KeyUsage Type — netty Architecture

Source Code

pkitesting/src/main/java/io/netty/pkitesting/CertificateBuilder.java lines 1214–1271

    public enum KeyUsage {
        /**
         * For verifying digital signatures, for entity authentication,
         * for entity authentication, or for integrity verification.
         */
        digitalSignature(0),
        /**
         * This key usage is deprecated by X.509, and commitment may instead be derived from the actual use of the keys.
         * <p>
         * For verifying digital signatures that imply the signer has "committed" to the
         * content being signed. This does not imply any specific policy or review on part of the signer, however.
         */
        contentCommitment(1),
        /**
         * For enciphering keys or other security information.
         */
        keyEncipherment(2),
        /**
         * For enciphering user data, but not keys or security information.
         */
        dataEncipherment(3),
        /**
         * For use in public key agreement.
         */
        keyAgreement(4),
        /**
         * For verifying the Certificate Authority's signature on a public-key certificate.
         * <p>
         * This implies {@link #digitalSignature} and {@link #contentCommitment}, so they do not need to be specified
         * separately.
         */
        keyCertSign(5),
        /**
         * For verifying the Certificate Authority's signature on a Certificate Revocation List.
         * <p>
         * This implies {@link #digitalSignature} and {@link #contentCommitment}, so they do not need to be specified
         * separately.
         */
        cRLSign(6),
        /**
         * For use with {@link #keyAgreement} to limit the key to enciphering only.
         * <p>
         * The meaning of this without the {@link #keyAgreement} bit set is unspecified.
         */
        encipherOnly(7),
        /**
         * For use with {@link #keyAgreement} to limit the key to deciphering only.
         * <p>
         * The meaning of this without the {@link #keyAgreement} bit set is unspecified.
         */
        decipherOnly(8);

        private final int bitId;

        KeyUsage(int bitId) {
            this.bitId = bitId;
        }
    }