616 lines
28 KiB
Java
616 lines
28 KiB
Java
|
package org.bouncycastle.jcajce.provider.asymmetric.x509;
|
||
|
|
|
||
|
|
import java.io.ByteArrayOutputStream;
|
||
|
|
import java.io.IOException;
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import java.net.InetAddress;
|
||
|
|
import java.net.UnknownHostException;
|
||
|
|
import java.security.InvalidKeyException;
|
||
|
|
import java.security.NoSuchAlgorithmException;
|
||
|
|
import java.security.NoSuchProviderException;
|
||
|
|
import java.security.Principal;
|
||
|
|
import java.security.Provider;
|
||
|
|
import java.security.PublicKey;
|
||
|
|
import java.security.Signature;
|
||
|
|
import java.security.SignatureException;
|
||
|
|
import java.security.cert.CertificateEncodingException;
|
||
|
|
import java.security.cert.CertificateException;
|
||
|
|
import java.security.cert.CertificateExpiredException;
|
||
|
|
import java.security.cert.CertificateNotYetValidException;
|
||
|
|
import java.security.cert.CertificateParsingException;
|
||
|
|
import java.security.cert.X509Certificate;
|
||
|
|
import java.util.ArrayList;
|
||
|
|
import java.util.Collection;
|
||
|
|
import java.util.Collections;
|
||
|
|
import java.util.Date;
|
||
|
|
import java.util.Enumeration;
|
||
|
|
import java.util.HashSet;
|
||
|
|
import java.util.List;
|
||
|
|
import java.util.Set;
|
||
|
|
import javax.security.auth.x500.X500Principal;
|
||
|
|
import org.bouncycastle.asn1.ASN1Encodable;
|
||
|
|
import org.bouncycastle.asn1.ASN1Encoding;
|
||
|
|
import org.bouncycastle.asn1.ASN1InputStream;
|
||
|
|
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
|
||
|
|
import org.bouncycastle.asn1.ASN1OutputStream;
|
||
|
|
import org.bouncycastle.asn1.ASN1Primitive;
|
||
|
|
import org.bouncycastle.asn1.ASN1Sequence;
|
||
|
|
import org.bouncycastle.asn1.ASN1String;
|
||
|
|
import org.bouncycastle.asn1.DERBitString;
|
||
|
|
import org.bouncycastle.asn1.DERIA5String;
|
||
|
|
import org.bouncycastle.asn1.DERNull;
|
||
|
|
import org.bouncycastle.asn1.DEROctetString;
|
||
|
|
import org.bouncycastle.asn1.misc.MiscObjectIdentifiers;
|
||
|
|
import org.bouncycastle.asn1.misc.NetscapeCertType;
|
||
|
|
import org.bouncycastle.asn1.misc.NetscapeRevocationURL;
|
||
|
|
import org.bouncycastle.asn1.misc.VerisignCzagExtension;
|
||
|
|
import org.bouncycastle.asn1.util.ASN1Dump;
|
||
|
|
import org.bouncycastle.asn1.x500.X500Name;
|
||
|
|
import org.bouncycastle.asn1.x500.style.RFC4519Style;
|
||
|
|
import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
|
||
|
|
import org.bouncycastle.asn1.x509.BasicConstraints;
|
||
|
|
import org.bouncycastle.asn1.x509.Certificate;
|
||
|
|
import org.bouncycastle.asn1.x509.Extension;
|
||
|
|
import org.bouncycastle.asn1.x509.Extensions;
|
||
|
|
import org.bouncycastle.asn1.x509.GeneralName;
|
||
|
|
import org.bouncycastle.asn1.x509.KeyUsage;
|
||
|
|
import org.bouncycastle.jcajce.provider.asymmetric.util.PKCS12BagAttributeCarrierImpl;
|
||
|
|
import org.bouncycastle.jcajce.util.JcaJceHelper;
|
||
|
|
import org.bouncycastle.jce.X509Principal;
|
||
|
|
import org.bouncycastle.jce.interfaces.PKCS12BagAttributeCarrier;
|
||
|
|
import org.bouncycastle.jce.provider.BouncyCastleProvider;
|
||
|
|
import org.bouncycastle.util.Integers;
|
||
|
|
import org.bouncycastle.util.Strings;
|
||
|
|
import org.bouncycastle.util.encoders.Hex;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
class X509CertificateObject extends X509Certificate implements PKCS12BagAttributeCarrier {
|
||
|
|
private PKCS12BagAttributeCarrier attrCarrier = new PKCS12BagAttributeCarrierImpl();
|
||
|
|
private BasicConstraints basicConstraints;
|
||
|
|
private JcaJceHelper bcHelper;
|
||
|
|
private Certificate c;
|
||
|
|
private int hashValue;
|
||
|
|
private boolean hashValueSet;
|
||
|
|
private boolean[] keyUsage;
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate, java.security.cert.Certificate
|
||
|
|
public final void verify(PublicKey publicKey, Provider provider) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, SignatureException {
|
||
|
|
String signatureName = X509SignatureUtil.getSignatureName(this.c.getSignatureAlgorithm());
|
||
|
|
checkSignature(publicKey, provider != null ? Signature.getInstance(signatureName, provider) : Signature.getInstance(signatureName));
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.Certificate
|
||
|
|
public final void verify(PublicKey publicKey, String str) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException {
|
||
|
|
String signatureName = X509SignatureUtil.getSignatureName(this.c.getSignatureAlgorithm());
|
||
|
|
checkSignature(publicKey, str != null ? Signature.getInstance(signatureName, str) : Signature.getInstance(signatureName));
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.Certificate
|
||
|
|
public final void verify(PublicKey publicKey) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException {
|
||
|
|
Signature signature;
|
||
|
|
String signatureName = X509SignatureUtil.getSignatureName(this.c.getSignatureAlgorithm());
|
||
|
|
try {
|
||
|
|
signature = this.bcHelper.createSignature(signatureName);
|
||
|
|
} catch (Exception unused) {
|
||
|
|
signature = Signature.getInstance(signatureName);
|
||
|
|
}
|
||
|
|
checkSignature(publicKey, signature);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.Certificate
|
||
|
|
public String toString() {
|
||
|
|
StringBuffer append;
|
||
|
|
Object verisignCzagExtension;
|
||
|
|
StringBuffer append2;
|
||
|
|
String str;
|
||
|
|
StringBuffer stringBuffer = new StringBuffer(" [0] Version: ");
|
||
|
|
String lineSeparator = Strings.lineSeparator();
|
||
|
|
stringBuffer.append(getVersion()).append(lineSeparator);
|
||
|
|
stringBuffer.append(" SerialNumber: ").append(getSerialNumber()).append(lineSeparator);
|
||
|
|
stringBuffer.append(" IssuerDN: ").append(getIssuerDN()).append(lineSeparator);
|
||
|
|
stringBuffer.append(" Start Date: ").append(getNotBefore()).append(lineSeparator);
|
||
|
|
stringBuffer.append(" Final Date: ").append(getNotAfter()).append(lineSeparator);
|
||
|
|
stringBuffer.append(" SubjectDN: ").append(getSubjectDN()).append(lineSeparator);
|
||
|
|
stringBuffer.append(" Public Key: ").append(getPublicKey()).append(lineSeparator);
|
||
|
|
stringBuffer.append(" Signature Algorithm: ").append(getSigAlgName()).append(lineSeparator);
|
||
|
|
byte[] signature = getSignature();
|
||
|
|
stringBuffer.append(" Signature: ").append(new String(Hex.encode(signature, 0, 20))).append(lineSeparator);
|
||
|
|
for (int i = 20; i < signature.length; i += 20) {
|
||
|
|
if (i < signature.length - 20) {
|
||
|
|
append2 = stringBuffer.append(" ");
|
||
|
|
str = new String(Hex.encode(signature, i, 20));
|
||
|
|
} else {
|
||
|
|
append2 = stringBuffer.append(" ");
|
||
|
|
str = new String(Hex.encode(signature, i, signature.length - i));
|
||
|
|
}
|
||
|
|
append2.append(str).append(lineSeparator);
|
||
|
|
}
|
||
|
|
Extensions extensions = this.c.getTBSCertificate().getExtensions();
|
||
|
|
if (extensions != null) {
|
||
|
|
Enumeration oids = extensions.oids();
|
||
|
|
if (oids.hasMoreElements()) {
|
||
|
|
stringBuffer.append(" Extensions: \n");
|
||
|
|
}
|
||
|
|
while (oids.hasMoreElements()) {
|
||
|
|
ASN1ObjectIdentifier aSN1ObjectIdentifier = (ASN1ObjectIdentifier) oids.nextElement();
|
||
|
|
Extension extension = extensions.getExtension(aSN1ObjectIdentifier);
|
||
|
|
if (extension.getExtnValue() != null) {
|
||
|
|
ASN1InputStream aSN1InputStream = new ASN1InputStream(extension.getExtnValue().getOctets());
|
||
|
|
stringBuffer.append(" critical(").append(extension.isCritical()).append(") ");
|
||
|
|
try {
|
||
|
|
if (aSN1ObjectIdentifier.equals(Extension.basicConstraints)) {
|
||
|
|
verisignCzagExtension = BasicConstraints.getInstance(aSN1InputStream.readObject());
|
||
|
|
} else if (aSN1ObjectIdentifier.equals(Extension.keyUsage)) {
|
||
|
|
verisignCzagExtension = KeyUsage.getInstance(aSN1InputStream.readObject());
|
||
|
|
} else if (aSN1ObjectIdentifier.equals(MiscObjectIdentifiers.netscapeCertType)) {
|
||
|
|
verisignCzagExtension = new NetscapeCertType((DERBitString) aSN1InputStream.readObject());
|
||
|
|
} else if (aSN1ObjectIdentifier.equals(MiscObjectIdentifiers.netscapeRevocationURL)) {
|
||
|
|
verisignCzagExtension = new NetscapeRevocationURL((DERIA5String) aSN1InputStream.readObject());
|
||
|
|
} else if (aSN1ObjectIdentifier.equals(MiscObjectIdentifiers.verisignCzagExtension)) {
|
||
|
|
verisignCzagExtension = new VerisignCzagExtension((DERIA5String) aSN1InputStream.readObject());
|
||
|
|
} else {
|
||
|
|
stringBuffer.append(aSN1ObjectIdentifier.getId());
|
||
|
|
append = stringBuffer.append(" value = ").append(ASN1Dump.dumpAsString(aSN1InputStream.readObject()));
|
||
|
|
append.append(lineSeparator);
|
||
|
|
}
|
||
|
|
append = stringBuffer.append(verisignCzagExtension);
|
||
|
|
append.append(lineSeparator);
|
||
|
|
} catch (Exception unused) {
|
||
|
|
stringBuffer.append(aSN1ObjectIdentifier.getId());
|
||
|
|
stringBuffer.append(" value = *****").append(lineSeparator);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
stringBuffer.append(lineSeparator);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return stringBuffer.toString();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.jce.interfaces.PKCS12BagAttributeCarrier
|
||
|
|
public void setBagAttribute(ASN1ObjectIdentifier aSN1ObjectIdentifier, ASN1Encodable aSN1Encodable) {
|
||
|
|
this.attrCarrier.setBagAttribute(aSN1ObjectIdentifier, aSN1Encodable);
|
||
|
|
}
|
||
|
|
|
||
|
|
public int originalHashCode() {
|
||
|
|
try {
|
||
|
|
byte[] encoded = getEncoded();
|
||
|
|
int i = 0;
|
||
|
|
for (int i2 = 1; i2 < encoded.length; i2++) {
|
||
|
|
i += encoded[i2] * i2;
|
||
|
|
}
|
||
|
|
return i;
|
||
|
|
} catch (CertificateEncodingException unused) {
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.Certificate
|
||
|
|
public int hashCode() {
|
||
|
|
int i;
|
||
|
|
synchronized (this) {
|
||
|
|
if (!this.hashValueSet) {
|
||
|
|
this.hashValue = super.hashCode();
|
||
|
|
this.hashValueSet = true;
|
||
|
|
}
|
||
|
|
i = this.hashValue;
|
||
|
|
}
|
||
|
|
return i;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public boolean hasUnsupportedCriticalExtension() {
|
||
|
|
Extensions extensions;
|
||
|
|
if (getVersion() != 3 || (extensions = this.c.getTBSCertificate().getExtensions()) == null) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
Enumeration oids = extensions.oids();
|
||
|
|
while (oids.hasMoreElements()) {
|
||
|
|
ASN1ObjectIdentifier aSN1ObjectIdentifier = (ASN1ObjectIdentifier) oids.nextElement();
|
||
|
|
if (!aSN1ObjectIdentifier.equals(Extension.keyUsage) && !aSN1ObjectIdentifier.equals(Extension.certificatePolicies) && !aSN1ObjectIdentifier.equals(Extension.policyMappings) && !aSN1ObjectIdentifier.equals(Extension.inhibitAnyPolicy) && !aSN1ObjectIdentifier.equals(Extension.cRLDistributionPoints) && !aSN1ObjectIdentifier.equals(Extension.issuingDistributionPoint) && !aSN1ObjectIdentifier.equals(Extension.deltaCRLIndicator) && !aSN1ObjectIdentifier.equals(Extension.policyConstraints) && !aSN1ObjectIdentifier.equals(Extension.basicConstraints) && !aSN1ObjectIdentifier.equals(Extension.subjectAlternativeName) && !aSN1ObjectIdentifier.equals(Extension.nameConstraints) && extensions.getExtension(aSN1ObjectIdentifier).isCritical()) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public int getVersion() {
|
||
|
|
return this.c.getVersionNumber();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public byte[] getTBSCertificate() throws CertificateEncodingException {
|
||
|
|
try {
|
||
|
|
return this.c.getTBSCertificate().getEncoded(ASN1Encoding.DER);
|
||
|
|
} catch (IOException e) {
|
||
|
|
throw new CertificateEncodingException(e.toString());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public X500Principal getSubjectX500Principal() {
|
||
|
|
try {
|
||
|
|
ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
|
||
|
|
new ASN1OutputStream(byteArrayOutputStream).writeObject(this.c.getSubject());
|
||
|
|
return new X500Principal(byteArrayOutputStream.toByteArray());
|
||
|
|
} catch (IOException unused) {
|
||
|
|
throw new IllegalStateException("can't encode issuer DN");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public boolean[] getSubjectUniqueID() {
|
||
|
|
DERBitString subjectUniqueId = this.c.getTBSCertificate().getSubjectUniqueId();
|
||
|
|
if (subjectUniqueId == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
byte[] bytes = subjectUniqueId.getBytes();
|
||
|
|
int length = (bytes.length << 3) - subjectUniqueId.getPadBits();
|
||
|
|
boolean[] zArr = new boolean[length];
|
||
|
|
for (int i = 0; i != length; i++) {
|
||
|
|
zArr[i] = (bytes[i / 8] & (128 >>> (i % 8))) != 0;
|
||
|
|
}
|
||
|
|
return zArr;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public Principal getSubjectDN() {
|
||
|
|
return new X509Principal(X500Name.getInstance(this.c.getSubject().toASN1Primitive()));
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public Collection getSubjectAlternativeNames() throws CertificateParsingException {
|
||
|
|
return getAlternativeNames(getExtensionBytes(Extension.subjectAlternativeName.getId()));
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public byte[] getSignature() {
|
||
|
|
return this.c.getSignature().getOctets();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public byte[] getSigAlgParams() {
|
||
|
|
if (this.c.getSignatureAlgorithm().getParameters() == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
return this.c.getSignatureAlgorithm().getParameters().toASN1Primitive().getEncoded(ASN1Encoding.DER);
|
||
|
|
} catch (IOException unused) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public String getSigAlgOID() {
|
||
|
|
return this.c.getSignatureAlgorithm().getAlgorithm().getId();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public String getSigAlgName() {
|
||
|
|
return X509SignatureUtil.getSignatureName(this.c.getSignatureAlgorithm());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public BigInteger getSerialNumber() {
|
||
|
|
return this.c.getSerialNumber().getValue();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.Certificate
|
||
|
|
public PublicKey getPublicKey() {
|
||
|
|
try {
|
||
|
|
return BouncyCastleProvider.getPublicKey(this.c.getSubjectPublicKeyInfo());
|
||
|
|
} catch (IOException unused) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public Date getNotBefore() {
|
||
|
|
return this.c.getStartDate().getDate();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public Date getNotAfter() {
|
||
|
|
return this.c.getEndDate().getDate();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public Set getNonCriticalExtensionOIDs() {
|
||
|
|
if (getVersion() != 3) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
HashSet hashSet = new HashSet();
|
||
|
|
Extensions extensions = this.c.getTBSCertificate().getExtensions();
|
||
|
|
if (extensions == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
Enumeration oids = extensions.oids();
|
||
|
|
while (oids.hasMoreElements()) {
|
||
|
|
ASN1ObjectIdentifier aSN1ObjectIdentifier = (ASN1ObjectIdentifier) oids.nextElement();
|
||
|
|
if (!extensions.getExtension(aSN1ObjectIdentifier).isCritical()) {
|
||
|
|
hashSet.add(aSN1ObjectIdentifier.getId());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return hashSet;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public boolean[] getKeyUsage() {
|
||
|
|
return this.keyUsage;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public X500Principal getIssuerX500Principal() {
|
||
|
|
try {
|
||
|
|
ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
|
||
|
|
new ASN1OutputStream(byteArrayOutputStream).writeObject(this.c.getIssuer());
|
||
|
|
return new X500Principal(byteArrayOutputStream.toByteArray());
|
||
|
|
} catch (IOException unused) {
|
||
|
|
throw new IllegalStateException("can't encode issuer DN");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public boolean[] getIssuerUniqueID() {
|
||
|
|
DERBitString issuerUniqueId = this.c.getTBSCertificate().getIssuerUniqueId();
|
||
|
|
if (issuerUniqueId == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
byte[] bytes = issuerUniqueId.getBytes();
|
||
|
|
int length = (bytes.length << 3) - issuerUniqueId.getPadBits();
|
||
|
|
boolean[] zArr = new boolean[length];
|
||
|
|
for (int i = 0; i != length; i++) {
|
||
|
|
zArr[i] = (bytes[i / 8] & (128 >>> (i % 8))) != 0;
|
||
|
|
}
|
||
|
|
return zArr;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public Principal getIssuerDN() {
|
||
|
|
try {
|
||
|
|
return new X509Principal(X500Name.getInstance(this.c.getIssuer().getEncoded()));
|
||
|
|
} catch (IOException unused) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public Collection getIssuerAlternativeNames() throws CertificateParsingException {
|
||
|
|
return getAlternativeNames(getExtensionBytes(Extension.issuerAlternativeName.getId()));
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public byte[] getExtensionValue(String str) {
|
||
|
|
Extension extension;
|
||
|
|
Extensions extensions = this.c.getTBSCertificate().getExtensions();
|
||
|
|
if (extensions == null || (extension = extensions.getExtension(new ASN1ObjectIdentifier(str))) == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
return extension.getExtnValue().getEncoded();
|
||
|
|
} catch (Exception e) {
|
||
|
|
StringBuilder sb = new StringBuilder("error parsing ");
|
||
|
|
sb.append(e.toString());
|
||
|
|
throw new IllegalStateException(sb.toString());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public List getExtendedKeyUsage() throws CertificateParsingException {
|
||
|
|
byte[] extensionBytes = getExtensionBytes("2.5.29.37");
|
||
|
|
if (extensionBytes == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
ASN1Sequence aSN1Sequence = (ASN1Sequence) new ASN1InputStream(extensionBytes).readObject();
|
||
|
|
ArrayList arrayList = new ArrayList();
|
||
|
|
for (int i = 0; i != aSN1Sequence.size(); i++) {
|
||
|
|
arrayList.add(((ASN1ObjectIdentifier) aSN1Sequence.getObjectAt(i)).getId());
|
||
|
|
}
|
||
|
|
return Collections.unmodifiableList(arrayList);
|
||
|
|
} catch (Exception unused) {
|
||
|
|
throw new CertificateParsingException("error processing extended key usage extension");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.Certificate
|
||
|
|
public byte[] getEncoded() throws CertificateEncodingException {
|
||
|
|
try {
|
||
|
|
return this.c.getEncoded(ASN1Encoding.DER);
|
||
|
|
} catch (IOException e) {
|
||
|
|
throw new CertificateEncodingException(e.toString());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public Set getCriticalExtensionOIDs() {
|
||
|
|
if (getVersion() != 3) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
HashSet hashSet = new HashSet();
|
||
|
|
Extensions extensions = this.c.getTBSCertificate().getExtensions();
|
||
|
|
if (extensions == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
Enumeration oids = extensions.oids();
|
||
|
|
while (oids.hasMoreElements()) {
|
||
|
|
ASN1ObjectIdentifier aSN1ObjectIdentifier = (ASN1ObjectIdentifier) oids.nextElement();
|
||
|
|
if (extensions.getExtension(aSN1ObjectIdentifier).isCritical()) {
|
||
|
|
hashSet.add(aSN1ObjectIdentifier.getId());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return hashSet;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public int getBasicConstraints() {
|
||
|
|
BasicConstraints basicConstraints = this.basicConstraints;
|
||
|
|
if (basicConstraints == null || !basicConstraints.isCA()) {
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
if (this.basicConstraints.getPathLenConstraint() == null) {
|
||
|
|
return Integer.MAX_VALUE;
|
||
|
|
}
|
||
|
|
return this.basicConstraints.getPathLenConstraint().intValue();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.jce.interfaces.PKCS12BagAttributeCarrier
|
||
|
|
public Enumeration getBagAttributeKeys() {
|
||
|
|
return this.attrCarrier.getBagAttributeKeys();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.jce.interfaces.PKCS12BagAttributeCarrier
|
||
|
|
public ASN1Encodable getBagAttribute(ASN1ObjectIdentifier aSN1ObjectIdentifier) {
|
||
|
|
return this.attrCarrier.getBagAttribute(aSN1ObjectIdentifier);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.Certificate
|
||
|
|
public boolean equals(Object obj) {
|
||
|
|
if (obj == this) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
if (!(obj instanceof X509CertificateObject)) {
|
||
|
|
return super.equals(obj);
|
||
|
|
}
|
||
|
|
X509CertificateObject x509CertificateObject = (X509CertificateObject) obj;
|
||
|
|
if (this.hashValueSet && x509CertificateObject.hashValueSet && this.hashValue != x509CertificateObject.hashValue) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
return this.c.equals(x509CertificateObject.c);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public void checkValidity(Date date) throws CertificateExpiredException, CertificateNotYetValidException {
|
||
|
|
if (date.getTime() > getNotAfter().getTime()) {
|
||
|
|
StringBuilder sb = new StringBuilder("certificate expired on ");
|
||
|
|
sb.append(this.c.getEndDate().getTime());
|
||
|
|
throw new CertificateExpiredException(sb.toString());
|
||
|
|
}
|
||
|
|
if (date.getTime() >= getNotBefore().getTime()) {
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
StringBuilder sb2 = new StringBuilder("certificate not valid till ");
|
||
|
|
sb2.append(this.c.getStartDate().getTime());
|
||
|
|
throw new CertificateNotYetValidException(sb2.toString());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Certificate
|
||
|
|
public void checkValidity() throws CertificateExpiredException, CertificateNotYetValidException {
|
||
|
|
checkValidity(new Date());
|
||
|
|
}
|
||
|
|
|
||
|
|
private boolean isAlgIdEqual(AlgorithmIdentifier algorithmIdentifier, AlgorithmIdentifier algorithmIdentifier2) {
|
||
|
|
if (algorithmIdentifier.getAlgorithm().equals(algorithmIdentifier2.getAlgorithm())) {
|
||
|
|
return algorithmIdentifier.getParameters() == null ? algorithmIdentifier2.getParameters() == null || algorithmIdentifier2.getParameters().equals(DERNull.INSTANCE) : algorithmIdentifier2.getParameters() == null ? algorithmIdentifier.getParameters() == null || algorithmIdentifier.getParameters().equals(DERNull.INSTANCE) : algorithmIdentifier.getParameters().equals(algorithmIdentifier2.getParameters());
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
private byte[] getExtensionBytes(String str) {
|
||
|
|
Extension extension;
|
||
|
|
Extensions extensions = this.c.getTBSCertificate().getExtensions();
|
||
|
|
if (extensions == null || (extension = extensions.getExtension(new ASN1ObjectIdentifier(str))) == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
return extension.getExtnValue().getOctets();
|
||
|
|
}
|
||
|
|
|
||
|
|
/* JADX WARN: Failed to find 'out' block for switch in B:10:0x0033. Please report as an issue. */
|
||
|
|
private static Collection getAlternativeNames(byte[] bArr) throws CertificateParsingException {
|
||
|
|
String string;
|
||
|
|
if (bArr == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
ArrayList arrayList = new ArrayList();
|
||
|
|
Enumeration objects = ASN1Sequence.getInstance(bArr).getObjects();
|
||
|
|
while (objects.hasMoreElements()) {
|
||
|
|
GeneralName generalName = GeneralName.getInstance(objects.nextElement());
|
||
|
|
ArrayList arrayList2 = new ArrayList();
|
||
|
|
arrayList2.add(Integers.valueOf(generalName.getTagNo()));
|
||
|
|
switch (generalName.getTagNo()) {
|
||
|
|
case 0:
|
||
|
|
case 3:
|
||
|
|
case 5:
|
||
|
|
arrayList2.add(generalName.getEncoded());
|
||
|
|
arrayList.add(Collections.unmodifiableList(arrayList2));
|
||
|
|
case 1:
|
||
|
|
case 2:
|
||
|
|
case 6:
|
||
|
|
string = ((ASN1String) generalName.getName()).getString();
|
||
|
|
arrayList2.add(string);
|
||
|
|
arrayList.add(Collections.unmodifiableList(arrayList2));
|
||
|
|
case 4:
|
||
|
|
string = X500Name.getInstance(RFC4519Style.INSTANCE, generalName.getName()).toString();
|
||
|
|
arrayList2.add(string);
|
||
|
|
arrayList.add(Collections.unmodifiableList(arrayList2));
|
||
|
|
case 7:
|
||
|
|
try {
|
||
|
|
string = InetAddress.getByAddress(DEROctetString.getInstance(generalName.getName()).getOctets()).getHostAddress();
|
||
|
|
arrayList2.add(string);
|
||
|
|
arrayList.add(Collections.unmodifiableList(arrayList2));
|
||
|
|
} catch (UnknownHostException unused) {
|
||
|
|
}
|
||
|
|
case 8:
|
||
|
|
string = ASN1ObjectIdentifier.getInstance(generalName.getName()).getId();
|
||
|
|
arrayList2.add(string);
|
||
|
|
arrayList.add(Collections.unmodifiableList(arrayList2));
|
||
|
|
default:
|
||
|
|
StringBuilder sb = new StringBuilder();
|
||
|
|
sb.append("Bad tag number: ");
|
||
|
|
sb.append(generalName.getTagNo());
|
||
|
|
throw new IOException(sb.toString());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (arrayList.size() == 0) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
return Collections.unmodifiableCollection(arrayList);
|
||
|
|
} catch (Exception e) {
|
||
|
|
throw new CertificateParsingException(e.getMessage());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
private void checkSignature(PublicKey publicKey, Signature signature) throws CertificateException, NoSuchAlgorithmException, SignatureException, InvalidKeyException {
|
||
|
|
if (!isAlgIdEqual(this.c.getSignatureAlgorithm(), this.c.getTBSCertificate().getSignature())) {
|
||
|
|
throw new CertificateException("signature algorithm in TBS cert not same as outer cert");
|
||
|
|
}
|
||
|
|
X509SignatureUtil.setSignatureParameters(signature, this.c.getSignatureAlgorithm().getParameters());
|
||
|
|
signature.initVerify(publicKey);
|
||
|
|
signature.update(getTBSCertificate());
|
||
|
|
if (!signature.verify(getSignature())) {
|
||
|
|
throw new SignatureException("certificate does not verify with supplied key");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public X509CertificateObject(JcaJceHelper jcaJceHelper, Certificate certificate) throws CertificateParsingException {
|
||
|
|
this.bcHelper = jcaJceHelper;
|
||
|
|
this.c = certificate;
|
||
|
|
try {
|
||
|
|
byte[] extensionBytes = getExtensionBytes("2.5.29.19");
|
||
|
|
if (extensionBytes != null) {
|
||
|
|
this.basicConstraints = BasicConstraints.getInstance(ASN1Primitive.fromByteArray(extensionBytes));
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
byte[] extensionBytes2 = getExtensionBytes("2.5.29.15");
|
||
|
|
if (extensionBytes2 == null) {
|
||
|
|
this.keyUsage = null;
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
DERBitString dERBitString = DERBitString.getInstance(ASN1Primitive.fromByteArray(extensionBytes2));
|
||
|
|
byte[] bytes = dERBitString.getBytes();
|
||
|
|
int length = (bytes.length << 3) - dERBitString.getPadBits();
|
||
|
|
this.keyUsage = new boolean[length >= 9 ? length : 9];
|
||
|
|
for (int i = 0; i != length; i++) {
|
||
|
|
this.keyUsage[i] = (bytes[i / 8] & (128 >>> (i % 8))) != 0;
|
||
|
|
}
|
||
|
|
} catch (Exception e) {
|
||
|
|
throw new CertificateParsingException("cannot construct KeyUsage: ".concat(String.valueOf(e)));
|
||
|
|
}
|
||
|
|
} catch (Exception e2) {
|
||
|
|
throw new CertificateParsingException("cannot construct BasicConstraints: ".concat(String.valueOf(e2)));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|