Examples of org.bouncycastle.x509.X509StreamParser

org.bouncycastle.x509.X509StreamParser
This class allows access to different implementations for reading X.509 objects from streams.
A X509StreamParser is used to read a collection of objects or a single object of a certain X.509 object structure. E.g. one X509StreamParser can read certificates, another one CRLs, certification paths, attribute certificates and so on. The kind of object structure is specified with the algorithm parameter to the getInstance methods.
Implementations must implement the {@link org.bouncycastle.x509.X509StreamParserSpi}.

        CertPathBuilderResult result = null;
        // find holder PKCs
        Set holderPKCs = new HashSet();
        if (attrCert.getHolder().getIssuer() != null)
        {
            X509CertStoreSelector selector = new X509CertStoreSelector();
            selector.setSerialNumber(attrCert.getHolder().getSerialNumber());
            Principal[] principals = attrCert.getHolder().getIssuer();
            for (int i = 0; i < principals.length; i++)
            {
                try
                {
                    if (principals[i] instanceof X500Principal)
                    {
                        selector.setIssuer(((X500Principal)principals[i])
                            .getEncoded());
                    }
                    holderPKCs.addAll(CertPathValidatorUtilities
                        .findCertificates(selector, pkixParams.getStores()));
                }
                catch (AnnotatedException e)
                {
                    throw new ExtCertPathValidatorException(
                        "Public key certificate for attribute certificate cannot be searched.",
                        e);
                }
                catch (IOException e)
                {
                    throw new ExtCertPathValidatorException(
                        "Unable to encode X500 principal.", e);
                }
            }
            if (holderPKCs.isEmpty())
            {
                throw new CertPathValidatorException(
                    "Public key certificate specified in base certificate ID for attribute certificate cannot be found.");
            }
        }
        if (attrCert.getHolder().getEntityNames() != null)
        {
            X509CertStoreSelector selector = new X509CertStoreSelector();
            Principal[] principals = attrCert.getHolder().getEntityNames();
            for (int i = 0; i < principals.length; i++)
            {
                try
                {
                    if (principals[i] instanceof X500Principal)
                    {
                        selector.setIssuer(((X500Principal) principals[i])
                            .getEncoded());
                    }
                    holderPKCs.addAll(CertPathValidatorUtilities
                        .findCertificates(selector, pkixParams.getStores()));
                }
                catch (AnnotatedException e)
                {
                    throw new ExtCertPathValidatorException(
                        "Public key certificate for attribute certificate cannot be searched.",
                        e);
                }
                catch (IOException e)
                {
                    throw new ExtCertPathValidatorException(
                        "Unable to encode X500 principal.", e);
                }
            }
            if (holderPKCs.isEmpty())
            {
                throw new CertPathValidatorException(
                    "Public key certificate specified in entity name for attribute certificate cannot be found.");
            }
        }
        // verify cert paths for PKCs
        ExtendedPKIXBuilderParameters params = (ExtendedPKIXBuilderParameters) ExtendedPKIXBuilderParameters
            .getInstance(pkixParams);
        CertPathValidatorException lastException = null;
        for (Iterator it = holderPKCs.iterator(); it.hasNext();)
        {
            X509CertStoreSelector selector = new X509CertStoreSelector();
            selector.setCertificate((X509Certificate) it.next());
            params.setTargetConstraints(selector);
            CertPathBuilder builder = null;
            try
            {
                builder = CertPathBuilder.getInstance("PKIX", BouncyCastleProvider.PROVIDER_NAME);

View Full Code Here

    {
        if (!(selector instanceof X509CertStoreSelector))
        {
            return Collections.EMPTY_SET;
        }
        X509CertStoreSelector xselector = (X509CertStoreSelector)selector;
        Set set = new HashSet();
        // test if only CA certificates should be selected
        if (xselector.getBasicConstraints() > 0)
        {
            set.addAll(helper.getCACertificates(xselector));
            set.addAll(getCertificatesFromCrossCertificatePairs(xselector));
        }
        // only end certificates should be selected
        else if (xselector.getBasicConstraints() == -2)
        {
            set.addAll(helper.getUserCertificates(xselector));
        }
        // nothing specified
        else

View Full Code Here

    {
        Set set = new HashSet();
        X509CertPairStoreSelector ps = new X509CertPairStoreSelector();


        ps.setForwardSelector(xselector);
        ps.setReverseSelector(new X509CertStoreSelector());
        
        Set crossCerts = new HashSet(helper.getCrossCertificatePairs(ps));
        Set forward = new HashSet();
        Set reverse = new HashSet();
        Iterator it = crossCerts.iterator();

View Full Code Here

        Set certPairSet = new HashSet();


        int i = 0;
        while (i < list.size())
        {
            X509CertificatePair pair;
            try
            {
                // first try to decode it as certificate pair
                try
                {
                    X509CertPairParser parser = new X509CertPairParser();
                    parser.engineInit(new ByteArrayInputStream(
                        (byte[])list.get(i)));
                    pair = (X509CertificatePair)parser.engineRead();
                }
                catch (StreamParsingException e)
                {
                    // now try it to construct it the forward and reverse
                    // certificate
                    byte[] forward = (byte[])list.get(i);
                    byte[] reverse = (byte[])list.get(i + 1);
                    pair = new X509CertificatePair(new CertificatePair(
                        Certificate
                            .getInstance(new ASN1InputStream(
                            forward).readObject()),
                        Certificate
                            .getInstance(new ASN1InputStream(

View Full Code Here

        Set forward = new HashSet();
        Set reverse = new HashSet();
        Iterator it = crossCerts.iterator();
        while (it.hasNext())
        {
            X509CertificatePair pair = (X509CertificatePair)it.next();
            if (pair.getForward() != null)
            {
                forward.add(pair.getForward());
            }
            if (pair.getReverse() != null)
            {
                reverse.add(pair.getReverse());
            }
        }
        set.addAll(forward);
        set.addAll(reverse);
        return set;

View Full Code Here

        {
            Object obj = iter.next();


            if (obj instanceof X509Store)
            {
                X509Store certStore = (X509Store)obj;
                try
                {
                    certs.addAll(certStore.getMatches(certSelect));
                }
                catch (StoreException e)
                {
                    throw new AnnotatedException(
                            "Problem while picking certificates from X.509 store.", e);
                }
            }
            else
            {
                CertStore certStore = (CertStore)obj;


                try
                {
                    certs.addAll(certStore.getCertificates(certSelect));
                }
                catch (CertStoreException e)
                {
                    throw new AnnotatedException(
                        "Problem while picking certificates from certificate store.",

View Full Code Here

        {
            Object obj = iter.next();


            if (obj instanceof X509Store)
            {
                X509Store certStore = (X509Store)obj;
                try
                {
                    certs.addAll(certStore.getMatches(certSelect));
                }
                catch (StoreException e)
                {
                    throw new AnnotatedException(
                            "Problem while picking certificates from X.509 store.", e);

View Full Code Here

        {
            Object obj = iter.next();


            if (obj instanceof X509Store)
            {
                X509Store store = (X509Store)obj;


                try
                {
                    crls.addAll(store.getMatches(crlSelect));
                    foundValidStore = true;
                }
                catch (StoreException e)
                {
                    lastException = new AnnotatedException(
                        "Exception searching in X.509 CRL store.", e);
                }
            }
            else
            {
                CertStore store = (CertStore)obj;


                try
                {
                    crls.addAll(store.getCRLs(crlSelect));
                    foundValidStore = true;
                }
                catch (CertStoreException e)
                {
                    lastException = new AnnotatedException(

View Full Code Here

      + "Rd1yBoDdEv8Qb+3eEPH6ab9021AsLEnJ6LWTmybbOpMNZ3tv");


    public void performTest()
        throws Exception
    {
        X509StreamParser parser = X509StreamParser.getInstance("Certificate", "BC");


        parser.init(new ByteArrayInputStream(CertPathTest.rootCertBin));
        X509Certificate rootCert = (X509Certificate)parser.read();


        parser = X509StreamParser.getInstance("CRL", "BC");


        parser.init(new ByteArrayInputStream(CertPathTest.rootCrlBin));




        X509CRL rootCrl = (X509CRL)parser.read();


        parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(new ByteArrayInputStream(attrCert));


        X509AttributeCertificate aCert = (X509AttributeCertificate)parser.read();


        ByteArrayOutputStream  bOut = new ByteArrayOutputStream();


        bOut.write(CertPathTest.rootCertBin);
        bOut.write(CertPathTest.interCertBin);
        bOut.write(CertPathTest.finalCertBin);


        parser = X509StreamParser.getInstance("Certificate", "BC");


        parser.init(bOut.toByteArray());


        Collection res = parser.readAll();


        if (res.size() != 3)
        {
            fail("wrong number of certificates found");
        }


        bOut = new ByteArrayOutputStream();


        bOut.write(CertPathTest.rootCrlBin);
        bOut.write(CertPathTest.interCrlBin);


        parser = X509StreamParser.getInstance("CRL", "BC");


        parser.init(bOut.toByteArray());


        res = parser.readAll();


        if (res.size() != 2)
        {
            fail("wrong number of CRLs found");
        }


        bOut = new ByteArrayOutputStream();


        bOut.write(attrCert);
        bOut.write(attrCert);


        parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(bOut.toByteArray());


        res = parser.readAll();


        if (res.size() != 2)
        {
            fail("wrong number of Attribute Certificates found");
        }


        //
        // PEM tests
        //
        parser = X509StreamParser.getInstance("Certificate", "BC");


        parser.init(PEMData.CERTIFICATE_1.getBytes("US-ASCII"));


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of Certificates found");
        }


        parser = X509StreamParser.getInstance("Certificate", "BC");


        parser.init(PEMData.CERTIFICATE_2.getBytes("US-ASCII"));


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of Certificates found");
        }


        parser = X509StreamParser.getInstance("CRL", "BC");


        parser.init(PEMData.CRL_1.getBytes("US-ASCII"));


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of CRLs found");
        }


        parser = X509StreamParser.getInstance("CRL", "BC");


        parser.init(PEMData.CRL_2.getBytes("US-ASCII"));


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of CRLs found");
        }


        parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(PEMData.ATTRIBUTE_CERTIFICATE_1.getBytes("US-ASCII"));


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of Attribute Certificates found");
        }


        parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(PEMData.ATTRIBUTE_CERTIFICATE_2.getBytes("US-ASCII"));


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of Attribute Certificates found");
        }


        ASN1EncodableVector certs = new ASN1EncodableVector();


        certs.add(new ASN1InputStream(CertPathTest.rootCertBin).readObject());
        certs.add(new DERTaggedObject(false, 2, new ASN1InputStream(attrCert).readObject()));


        ASN1EncodableVector crls = new ASN1EncodableVector();


        crls.add(new ASN1InputStream(CertPathTest.rootCrlBin).readObject());


        //
        // cross certificate pairs
        //
        parser = X509StreamParser.getInstance("CertificatePair", "BC");


        parser.init(new X509CertificatePair(rootCert, rootCert).getEncoded());


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of CertificatePairs found");
        }


        //
        // PKCS7
        //
        SignedData sigData = new SignedData(new DERSet(), new ContentInfo(CMSObjectIdentifiers.data, null), new DERSet(certs), new DERSet(crls), new DERSet());


        ContentInfo info = new ContentInfo(CMSObjectIdentifiers.signedData, sigData);


        parser = X509StreamParser.getInstance("Certificate", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of Certificates found");
        }


        parser = X509StreamParser.getInstance("CRL", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of CRLs found");
        }


        parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 1)
        {
            fail("wrong number of Attribute Certificates found");
        }


        // data with no certificates or CRLs


        sigData = new SignedData(new DERSet(), new ContentInfo(CMSObjectIdentifiers.data, null), new DERSet(), new DERSet(), new DERSet());


        info = new ContentInfo(CMSObjectIdentifiers.signedData, sigData);


        parser = X509StreamParser.getInstance("Certificate", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 0)
        {
            fail("wrong number of Certificates found - expected 0");
        }


        parser = X509StreamParser.getInstance("CRL", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 0)
        {
            fail("wrong number of CRLs found - expected 0");
        }


        parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 0)
        {
            fail("wrong number of Attribute Certificates found - expected 0");
        }


        // data with absent certificates and CRLs
        sigData = new SignedData(new DERSet(), new ContentInfo(CMSObjectIdentifiers.data, null), null, null, new DERSet());


        info = new ContentInfo(CMSObjectIdentifiers.signedData, sigData);


        parser = X509StreamParser.getInstance("Certificate", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 0)
        {
            fail("wrong number of Certificates found - expected 0");
        }


        parser = X509StreamParser.getInstance("CRL", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 0)
        {
            fail("wrong number of CRLs found - expected 0");
        }


        parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(info.getEncoded());


        res = parser.readAll();


        if (res.size() != 0)
        {
            fail("wrong number of Attribute Certificates found - expected 0");
        }

View Full Code Here

    }


    public static X509AttributeCertificate getAttributeCertificate()
        throws Exception
    {
        X509StreamParser parser = X509StreamParser.getInstance("AttributeCertificate", "BC");


        parser.init(CMSTestUtil.attrCert);


        return (X509AttributeCertificate)parser.read();
    }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.bouncycastle.x509.X509StreamParser

com.drighetto.essai.bouncycastle.certificate.CertificateGenerator

cybervillains.ca.CertificateCreator

org.apache.directory.server.core.security.TlsKeyGenerator

org.bouncycastle.asn1.ASN1EncodableVector

org.bouncycastle.asn1.ASN1GeneralizedTime

org.bouncycastle.asn1.ASN1InputStream

org.bouncycastle.asn1.ASN1Integer

org.bouncycastle.asn1.ASN1ObjectIdentifier

org.bouncycastle.asn1.ASN1OctetString

org.bouncycastle.asn1.ASN1Primitive

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.