216 lines
8.0 KiB
Java
216 lines
8.0 KiB
Java
|
package org.bouncycastle.x509;
|
||
|
|
|
||
|
|
import java.io.IOException;
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import java.security.cert.CertificateExpiredException;
|
||
|
|
import java.security.cert.CertificateNotYetValidException;
|
||
|
|
import java.util.Collection;
|
||
|
|
import java.util.Collections;
|
||
|
|
import java.util.Date;
|
||
|
|
import java.util.HashSet;
|
||
|
|
import java.util.Set;
|
||
|
|
import org.bouncycastle.asn1.ASN1InputStream;
|
||
|
|
import org.bouncycastle.asn1.ASN1Primitive;
|
||
|
|
import org.bouncycastle.asn1.DEROctetString;
|
||
|
|
import org.bouncycastle.asn1.x509.GeneralName;
|
||
|
|
import org.bouncycastle.asn1.x509.Target;
|
||
|
|
import org.bouncycastle.asn1.x509.TargetInformation;
|
||
|
|
import org.bouncycastle.asn1.x509.Targets;
|
||
|
|
import org.bouncycastle.asn1.x509.X509Extensions;
|
||
|
|
import org.bouncycastle.util.Selector;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class X509AttributeCertStoreSelector implements Selector {
|
||
|
|
private X509AttributeCertificate attributeCert;
|
||
|
|
private Date attributeCertificateValid;
|
||
|
|
private AttributeCertificateHolder holder;
|
||
|
|
private AttributeCertificateIssuer issuer;
|
||
|
|
private BigInteger serialNumber;
|
||
|
|
private Collection targetNames = new HashSet();
|
||
|
|
private Collection targetGroups = new HashSet();
|
||
|
|
|
||
|
|
public void setTargetNames(Collection collection) throws IOException {
|
||
|
|
this.targetNames = extractGeneralNames(collection);
|
||
|
|
}
|
||
|
|
|
||
|
|
public void setTargetGroups(Collection collection) throws IOException {
|
||
|
|
this.targetGroups = extractGeneralNames(collection);
|
||
|
|
}
|
||
|
|
|
||
|
|
public void setSerialNumber(BigInteger bigInteger) {
|
||
|
|
this.serialNumber = bigInteger;
|
||
|
|
}
|
||
|
|
|
||
|
|
public void setIssuer(AttributeCertificateIssuer attributeCertificateIssuer) {
|
||
|
|
this.issuer = attributeCertificateIssuer;
|
||
|
|
}
|
||
|
|
|
||
|
|
public void setHolder(AttributeCertificateHolder attributeCertificateHolder) {
|
||
|
|
this.holder = attributeCertificateHolder;
|
||
|
|
}
|
||
|
|
|
||
|
|
public void setAttributeCertificateValid(Date date) {
|
||
|
|
if (date != null) {
|
||
|
|
this.attributeCertificateValid = new Date(date.getTime());
|
||
|
|
} else {
|
||
|
|
this.attributeCertificateValid = null;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public void setAttributeCert(X509AttributeCertificate x509AttributeCertificate) {
|
||
|
|
this.attributeCert = x509AttributeCertificate;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.util.Selector
|
||
|
|
public boolean match(Object obj) {
|
||
|
|
byte[] extensionValue;
|
||
|
|
Targets[] targetsObjects;
|
||
|
|
if (!(obj instanceof X509AttributeCertificate)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
X509AttributeCertificate x509AttributeCertificate = (X509AttributeCertificate) obj;
|
||
|
|
X509AttributeCertificate x509AttributeCertificate2 = this.attributeCert;
|
||
|
|
if (x509AttributeCertificate2 != null && !x509AttributeCertificate2.equals(x509AttributeCertificate)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (this.serialNumber != null && !x509AttributeCertificate.getSerialNumber().equals(this.serialNumber)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (this.holder != null && !x509AttributeCertificate.getHolder().equals(this.holder)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (this.issuer != null && !x509AttributeCertificate.getIssuer().equals(this.issuer)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
Date date = this.attributeCertificateValid;
|
||
|
|
if (date != null) {
|
||
|
|
try {
|
||
|
|
x509AttributeCertificate.checkValidity(date);
|
||
|
|
} catch (CertificateExpiredException | CertificateNotYetValidException unused) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if ((!this.targetNames.isEmpty() || !this.targetGroups.isEmpty()) && (extensionValue = x509AttributeCertificate.getExtensionValue(X509Extensions.TargetInformation.getId())) != null) {
|
||
|
|
try {
|
||
|
|
targetsObjects = TargetInformation.getInstance(new ASN1InputStream(((DEROctetString) DEROctetString.fromByteArray(extensionValue)).getOctets()).readObject()).getTargetsObjects();
|
||
|
|
if (!this.targetNames.isEmpty()) {
|
||
|
|
boolean z = false;
|
||
|
|
for (Targets targets : targetsObjects) {
|
||
|
|
Target[] targets2 = targets.getTargets();
|
||
|
|
int i = 0;
|
||
|
|
while (true) {
|
||
|
|
if (i >= targets2.length) {
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
if (this.targetNames.contains(GeneralName.getInstance(targets2[i].getTargetName()))) {
|
||
|
|
z = true;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
i++;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (!z) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} catch (IOException | IllegalArgumentException unused2) {
|
||
|
|
}
|
||
|
|
if (!this.targetGroups.isEmpty()) {
|
||
|
|
boolean z2 = false;
|
||
|
|
for (Targets targets3 : targetsObjects) {
|
||
|
|
Target[] targets4 = targets3.getTargets();
|
||
|
|
int i2 = 0;
|
||
|
|
while (true) {
|
||
|
|
if (i2 >= targets4.length) {
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
if (this.targetGroups.contains(GeneralName.getInstance(targets4[i2].getTargetGroup()))) {
|
||
|
|
z2 = true;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
i2++;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (!z2) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
public Collection getTargetNames() {
|
||
|
|
return Collections.unmodifiableCollection(this.targetNames);
|
||
|
|
}
|
||
|
|
|
||
|
|
public Collection getTargetGroups() {
|
||
|
|
return Collections.unmodifiableCollection(this.targetGroups);
|
||
|
|
}
|
||
|
|
|
||
|
|
public BigInteger getSerialNumber() {
|
||
|
|
return this.serialNumber;
|
||
|
|
}
|
||
|
|
|
||
|
|
public AttributeCertificateIssuer getIssuer() {
|
||
|
|
return this.issuer;
|
||
|
|
}
|
||
|
|
|
||
|
|
public AttributeCertificateHolder getHolder() {
|
||
|
|
return this.holder;
|
||
|
|
}
|
||
|
|
|
||
|
|
public Date getAttributeCertificateValid() {
|
||
|
|
if (this.attributeCertificateValid != null) {
|
||
|
|
return new Date(this.attributeCertificateValid.getTime());
|
||
|
|
}
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
public X509AttributeCertificate getAttributeCert() {
|
||
|
|
return this.attributeCert;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.util.Selector
|
||
|
|
public Object clone() {
|
||
|
|
X509AttributeCertStoreSelector x509AttributeCertStoreSelector = new X509AttributeCertStoreSelector();
|
||
|
|
x509AttributeCertStoreSelector.attributeCert = this.attributeCert;
|
||
|
|
x509AttributeCertStoreSelector.attributeCertificateValid = getAttributeCertificateValid();
|
||
|
|
x509AttributeCertStoreSelector.holder = this.holder;
|
||
|
|
x509AttributeCertStoreSelector.issuer = this.issuer;
|
||
|
|
x509AttributeCertStoreSelector.serialNumber = this.serialNumber;
|
||
|
|
x509AttributeCertStoreSelector.targetGroups = getTargetGroups();
|
||
|
|
x509AttributeCertStoreSelector.targetNames = getTargetNames();
|
||
|
|
return x509AttributeCertStoreSelector;
|
||
|
|
}
|
||
|
|
|
||
|
|
public void addTargetName(byte[] bArr) throws IOException {
|
||
|
|
addTargetName(GeneralName.getInstance(ASN1Primitive.fromByteArray(bArr)));
|
||
|
|
}
|
||
|
|
|
||
|
|
public void addTargetName(GeneralName generalName) {
|
||
|
|
this.targetNames.add(generalName);
|
||
|
|
}
|
||
|
|
|
||
|
|
public void addTargetGroup(byte[] bArr) throws IOException {
|
||
|
|
addTargetGroup(GeneralName.getInstance(ASN1Primitive.fromByteArray(bArr)));
|
||
|
|
}
|
||
|
|
|
||
|
|
public void addTargetGroup(GeneralName generalName) {
|
||
|
|
this.targetGroups.add(generalName);
|
||
|
|
}
|
||
|
|
|
||
|
|
private Set extractGeneralNames(Collection collection) throws IOException {
|
||
|
|
if (collection == null || collection.isEmpty()) {
|
||
|
|
return new HashSet();
|
||
|
|
}
|
||
|
|
HashSet hashSet = new HashSet();
|
||
|
|
for (Object obj : collection) {
|
||
|
|
if (!(obj instanceof GeneralName)) {
|
||
|
|
obj = GeneralName.getInstance(ASN1Primitive.fromByteArray((byte[]) obj));
|
||
|
|
}
|
||
|
|
hashSet.add(obj);
|
||
|
|
}
|
||
|
|
return hashSet;
|
||
|
|
}
|
||
|
|
}
|