Java X509ExtensionUtil类代码示例

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
/**
 * This method returns SKI bytes from certificate.
 *
 * @param certificateToken
 *            {@code CertificateToken}
 * @param computeIfMissing
 *            if the extension is missing and computeIfMissing = true, it will compute the SKI value from the Public
 *            Key
 * @return ski bytes from the given certificate
 * @throws DSSException
 */
public static byte[] getSki(final CertificateToken certificateToken, boolean computeIfMissing) throws DSSException {
	try {
		byte[] sKI = certificateToken.getCertificate().getExtensionValue(Extension.subjectKeyIdentifier.getId());
		if (Utils.isArrayNotEmpty(sKI)) {
			ASN1Primitive extension = X509ExtensionUtil.fromExtensionValue(sKI);
			SubjectKeyIdentifier skiBC = SubjectKeyIdentifier.getInstance(extension);
			return skiBC.getKeyIdentifier();
		} else if (computeIfMissing) {
			// If extension not present, we compute it from the certificate public key
			DLSequence seq = (DLSequence) DERSequence.fromByteArray(certificateToken.getPublicKey().getEncoded());
			DERBitString item = (DERBitString) seq.getObjectAt(1);
			return DSSUtils.digest(DigestAlgorithm.SHA1, item.getOctets());
		}
		return null;
	} catch (Exception e) {
		throw new DSSException(e);
	}
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
/**
 * add a given extension field for the standard extensions tag (tag 3)
 * copying the extension value from another certificate.
 * @throws CertificateParsingException if the extension cannot be extracted.
 */
public void copyAndAddExtension(
    String          oid,
    boolean         critical,
    X509Certificate cert) 
    throws CertificateParsingException
{
    byte[] extValue = cert.getExtensionValue(oid);
    
    if (extValue == null)
    {
        throw new CertificateParsingException("extension " + oid + " not present");
    }
    
    try
    {
        ASN1Encodable value = X509ExtensionUtil.fromExtensionValue(extValue);

        this.addExtension(oid, critical, value);
    }
    catch (IOException e)
    {
        throw new CertificateParsingException(e.toString());
    }
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
public CRLDistributionPointsImpl(X509Certificate cert) throws CertificateException, IOException {
	URINames = new ArrayList<>();
	byte[] extVal = cert.getExtensionValue(Extension.cRLDistributionPoints.getId());
	if (extVal == null)
		return;
	CRLDistPoint crlDistPoint = CRLDistPoint.getInstance(X509ExtensionUtil.fromExtensionValue(extVal));
	DistributionPoint[] points = crlDistPoint.getDistributionPoints();
	for (DistributionPoint p : points) {
		GeneralNames tmp = p.getCRLIssuer();
		if (tmp != null) {
			GeneralName[] crlIssers = tmp.getNames();
			for (int i = 0; i < crlIssers.length; i++) {
				if (crlIssers[i].getTagNo() == GeneralName.uniformResourceIdentifier) {
					String issuerUrl = crlIssers[i].toString();
					URINames.add(issuerUrl);
				}
			}
		}
	}
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
public SubjectAlternativeNameImpl(X509Certificate cert) throws IOException {
	DNSNames = new ArrayList<>();
	byte[] extVal = cert.getExtensionValue(Extension.subjectAlternativeName.getId());
	if (extVal == null)
		return;
	GeneralNames gn = GeneralNames.getInstance(X509ExtensionUtil.fromExtensionValue(extVal));
	GeneralName[] names = gn.getNames();
	for (GeneralName name : names) {
		if (name.getTagNo() == GeneralName.dNSName) {
			String dns = name.getName().toString();
			DNSNames.add(dns);
		}
	}
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
/**
    * Returns the AuthorityInfoAccess extension value on list format.<br>
    * Otherwise, returns <b>list empty</b>.<br>
    * @return List Authority info access list
    */
public List<String> getAuthorityInfoAccess() {
	List<String> address = new ArrayList<String>();
	try {
		byte[] authorityInfoAccess = certificate.getExtensionValue(Extension.authorityInfoAccess.getId());
		if (authorityInfoAccess != null && authorityInfoAccess.length > 0) {
			AuthorityInformationAccess infoAccess = AuthorityInformationAccess.getInstance(X509ExtensionUtil
					.fromExtensionValue(authorityInfoAccess));
			for (AccessDescription desc : infoAccess.getAccessDescriptions())
				if (desc.getAccessLocation().getTagNo() == GeneralName.uniformResourceIdentifier)
					address.add(((DERIA5String) desc.getAccessLocation().getName()).getString());
		}
		return address;
	} catch (IOException error) {
		logger.info(error.getMessage());
		return address;
	}
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
protected static TrustAnchor loadTrustAnchor(String trustCertFileName)
	throws Exception
{
	X509Certificate cert = CertificateUtilities.loadCertificate(trustCertFileName);
	
	if (cert != null)
	{
	    byte[] ncBytes = cert
	            .getExtensionValue(X509Extensions.NameConstraints.getId());
	
	    if (ncBytes != null)
	    {
	        ASN1Encodable extValue = X509ExtensionUtil
	                .fromExtensionValue(ncBytes);
	        return new TrustAnchor(cert, extValue.getDEREncoded());
	    }
	    
	    return new TrustAnchor(cert, null);
	}
	
	return null;
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
protected static TrustAnchor getTrustAnchor(String trustcert)
        throws Exception
{
    X509Certificate cert = loadCert(trustcert);
    if (cert != null)
    {
        byte[] ncBytes = cert
                .getExtensionValue(X509Extension.nameConstraints.getId());

        if (ncBytes != null)
        {
            ASN1Encodable extValue = X509ExtensionUtil
                    .fromExtensionValue(ncBytes);
            return new TrustAnchor(cert, extValue.toASN1Primitive().getEncoded(ASN1Encoding.DER));
        }
        return new TrustAnchor(cert, null);
    }
    return null;
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
private TrustAnchor getTrustAnchor(String trustcert) throws Exception
{
    X509Certificate cert = loadCert(trustcert);
    if (cert != null)
    {
        byte[] ncBytes = cert
                .getExtensionValue(X509Extension.nameConstraints.getId());

        if (ncBytes != null)
        {
            ASN1Encodable extValue = X509ExtensionUtil
                    .fromExtensionValue(ncBytes);
            return new TrustAnchor(cert, extValue.toASN1Primitive().getEncoded(ASN1Encoding.DER));
        }
        return new TrustAnchor(cert, null);
    }
    return null;
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
static String getInhabitAnyPolicyExtension(X509Certificate certificate) throws IOException {
    byte[] inhabitAnyPolicyBytes = certificate.getExtensionValue(Extension.inhibitAnyPolicy.toString());
    if (inhabitAnyPolicyBytes != null) {
        ASN1Integer skipCertsInteger = (ASN1Integer) X509ExtensionUtil.fromExtensionValue(inhabitAnyPolicyBytes);
        return skipCertsInteger.getValue().toString();
    }
    return "";
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
/**
 * Gets the list of alternative names of a given name type.
 * 
 * @param certificate the certificate to extract the alternative names from
 * @param nameTypes the name types
 * 
 * @return the alt names, of the given type, within the cert
 */
public static List getAltNames(X509Certificate certificate, Integer[] nameTypes) {
    Logger log = getLogger();
    if (certificate == null) {
        return null;
    }

    List<Object> names = new LinkedList<Object>();
    Collection<List<?>> altNames = null;
    try {
        altNames = X509ExtensionUtil.getSubjectAlternativeNames(certificate);
    } catch (CertificateParsingException e) {
        log.error("Encountered an problem trying to extract Subject Alternate "
                + "Name from supplied certificate: " + e);
        return names;
    }

    if (altNames != null) {
        // 0th position represents the alt name type
        // 1st position contains the alt name data
        for (List altName : altNames) {
            for (Integer nameType : nameTypes) {
                if (altName.get(0).equals(nameType)) {
                    names.add(convertAltNameType(nameType, altName.get(1)));
                    break;
                }
            }
        }
    }

    return names;
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
public BasicConstraintsImpl(X509Certificate cert) throws CertificateException, IOException {
	byte[] extVal = cert.getExtensionValue(Extension.basicConstraints.getId());
	if (extVal == null)
		return;
	org.bouncycastle.asn1.x509.BasicConstraints bc = org.bouncycastle.asn1.x509.BasicConstraints
			.getInstance(X509ExtensionUtil.fromExtensionValue(extVal));
	isCA = bc.isCA();
	pathLen = bc.getPathLenConstraint();
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
public CertificatePoliciesImpl(X509Certificate cert) throws IOException {
	certificatePolicyIds = new ArrayList<>();
	byte[] extVal = cert.getExtensionValue(Extension.certificatePolicies.getId());
	if (extVal == null)
		return;
	org.bouncycastle.asn1.x509.CertificatePolicies cf = org.bouncycastle.asn1.x509.CertificatePolicies
			.getInstance(X509ExtensionUtil.fromExtensionValue(extVal));
	PolicyInformation[] information = cf.getPolicyInformation();
	for (PolicyInformation p : information) {
		ASN1ObjectIdentifier aIdentifier = p.getPolicyIdentifier();
		certificatePolicyIds.add(aIdentifier.getId());
	}
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
public KeyIdentifierImpl(X509Certificate cert) throws CertificateException, IOException {
    byte[] extVal = cert.getExtensionValue(Extension.authorityKeyIdentifier.getId());
    if (extVal == null) {
        lock = true;
        return;
    }
    AuthorityKeyIdentifier aki = AuthorityKeyIdentifier.getInstance(X509ExtensionUtil.fromExtensionValue(extVal));
    keyIdentifier = aki.getKeyIdentifier();
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
public ExtendedKeyUsageImpl(X509Certificate cert) throws IOException {
	keyPurposeIds = new ArrayList<>();
	byte[] extVal = cert.getExtensionValue(Extension.extendedKeyUsage.getId());
	if (extVal == null)
		return;
	org.bouncycastle.asn1.x509.ExtendedKeyUsage usage = org.bouncycastle.asn1.x509.ExtendedKeyUsage
			.getInstance(X509ExtensionUtil.fromExtensionValue(extVal));
	KeyPurposeId[] usages = usage.getUsages();
	for (int i = 0; i < usages.length; i++) {
		keyPurposeIds.add(usages[i].getId());
	}
}
 

import org.bouncycastle.x509.extension.X509ExtensionUtil; //导入依赖的package包/类
public SubjectKeyIdentifierImpl(X509Certificate cert) throws IOException {
    byte[] extVal = cert.getExtensionValue(Extension.subjectKeyIdentifier.getId());
    if (extVal == null) {
        lock = true;
        return;
    }
    org.bouncycastle.asn1.x509.SubjectKeyIdentifier identifier = org.bouncycastle.asn1.x509.SubjectKeyIdentifier
            .getInstance(X509ExtensionUtil.fromExtensionValue(extVal));
    keyIdentifier = identifier.getKeyIdentifier();
}