255 lines
9.7 KiB
Java
255 lines
9.7 KiB
Java
|
package org.bouncycastle.x509;
|
||
|
|
|
||
|
|
import java.io.ByteArrayInputStream;
|
||
|
|
import java.io.IOException;
|
||
|
|
import java.io.InputStream;
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import java.security.InvalidKeyException;
|
||
|
|
import java.security.NoSuchAlgorithmException;
|
||
|
|
import java.security.NoSuchProviderException;
|
||
|
|
import java.security.PublicKey;
|
||
|
|
import java.security.Signature;
|
||
|
|
import java.security.SignatureException;
|
||
|
|
import java.security.cert.CertificateException;
|
||
|
|
import java.security.cert.CertificateExpiredException;
|
||
|
|
import java.security.cert.CertificateNotYetValidException;
|
||
|
|
import java.text.ParseException;
|
||
|
|
import java.util.ArrayList;
|
||
|
|
import java.util.Date;
|
||
|
|
import java.util.Enumeration;
|
||
|
|
import java.util.HashSet;
|
||
|
|
import java.util.Set;
|
||
|
|
import org.bouncycastle.asn1.ASN1Encoding;
|
||
|
|
import org.bouncycastle.asn1.ASN1InputStream;
|
||
|
|
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
|
||
|
|
import org.bouncycastle.asn1.ASN1Sequence;
|
||
|
|
import org.bouncycastle.asn1.DERBitString;
|
||
|
|
import org.bouncycastle.asn1.x509.AttributeCertificate;
|
||
|
|
import org.bouncycastle.asn1.x509.Extension;
|
||
|
|
import org.bouncycastle.asn1.x509.Extensions;
|
||
|
|
import org.bouncycastle.util.Arrays;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class X509V2AttributeCertificate implements X509AttributeCertificate {
|
||
|
|
private AttributeCertificate cert;
|
||
|
|
private Date notAfter;
|
||
|
|
private Date notBefore;
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public final void verify(PublicKey publicKey, String str) throws CertificateException, NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException {
|
||
|
|
if (!this.cert.getSignatureAlgorithm().equals(this.cert.getAcinfo().getSignature())) {
|
||
|
|
throw new CertificateException("Signature algorithm in certificate info not same as outer certificate");
|
||
|
|
}
|
||
|
|
Signature signature = Signature.getInstance(this.cert.getSignatureAlgorithm().getAlgorithm().getId(), str);
|
||
|
|
signature.initVerify(publicKey);
|
||
|
|
try {
|
||
|
|
signature.update(this.cert.getAcinfo().getEncoded());
|
||
|
|
if (!signature.verify(getSignature())) {
|
||
|
|
throw new InvalidKeyException("Public key presented not for certificate signature");
|
||
|
|
}
|
||
|
|
} catch (IOException unused) {
|
||
|
|
throw new SignatureException("Exception encoding certificate info object");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public int hashCode() {
|
||
|
|
try {
|
||
|
|
return Arrays.hashCode(getEncoded());
|
||
|
|
} catch (IOException unused) {
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public boolean hasUnsupportedCriticalExtension() {
|
||
|
|
Set criticalExtensionOIDs = getCriticalExtensionOIDs();
|
||
|
|
return (criticalExtensionOIDs == null || criticalExtensionOIDs.isEmpty()) ? false : true;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public int getVersion() {
|
||
|
|
return this.cert.getAcinfo().getVersion().getValue().intValue() + 1;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public byte[] getSignature() {
|
||
|
|
return this.cert.getSignatureValue().getOctets();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public BigInteger getSerialNumber() {
|
||
|
|
return this.cert.getAcinfo().getSerialNumber().getValue();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public Date getNotBefore() {
|
||
|
|
return this.notBefore;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public Date getNotAfter() {
|
||
|
|
return this.notAfter;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public Set getNonCriticalExtensionOIDs() {
|
||
|
|
return getExtensionOIDs(false);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public boolean[] getIssuerUniqueID() {
|
||
|
|
DERBitString issuerUniqueID = this.cert.getAcinfo().getIssuerUniqueID();
|
||
|
|
if (issuerUniqueID == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
byte[] bytes = issuerUniqueID.getBytes();
|
||
|
|
int length = (bytes.length << 3) - issuerUniqueID.getPadBits();
|
||
|
|
boolean[] zArr = new boolean[length];
|
||
|
|
for (int i = 0; i != length; i++) {
|
||
|
|
zArr[i] = (bytes[i / 8] & (128 >>> (i % 8))) != 0;
|
||
|
|
}
|
||
|
|
return zArr;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public AttributeCertificateIssuer getIssuer() {
|
||
|
|
return new AttributeCertificateIssuer(this.cert.getAcinfo().getIssuer());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public AttributeCertificateHolder getHolder() {
|
||
|
|
return new AttributeCertificateHolder((ASN1Sequence) this.cert.getAcinfo().getHolder().toASN1Primitive());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public byte[] getExtensionValue(String str) {
|
||
|
|
Extension extension;
|
||
|
|
Extensions extensions = this.cert.getAcinfo().getExtensions();
|
||
|
|
if (extensions == null || (extension = extensions.getExtension(new ASN1ObjectIdentifier(str))) == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
return extension.getExtnValue().getEncoded(ASN1Encoding.DER);
|
||
|
|
} catch (Exception e) {
|
||
|
|
StringBuilder sb = new StringBuilder("error encoding ");
|
||
|
|
sb.append(e.toString());
|
||
|
|
throw new RuntimeException(sb.toString());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public byte[] getEncoded() throws IOException {
|
||
|
|
return this.cert.getEncoded();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // java.security.cert.X509Extension
|
||
|
|
public Set getCriticalExtensionOIDs() {
|
||
|
|
return getExtensionOIDs(true);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public X509Attribute[] getAttributes(String str) {
|
||
|
|
ASN1Sequence attributes = this.cert.getAcinfo().getAttributes();
|
||
|
|
ArrayList arrayList = new ArrayList();
|
||
|
|
for (int i = 0; i != attributes.size(); i++) {
|
||
|
|
X509Attribute x509Attribute = new X509Attribute(attributes.getObjectAt(i));
|
||
|
|
if (x509Attribute.getOID().equals(str)) {
|
||
|
|
arrayList.add(x509Attribute);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (arrayList.size() == 0) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
return (X509Attribute[]) arrayList.toArray(new X509Attribute[arrayList.size()]);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public X509Attribute[] getAttributes() {
|
||
|
|
ASN1Sequence attributes = this.cert.getAcinfo().getAttributes();
|
||
|
|
X509Attribute[] x509AttributeArr = new X509Attribute[attributes.size()];
|
||
|
|
for (int i = 0; i != attributes.size(); i++) {
|
||
|
|
x509AttributeArr[i] = new X509Attribute(attributes.getObjectAt(i));
|
||
|
|
}
|
||
|
|
return x509AttributeArr;
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean equals(Object obj) {
|
||
|
|
if (obj == this) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
if (!(obj instanceof X509AttributeCertificate)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
return Arrays.areEqual(getEncoded(), ((X509AttributeCertificate) obj).getEncoded());
|
||
|
|
} catch (IOException unused) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public void checkValidity(Date date) throws CertificateExpiredException, CertificateNotYetValidException {
|
||
|
|
if (date.after(getNotAfter())) {
|
||
|
|
StringBuilder sb = new StringBuilder("certificate expired on ");
|
||
|
|
sb.append(getNotAfter());
|
||
|
|
throw new CertificateExpiredException(sb.toString());
|
||
|
|
}
|
||
|
|
if (date.before(getNotBefore())) {
|
||
|
|
StringBuilder sb2 = new StringBuilder("certificate not valid till ");
|
||
|
|
sb2.append(getNotBefore());
|
||
|
|
throw new CertificateNotYetValidException(sb2.toString());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.x509.X509AttributeCertificate
|
||
|
|
public void checkValidity() throws CertificateExpiredException, CertificateNotYetValidException {
|
||
|
|
checkValidity(new Date());
|
||
|
|
}
|
||
|
|
|
||
|
|
private static AttributeCertificate getObject(InputStream inputStream) throws IOException {
|
||
|
|
try {
|
||
|
|
return AttributeCertificate.getInstance(new ASN1InputStream(inputStream).readObject());
|
||
|
|
} catch (IOException e) {
|
||
|
|
throw e;
|
||
|
|
} catch (Exception e2) {
|
||
|
|
StringBuilder sb = new StringBuilder("exception decoding certificate structure: ");
|
||
|
|
sb.append(e2.toString());
|
||
|
|
throw new IOException(sb.toString());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
private Set getExtensionOIDs(boolean z) {
|
||
|
|
Extensions extensions = this.cert.getAcinfo().getExtensions();
|
||
|
|
if (extensions == null) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
HashSet hashSet = new HashSet();
|
||
|
|
Enumeration oids = extensions.oids();
|
||
|
|
while (oids.hasMoreElements()) {
|
||
|
|
ASN1ObjectIdentifier aSN1ObjectIdentifier = (ASN1ObjectIdentifier) oids.nextElement();
|
||
|
|
if (extensions.getExtension(aSN1ObjectIdentifier).isCritical() == z) {
|
||
|
|
hashSet.add(aSN1ObjectIdentifier.getId());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return hashSet;
|
||
|
|
}
|
||
|
|
|
||
|
|
public X509V2AttributeCertificate(byte[] bArr) throws IOException {
|
||
|
|
this(new ByteArrayInputStream(bArr));
|
||
|
|
}
|
||
|
|
|
||
|
|
X509V2AttributeCertificate(AttributeCertificate attributeCertificate) throws IOException {
|
||
|
|
this.cert = attributeCertificate;
|
||
|
|
try {
|
||
|
|
this.notAfter = attributeCertificate.getAcinfo().getAttrCertValidityPeriod().getNotAfterTime().getDate();
|
||
|
|
this.notBefore = attributeCertificate.getAcinfo().getAttrCertValidityPeriod().getNotBeforeTime().getDate();
|
||
|
|
} catch (ParseException unused) {
|
||
|
|
throw new IOException("invalid data structure in certificate!");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public X509V2AttributeCertificate(InputStream inputStream) throws IOException {
|
||
|
|
this(getObject(inputStream));
|
||
|
|
}
|
||
|
|
}
|