创建商店

Question

Originally I hoped that the TimestampResponseGenerator would automatically include the public certificate in the response if the request had setCertReq(true) , but now my understanding is that I have to manually add them in the TimestampTokenGenerator using addCertificates(Store certStore) . However, I can only seem to get the certificate into a standard Java certStore , not a BouncyCastle Store , and I can't find a way to convert or create the Store object from scratch.

What is the easiest way to create a BouncyCastle 1.62+ Store object with an X509Certificate object?

The answer (and bounty) depend on being able to add certificates to the timestamp token in the end. The Store part is where I'm stuck.

Answer 1

The easiest way would probably be to use the JcaCertStore class. This can easily be initialized with a certificate collection and then be passed to your TimestampTokenGenerator using addCertificates .

In this example I did it through a method, since I don't have the exact context you want to place it in, but you can extract the two lines and place them wherever you want of course!

public void add(TimeStampTokenGenerator timeStampTokenGenerator, X509Certificate certificate) throws CertificateEncodingException {
    JcaCertStore store = new JcaCertStore(Collections.singleton(certificate));
    timeStampTokenGenerator.addCertificates(store);
}

Javadocs here