Java JcaX509ExtensionUtils.parseExtensionValue方法代码示例

import org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils; //导入方法依赖的package包/类
public String getAuthorityKeyIdentifier() {
	byte[] e = certificate.getExtensionValue(Extension.authorityKeyIdentifier.getId());

	if (e == null) {
		return "";
	}

	ASN1Primitive ap;
	byte[] k = {};
	try {
		ap = JcaX509ExtensionUtils.parseExtensionValue(e);
		k = ASN1Sequence.getInstance(ap.getEncoded()).getEncoded();
	} catch (IOException e1) {
		// TODO Auto-generated catch block
		e1.printStackTrace();
	}
	// Very ugly hack to extract the SHA1 Hash (59 Hex Chars) from the
	// Extension :(
	return CertificateHelper.addHexColons(CertificateHelper.byteArrayToHex(k)).substring(12, k.length * 3 - 1);
}
 

import org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils; //导入方法依赖的package包/类
public String getSubjectKeyIdentifier() {
	// https://stackoverflow.com/questions/6523081/why-doesnt-my-key-identifier-match
	byte[] e = certificate.getExtensionValue(Extension.subjectKeyIdentifier.getId());

	if (e == null) {
		return "";
	}

	ASN1Primitive ap;
	byte[] k = {};
	try {
		ap = JcaX509ExtensionUtils.parseExtensionValue(e);
		k = ASN1OctetString.getInstance(ap.getEncoded()).getOctets();
	} catch (IOException e1) {
		e1.printStackTrace();
	}
	return CertificateHelper.addHexColons(CertificateHelper.byteArrayToHex(k));
}
 

import org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils; //导入方法依赖的package包/类
private X509Cert findOcspCertificate() {
  String rId = "";
  try {
    RespID responderId = ocspResponse.getResponderId();
    rId = responderId.toString();
    String primitiveName = getCN(responderId.toASN1Primitive().getName());
    byte[] keyHash = responderId.toASN1Primitive().getKeyHash();

    boolean isKeyHash = useKeyHashForOCSP(primitiveName, keyHash);

    if (isKeyHash) {
      logger.debug("Using keyHash {} for OCSP certificate match", keyHash);
    } else {
      logger.debug("Using ASN1Primitive {} for OCSP certificate match", primitiveName);
    }

    for (CertificateToken cert : getDssSignature().getCertificates()) {
      if (isKeyHash) {
        ASN1Primitive skiPrimitive = JcaX509ExtensionUtils.parseExtensionValue(
            cert.getCertificate().getExtensionValue(Extension.subjectKeyIdentifier.getId()));
        byte[] keyIdentifier = ASN1OctetString.getInstance(skiPrimitive.getEncoded()).getOctets();
        if (Arrays.equals(keyHash, keyIdentifier)) {
          return new X509Cert(cert.getCertificate());
        }
      } else {
        String certCn = getCN(new X500Name(cert.getSubjectX500Principal().getName()));
        if (StringUtils.equals(certCn, primitiveName)) {
          return new X509Cert(cert.getCertificate());
        }
      }
    }

  } catch (IOException e) {
    logger.error("Unable to wrap and extract SubjectKeyIdentifier from certificate - technical error. {}", e);
  }

  logger.error("OCSP certificate for " + rId + " was not found in TSL");
  throw new CertificateNotFoundException("OCSP certificate for " + rId + " was not found in TSL");
}
 

import org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils; //导入方法依赖的package包/类
/**
 * Construct a {@code X509ExtensionData} from an encoded data stream.
 *
 * @param oid The extension OID.
 * @param critical The extension's critical flag.
 * @param data The encoded extension data.
 * @return The decoded extension data object.
 * @throws IOException if an I/O error occurs during decoding.
 */
public static X509ExtensionData decode(String oid, boolean critical, byte[] data) throws IOException {
	ASN1Primitive primitive;

	try {
		primitive = JcaX509ExtensionUtils.parseExtensionValue(data);
	} catch (IllegalArgumentException e) {
		throw new IOException(e.getLocalizedMessage(), e);
	}

	X509ExtensionData decoded;

	switch (oid) {
	case BasicConstraintsExtensionData.OID:
		decoded = BasicConstraintsExtensionData.decode(primitive, critical);
		break;
	case KeyUsageExtensionData.OID:
		decoded = KeyUsageExtensionData.decode(primitive, critical);
		break;
	case ExtendedKeyUsageExtensionData.OID:
		decoded = ExtendedKeyUsageExtensionData.decode(primitive, critical);
		break;
	case SubjectAlternativeNameExtensionData.OID:
		decoded = SubjectAlternativeNameExtensionData.decode(primitive, critical);
		break;
	case SubjectKeyIdentifierExtensionData.OID:
		decoded = SubjectKeyIdentifierExtensionData.decode(primitive, critical);
		break;
	case AuthorityKeyIdentifierExtensionData.OID:
		decoded = AuthorityKeyIdentifierExtensionData.decode(primitive, critical);
		break;
	case CRLNumberExtensionData.OID:
		decoded = CRLNumberExtensionData.decode(primitive, critical);
		break;
	case CRLDistributionPointsExtensionData.OID:
		decoded = CRLDistributionPointsExtensionData.decode(primitive, critical);
		break;
	default:
		decoded = new CustomExtensionData(oid, critical, data);
	}
	return decoded;
}