http://www.bouncycastle.org/java.html: The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.
  • The Legion of the Bouncy Castle Inc. 
public class org.bouncycastle.est.jcajce.JcaJceUtils
  minor version: 0
  major version: 59
  flags: flags: (0x0021) ACC_PUBLIC, ACC_SUPER
  this_class: org.bouncycastle.est.jcajce.JcaJceUtils
  super_class: java.lang.Object
{
  public void <init>();
    descriptor: ()V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.bouncycastle.est.jcajce.JcaJceUtils this
         0: .line 35
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
            return
        end local 0 // org.bouncycastle.est.jcajce.JcaJceUtils this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/bouncycastle/est/jcajce/JcaJceUtils;

  public static javax.net.ssl.X509TrustManager getTrustAllTrustManager();
    descriptor: ()Ljavax/net/ssl/X509TrustManager;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=2, locals=0, args_size=0
         0: .line 46
            new org.bouncycastle.est.jcajce.JcaJceUtils$1
            dup
            invokespecial org.bouncycastle.est.jcajce.JcaJceUtils$1.<init>:()V
            areturn
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  public static javax.net.ssl.X509TrustManager[] getCertPathTrustManager(java.util.Set<java.security.cert.TrustAnchor>, java.security.cert.CRL[]);
    descriptor: (Ljava/util/Set;[Ljava/security/cert/CRL;)[Ljavax/net/ssl/X509TrustManager;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=8, locals=6, args_size=2
        start local 0 // java.util.Set anchors
        start local 1 // java.security.cert.CRL[] revocationLists
         0: .line 70
            aload 0 /* anchors */
            invokeinterface java.util.Set.size:()I
            anewarray java.security.cert.X509Certificate
            astore 2 /* x509CertificateTrustAnchors */
        start local 2 // java.security.cert.X509Certificate[] x509CertificateTrustAnchors
         1: .line 71
            iconst_0
            istore 3 /* c */
        start local 3 // int c
         2: .line 72
            aload 0 /* anchors */
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 4 /* it */
        start local 4 // java.util.Iterator it
         3: goto 6
         4: .line 74
      StackMap locals: java.security.cert.X509Certificate[] int java.util.Iterator
      StackMap stack:
            aload 4 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.TrustAnchor
            astore 5 /* ta */
        start local 5 // java.security.cert.TrustAnchor ta
         5: .line 76
            aload 2 /* x509CertificateTrustAnchors */
            iload 3 /* c */
            iinc 3 /* c */ 1
            aload 5 /* ta */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            aastore
        end local 5 // java.security.cert.TrustAnchor ta
         6: .line 72
      StackMap locals:
      StackMap stack:
            aload 4 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 4
        end local 4 // java.util.Iterator it
         7: .line 79
            iconst_1
            anewarray javax.net.ssl.X509TrustManager
            dup
            iconst_0
            new org.bouncycastle.est.jcajce.JcaJceUtils$2
            dup
            aload 0 /* anchors */
            aload 1 /* revocationLists */
            aload 2 /* x509CertificateTrustAnchors */
            invokespecial org.bouncycastle.est.jcajce.JcaJceUtils$2.<init>:(Ljava/util/Set;[Ljava/security/cert/CRL;[Ljava/security/cert/X509Certificate;)V
            aastore
            areturn
        end local 3 // int c
        end local 2 // java.security.cert.X509Certificate[] x509CertificateTrustAnchors
        end local 1 // java.security.cert.CRL[] revocationLists
        end local 0 // java.util.Set anchors
      LocalVariableTable:
        Start  End  Slot                         Name  Signature
            0    8     0                      anchors  Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;
            0    8     1              revocationLists  [Ljava/security/cert/CRL;
            1    8     2  x509CertificateTrustAnchors  [Ljava/security/cert/X509Certificate;
            2    8     3                            c  I
            3    7     4                           it  Ljava/util/Iterator;
            5    6     5                           ta  Ljava/security/cert/TrustAnchor;
    Signature: (Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;[Ljava/security/cert/CRL;)[Ljavax/net/ssl/X509TrustManager;
    MethodParameters:
                 Name  Flags
      anchors          final
      revocationLists  final

  public static void validateServerCertUsage(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=4, locals=4, args_size=1
        start local 0 // java.security.cert.X509Certificate x509Certificate
         0: .line 150
            new org.bouncycastle.cert.X509CertificateHolder
            dup
            aload 0 /* x509Certificate */
            invokevirtual java.security.cert.X509Certificate.getEncoded:()[B
            invokespecial org.bouncycastle.cert.X509CertificateHolder.<init>:([B)V
            astore 1 /* cert */
        start local 1 // org.bouncycastle.cert.X509CertificateHolder cert
         1: .line 152
            aload 1 /* cert */
            invokevirtual org.bouncycastle.cert.X509CertificateHolder.getExtensions:()Lorg/bouncycastle/asn1/x509/Extensions;
            invokestatic org.bouncycastle.asn1.x509.KeyUsage.fromExtensions:(Lorg/bouncycastle/asn1/x509/Extensions;)Lorg/bouncycastle/asn1/x509/KeyUsage;
            astore 2 /* keyUsage */
        start local 2 // org.bouncycastle.asn1.x509.KeyUsage keyUsage
         2: .line 154
            aload 2 /* keyUsage */
            ifnull 7
         3: .line 156
            aload 2 /* keyUsage */
            iconst_4
            invokevirtual org.bouncycastle.asn1.x509.KeyUsage.hasUsages:(I)Z
            ifeq 5
         4: .line 158
            new java.security.cert.CertificateException
            dup
            ldc "Key usage must not contain keyCertSign"
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
         5: .line 161
      StackMap locals: org.bouncycastle.cert.X509CertificateHolder org.bouncycastle.asn1.x509.KeyUsage
      StackMap stack:
            aload 2 /* keyUsage */
            sipush 128
            invokevirtual org.bouncycastle.asn1.x509.KeyUsage.hasUsages:(I)Z
            ifne 7
            aload 2 /* keyUsage */
            bipush 32
            invokevirtual org.bouncycastle.asn1.x509.KeyUsage.hasUsages:(I)Z
            ifne 7
         6: .line 163
            new java.security.cert.CertificateException
            dup
            ldc "Key usage must be none, digitalSignature or keyEncipherment"
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
         7: .line 170
      StackMap locals:
      StackMap stack:
            aload 1 /* cert */
            invokevirtual org.bouncycastle.cert.X509CertificateHolder.getExtensions:()Lorg/bouncycastle/asn1/x509/Extensions;
            invokestatic org.bouncycastle.asn1.x509.ExtendedKeyUsage.fromExtensions:(Lorg/bouncycastle/asn1/x509/Extensions;)Lorg/bouncycastle/asn1/x509/ExtendedKeyUsage;
            astore 3 /* extendedKeyUsage */
        start local 3 // org.bouncycastle.asn1.x509.ExtendedKeyUsage extendedKeyUsage
         8: .line 172
            aload 3 /* extendedKeyUsage */
            ifnull 17
         9: .line 174
            aload 3 /* extendedKeyUsage */
            getstatic org.bouncycastle.asn1.x509.KeyPurposeId.id_kp_serverAuth:Lorg/bouncycastle/asn1/x509/KeyPurposeId;
            invokevirtual org.bouncycastle.asn1.x509.ExtendedKeyUsage.hasKeyPurposeId:(Lorg/bouncycastle/asn1/x509/KeyPurposeId;)Z
            ifne 17
        10: .line 175
            aload 3 /* extendedKeyUsage */
            getstatic org.bouncycastle.asn1.x509.KeyPurposeId.id_kp_msSGC:Lorg/bouncycastle/asn1/x509/KeyPurposeId;
            invokevirtual org.bouncycastle.asn1.x509.ExtendedKeyUsage.hasKeyPurposeId:(Lorg/bouncycastle/asn1/x509/KeyPurposeId;)Z
            ifne 17
        11: .line 176
            aload 3 /* extendedKeyUsage */
            getstatic org.bouncycastle.asn1.x509.KeyPurposeId.id_kp_nsSGC:Lorg/bouncycastle/asn1/x509/KeyPurposeId;
            invokevirtual org.bouncycastle.asn1.x509.ExtendedKeyUsage.hasKeyPurposeId:(Lorg/bouncycastle/asn1/x509/KeyPurposeId;)Z
            ifne 17
        12: .line 178
            new java.security.cert.CertificateException
            dup
            ldc "Certificate extended key usage must include serverAuth, msSGC or nsSGC"
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
        end local 3 // org.bouncycastle.asn1.x509.ExtendedKeyUsage extendedKeyUsage
        end local 2 // org.bouncycastle.asn1.x509.KeyUsage keyUsage
        end local 1 // org.bouncycastle.cert.X509CertificateHolder cert
        13: .line 183
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack: java.security.cert.CertificateException
            astore 1 /* c */
        start local 1 // java.security.cert.CertificateException c
        14: .line 185
            aload 1 /* c */
            athrow
        end local 1 // java.security.cert.CertificateException c
        15: .line 187
      StackMap locals:
      StackMap stack: java.lang.Exception
            astore 1 /* e */
        start local 1 // java.lang.Exception e
        16: .line 189
            new java.security.cert.CertificateException
            dup
            aload 1 /* e */
            invokevirtual java.lang.Exception.getMessage:()Ljava/lang/String;
            aload 1 /* e */
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 1 // java.lang.Exception e
        17: .line 191
      StackMap locals:
      StackMap stack:
            return
        end local 0 // java.security.cert.X509Certificate x509Certificate
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0   18     0   x509Certificate  Ljava/security/cert/X509Certificate;
            1   13     1              cert  Lorg/bouncycastle/cert/X509CertificateHolder;
            2   13     2          keyUsage  Lorg/bouncycastle/asn1/x509/KeyUsage;
            8   13     3  extendedKeyUsage  Lorg/bouncycastle/asn1/x509/ExtendedKeyUsage;
           14   15     1                 c  Ljava/security/cert/CertificateException;
           16   17     1                 e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           0    13      13  Class java.security.cert.CertificateException
           0    13      15  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertificateException
    MethodParameters:
                 Name  Flags
      x509Certificate  

  public static javax.net.ssl.KeyManagerFactory createKeyManagerFactory(java.lang.String, java.lang.String, java.security.KeyStore, char[]);
    descriptor: (Ljava/lang/String;Ljava/lang/String;Ljava/security/KeyStore;[C)Ljavax/net/ssl/KeyManagerFactory;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=3, locals=5, args_size=4
        start local 0 // java.lang.String type
        start local 1 // java.lang.String provider
        start local 2 // java.security.KeyStore clientKeyStore
        start local 3 // char[] clientKeyStorePass
         0: .line 201
            aconst_null
            astore 4 /* keyManagerFactory */
        start local 4 // javax.net.ssl.KeyManagerFactory keyManagerFactory
         1: .line 202
            aload 0 /* type */
            ifnonnull 4
            aload 1 /* provider */
            ifnonnull 4
         2: .line 204
            invokestatic javax.net.ssl.KeyManagerFactory.getDefaultAlgorithm:()Ljava/lang/String;
            invokestatic javax.net.ssl.KeyManagerFactory.getInstance:(Ljava/lang/String;)Ljavax/net/ssl/KeyManagerFactory;
            astore 4 /* keyManagerFactory */
         3: .line 205
            goto 8
         4: .line 206
      StackMap locals: javax.net.ssl.KeyManagerFactory
      StackMap stack:
            aload 1 /* provider */
            ifnonnull 7
         5: .line 208
            aload 0 /* type */
            invokestatic javax.net.ssl.KeyManagerFactory.getInstance:(Ljava/lang/String;)Ljavax/net/ssl/KeyManagerFactory;
            astore 4 /* keyManagerFactory */
         6: .line 209
            goto 8
         7: .line 212
      StackMap locals:
      StackMap stack:
            aload 0 /* type */
            aload 1 /* provider */
            invokestatic javax.net.ssl.KeyManagerFactory.getInstance:(Ljava/lang/String;Ljava/lang/String;)Ljavax/net/ssl/KeyManagerFactory;
            astore 4 /* keyManagerFactory */
         8: .line 214
      StackMap locals:
      StackMap stack:
            aload 4 /* keyManagerFactory */
            aload 2 /* clientKeyStore */
            aload 3 /* clientKeyStorePass */
            invokevirtual javax.net.ssl.KeyManagerFactory.init:(Ljava/security/KeyStore;[C)V
         9: .line 215
            aload 4 /* keyManagerFactory */
            areturn
        end local 4 // javax.net.ssl.KeyManagerFactory keyManagerFactory
        end local 3 // char[] clientKeyStorePass
        end local 2 // java.security.KeyStore clientKeyStore
        end local 1 // java.lang.String provider
        end local 0 // java.lang.String type
      LocalVariableTable:
        Start  End  Slot                Name  Signature
            0   10     0                type  Ljava/lang/String;
            0   10     1            provider  Ljava/lang/String;
            0   10     2      clientKeyStore  Ljava/security/KeyStore;
            0   10     3  clientKeyStorePass  [C
            1   10     4   keyManagerFactory  Ljavax/net/ssl/KeyManagerFactory;
    Exceptions:
      throws java.security.UnrecoverableKeyException, java.security.NoSuchAlgorithmException, java.security.KeyStoreException, java.security.NoSuchProviderException
    MethodParameters:
                    Name  Flags
      type                
      provider            
      clientKeyStore      
      clientKeyStorePass  
}
SourceFile: "JcaJceUtils.java"
NestMembers:
  org.bouncycastle.est.jcajce.JcaJceUtils$1  org.bouncycastle.est.jcajce.JcaJceUtils$2
InnerClasses:
  org.bouncycastle.est.jcajce.JcaJceUtils$1
  org.bouncycastle.est.jcajce.JcaJceUtils$2