You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
115 lines
3.1 KiB
115 lines
3.1 KiB
1 year ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
|
#pragma warning disable
|
||
|
|
using System;
|
||
|
|
using System.Collections;
|
||
|
|
|
||
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Collections;
|
||
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Date;
|
||
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.X509;
|
||
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.X509.Store;
|
||
|
|
|
||
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Pkix
|
||
|
|
{
|
||
|
|
public class PkixCrlUtilities
|
||
|
|
{
|
||
|
|
public virtual ISet FindCrls(X509CrlStoreSelector crlselect, PkixParameters paramsPkix, DateTime currentDate)
|
||
|
|
{
|
||
|
|
ISet initialSet = new HashSet();
|
||
|
|
|
||
|
|
// get complete CRL(s)
|
||
|
|
try
|
||
|
|
{
|
||
|
|
initialSet.AddAll(FindCrls(crlselect, paramsPkix.GetAdditionalStores()));
|
||
|
|
initialSet.AddAll(FindCrls(crlselect, paramsPkix.GetStores()));
|
||
|
|
}
|
||
|
|
catch (Exception e)
|
||
|
|
{
|
||
|
|
throw new Exception("Exception obtaining complete CRLs.", e);
|
||
|
|
}
|
||
|
|
|
||
|
|
ISet finalSet = new HashSet();
|
||
|
|
DateTime validityDate = currentDate;
|
||
|
|
|
||
|
|
if (paramsPkix.Date != null)
|
||
|
|
{
|
||
|
|
validityDate = paramsPkix.Date.Value;
|
||
|
|
}
|
||
|
|
|
||
|
|
// based on RFC 5280 6.3.3
|
||
|
|
foreach (X509Crl crl in initialSet)
|
||
|
|
{
|
||
|
|
DateTimeObject nextUpdate = crl.NextUpdate;
|
||
|
|
|
||
|
|
if (null == nextUpdate || nextUpdate.Value.CompareTo(validityDate) > 0)
|
||
|
|
{
|
||
|
|
X509Certificate cert = crlselect.CertificateChecking;
|
||
|
|
|
||
|
|
if (null == cert || crl.ThisUpdate.CompareTo(cert.NotAfter) < 0)
|
||
|
|
{
|
||
|
|
finalSet.Add(crl);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return finalSet;
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual ISet FindCrls(X509CrlStoreSelector crlselect, PkixParameters paramsPkix)
|
||
|
|
{
|
||
|
|
ISet completeSet = new HashSet();
|
||
|
|
|
||
|
|
// get complete CRL(s)
|
||
|
|
try
|
||
|
|
{
|
||
|
|
completeSet.AddAll(FindCrls(crlselect, paramsPkix.GetStores()));
|
||
|
|
}
|
||
|
|
catch (Exception e)
|
||
|
|
{
|
||
|
|
throw new Exception("Exception obtaining complete CRLs.", e);
|
||
|
|
}
|
||
|
|
|
||
|
|
return completeSet;
|
||
|
|
}
|
||
|
|
|
||
|
|
/// <summary>
|
||
|
|
/// crl checking
|
||
|
|
/// Return a Collection of all CRLs found in the X509Store's that are
|
||
|
|
/// matching the crlSelect criteriums.
|
||
|
|
/// </summary>
|
||
|
|
/// <param name="crlSelect">a {@link X509CRLStoreSelector} object that will be used
|
||
|
|
/// to select the CRLs</param>
|
||
|
|
/// <param name="crlStores">a List containing only {@link org.bouncycastle.x509.X509Store
|
||
|
|
/// X509Store} objects. These are used to search for CRLs</param>
|
||
|
|
/// <returns>a Collection of all found {@link X509CRL X509CRL} objects. May be
|
||
|
|
/// empty but never <code>null</code>.
|
||
|
|
/// </returns>
|
||
|
|
private ICollection FindCrls(X509CrlStoreSelector crlSelect, IList crlStores)
|
||
|
|
{
|
||
|
|
ISet crls = new HashSet();
|
||
|
|
|
||
|
|
Exception lastException = null;
|
||
|
|
bool foundValidStore = false;
|
||
|
|
|
||
|
|
foreach (IX509Store store in crlStores)
|
||
|
|
{
|
||
|
|
try
|
||
|
|
{
|
||
|
|
crls.AddAll(store.GetMatches(crlSelect));
|
||
|
|
foundValidStore = true;
|
||
|
|
}
|
||
|
|
catch (X509StoreException e)
|
||
|
|
{
|
||
|
|
lastException = new Exception("Exception searching in X.509 CRL store.", e);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!foundValidStore && lastException != null)
|
||
|
|
throw lastException;
|
||
|
|
|
||
|
|
return crls;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
#pragma warning restore
|
||
|
|
#endif
|