}
private void testGenerateWithCert()
throws Exception
{
CertificateFactory fact = CertificateFactory.getInstance("X.509","BC");
X509Certificate iCert = (X509Certificate)fact.generateCertificate(new ByteArrayInputStream(signCert));
//
// a sample key pair.
//
RSAPublicKeySpec pubKeySpec = new RSAPublicKeySpec(
new BigInteger("b4a7e46170574f16a97082b22be58b6a2a629798419be12872a4bdba626cfae9900f76abfb12139dce5de56564fab2b6543165a040c606887420e33d91ed7ed7", 16),
new BigInteger("11", 16));
//
// set up the keys
//
PrivateKey privKey;
PublicKey pubKey;
KeyFactory kFact = KeyFactory.getInstance("RSA", "BC");
privKey = kFact.generatePrivate(RSA_PRIVATE_KEY_SPEC);
pubKey = kFact.generatePublic(pubKeySpec);
X509V2AttributeCertificateGenerator gen = new X509V2AttributeCertificateGenerator();
// the actual attributes
GeneralName roleName = new GeneralName(GeneralName.rfc822Name, "DAU123456789");
ASN1EncodableVector roleSyntax = new ASN1EncodableVector();
roleSyntax.add(roleName);
// roleSyntax OID: 2.5.24.72
X509Attribute attributes = new X509Attribute("2.5.24.72",
new DERSequence(roleSyntax));
gen.addAttribute(attributes);
gen.setHolder(new AttributeCertificateHolder(iCert));
gen.setIssuer(new AttributeCertificateIssuer(new X509Principal("cn=test")));
gen.setNotBefore(new Date(System.currentTimeMillis() - 50000));
gen.setNotAfter(new Date(System.currentTimeMillis() + 50000));
gen.setSerialNumber(BigInteger.ONE);
gen.setSignatureAlgorithm("SHA1WithRSAEncryption");
X509AttributeCertificate aCert = gen.generate(privKey, "BC");
aCert.checkValidity();
aCert.verify(pubKey, "BC");
AttributeCertificateHolder holder = aCert.getHolder();
if (holder.getEntityNames() != null)
{
fail("entity names set when none expected");
}
if (!holder.getSerialNumber().equals(iCert.getSerialNumber()))
{
fail("holder serial number doesn't match");
}
if (!holder.getIssuer()[0].equals(iCert.getIssuerX500Principal()))
{
fail("holder issuer doesn't match");
}
if (!holder.match(iCert))
{
fail("generated holder not matching holder certificate");
}
X509Attribute[] attrs = aCert.getAttributes("2.5.24.72");
if (attrs == null)
{
fail("attributes related to 2.5.24.72 not found");
}
X509Attribute attr = attrs[0];
if (!attr.getOID().equals("2.5.24.72"))
{
fail("attribute oid mismatch");
}
ASN1Encodable[] values = attr.getValues();
GeneralName role = GeneralNames.getInstance(values[0]).getNames()[0];
if (role.getTagNo() != GeneralName.rfc822Name)
{
fail("wrong general name type found in role");
}
if (!((ASN1String)role.getName()).getString().equals("DAU123456789"))
{
fail("wrong general name value found in role");
}
X509Certificate sCert = (X509Certificate)fact.generateCertificate(new ByteArrayInputStream(holderCertWithBaseCertificateID));
if (holder.match(sCert))
{
fail("generated holder matching wrong certificate");
}