Class PrivateKeyFile

Method Details

• main

  public static void main​(String[] args)

  Create a new PrivateKeyFile, or modify an existing one, with various types of Certificates. Changing a Certificate does not change the public or private keys. But it does change the Destination Hash, which effectively makes it a new Destination. In other words, don't change the Certificate on a Destination you've already registered in a hosts.txt key add form. Copied and expanded from that in Destination.java

• createIfAbsent

  public Destination createIfAbsent() throws I2PException, IOException, DataFormatException

  Create with the default signature type if nonexistent. Also reads in the file to get the privKey and signingPrivKey, which aren't available from I2PClient.

  Throws:

  I2PException

  IOException

  DataFormatException

• createIfAbsent

  public Destination createIfAbsent​(SigType type) throws I2PException, IOException, DataFormatException

  Create with the specified signature type if nonexistent. Also reads in the file to get the privKey and signingPrivKey, which aren't available from I2PClient.

  Throws:

  I2PException

  IOException

  DataFormatException

  Since:

  0.9.26

• getDestination

  public Destination getDestination() throws I2PSessionException, IOException, DataFormatException

  If the destination is not set, read it in from the file. Also sets the local privKey and signingPrivKey.

  Throws:

  I2PSessionException

  IOException

  DataFormatException

• setDestination

  public void setDestination​(Destination d)

• setCertType

  public Certificate setCertType​(int t)

  Change cert type - caller must also call write(). Side effect - creates new Destination object.

• setKeyCert

  public Certificate setKeyCert​(SigType type)

  Change cert type - caller must also call write(). Side effect - creates new Destination object.

  Since:

  0.9.12

• setHashCashCert

  public Certificate setHashCashCert​(int effort)

  change to hashcash cert - caller must also call write()

• setSignedCert

  public Certificate setSignedCert​(PrivateKeyFile pkf2)

  sign this dest by dest found in pkf2 - caller must also call write()

• getPrivKey

  public PrivateKey getPrivKey()

  Returns:

  null on error or if not initialized

• getSigningPrivKey

  public SigningPrivateKey getSigningPrivKey()

  Returns:

  null on error or if not initialized

• isOffline

  public boolean isOffline()

  Does this session have offline and transient keys?

  Since:

  0.9.38

• setOfflineData

  public void setOfflineData​(long expires, SigningPublicKey transientPub, Signature sig, SigningPrivateKey transientPriv)

  Side effect - zeroes out the current signing private key

  Since:

  0.9.38

• getOfflineExpiration

  public long getOfflineExpiration()

  Returns:

  Java time (ms) or 0 if not initialized or does not have offline keys

  Since:

  0.9.38

• getOfflineSignature

  public Signature getOfflineSignature()

  Since:

  0.9.38

• getTransientSigningPubKey

  public SigningPublicKey getTransientSigningPubKey()

  Returns:

  null on error or if not initialized or does not have offline keys

  Since:

  0.9.38

• getTransientSigningPrivKey

  public SigningPrivateKey getTransientSigningPrivKey()

  Returns:

  null on error or if not initialized or does not have offline keys

  Since:

  0.9.38

• open

  public I2PSession open() throws I2PSessionException, IOException

  Throws:

  I2PSessionException

  IOException

• open

  public I2PSession open​(Properties opts) throws I2PSessionException, IOException

  Throws:

  I2PSessionException

  IOException

• write

  public void write() throws IOException, DataFormatException

  Copied from I2PClientImpl.createDestination()

  Throws:

  IOException

  DataFormatException

• validateKeyPairs

  public boolean validateKeyPairs()

  Verify that the PublicKey matches the PrivateKey, and the SigningPublicKey matches the SigningPrivateKey.

  Returns:

  success

  Since:

  0.9.16

• toString

  public String toString()

  Overrides:

  toString in class Object

• estimateHashCashTime

  public static String estimateHashCashTime​(int hashEffort)

• verifySignature

  public static boolean verifySignature​(Destination d)

  Sample code to verify a 3rd party signature. This just goes through all the hosts.txt files and tries everybody. You need to be in the $I2P directory or have a local hosts.txt for this to work. Doubt this is what you want as it is super-slow, and what good is a signing scheme where anybody is allowed to sign? In a real application you would make a list of approved signers, do a naming lookup to get their Destinations, and try those only. Or do a netDb lookup of the Hash in the Certificate, do a reverse naming lookup to see if it is allowed, then verify the Signature.

• checkSignature

  public static boolean checkSignature​(Signature s, byte[] data, SigningPublicKey spk)