You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
260 lines
6.6 KiB
260 lines
6.6 KiB
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR) |
|
#pragma warning disable |
|
using System; |
|
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities; |
|
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509 |
|
{ |
|
/** |
|
* The TbsCertificate object. |
|
* <pre> |
|
* TbsCertificate ::= Sequence { |
|
* version [ 0 ] Version DEFAULT v1(0), |
|
* serialNumber CertificateSerialNumber, |
|
* signature AlgorithmIdentifier, |
|
* issuer Name, |
|
* validity Validity, |
|
* subject Name, |
|
* subjectPublicKeyInfo SubjectPublicKeyInfo, |
|
* issuerUniqueID [ 1 ] IMPLICIT UniqueIdentifier OPTIONAL, |
|
* subjectUniqueID [ 2 ] IMPLICIT UniqueIdentifier OPTIONAL, |
|
* extensions [ 3 ] Extensions OPTIONAL |
|
* } |
|
* </pre> |
|
* <p> |
|
* Note: issuerUniqueID and subjectUniqueID are both deprecated by the IETF. This class |
|
* will parse them, but you really shouldn't be creating new ones.</p> |
|
*/ |
|
public class TbsCertificateStructure |
|
: Asn1Encodable |
|
{ |
|
internal Asn1Sequence seq; |
|
internal DerInteger version; |
|
internal DerInteger serialNumber; |
|
internal AlgorithmIdentifier signature; |
|
internal X509Name issuer; |
|
internal Time startDate, endDate; |
|
internal X509Name subject; |
|
internal SubjectPublicKeyInfo subjectPublicKeyInfo; |
|
internal DerBitString issuerUniqueID; |
|
internal DerBitString subjectUniqueID; |
|
internal X509Extensions extensions; |
|
|
|
public static TbsCertificateStructure GetInstance( |
|
Asn1TaggedObject obj, |
|
bool explicitly) |
|
{ |
|
return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); |
|
} |
|
|
|
public static TbsCertificateStructure GetInstance( |
|
object obj) |
|
{ |
|
if (obj is TbsCertificateStructure) |
|
return (TbsCertificateStructure) obj; |
|
|
|
if (obj != null) |
|
return new TbsCertificateStructure(Asn1Sequence.GetInstance(obj)); |
|
|
|
return null; |
|
} |
|
|
|
internal TbsCertificateStructure( |
|
Asn1Sequence seq) |
|
{ |
|
int seqStart = 0; |
|
|
|
this.seq = seq; |
|
|
|
// |
|
// some certficates don't include a version number - we assume v1 |
|
// |
|
if (seq[0] is Asn1TaggedObject) |
|
{ |
|
version = DerInteger.GetInstance((Asn1TaggedObject)seq[0], true); |
|
} |
|
else |
|
{ |
|
seqStart = -1; // field 0 is missing! |
|
version = new DerInteger(0); |
|
} |
|
|
|
bool isV1 = false; |
|
bool isV2 = false; |
|
|
|
if (version.HasValue(0)) |
|
{ |
|
isV1 = true; |
|
} |
|
else if (version.HasValue(1)) |
|
{ |
|
isV2 = true; |
|
} |
|
else if (!version.HasValue(2)) |
|
{ |
|
throw new ArgumentException("version number not recognised"); |
|
} |
|
|
|
serialNumber = DerInteger.GetInstance(seq[seqStart + 1]); |
|
|
|
signature = AlgorithmIdentifier.GetInstance(seq[seqStart + 2]); |
|
issuer = X509Name.GetInstance(seq[seqStart + 3]); |
|
|
|
// |
|
// before and after dates |
|
// |
|
Asn1Sequence dates = (Asn1Sequence)seq[seqStart + 4]; |
|
|
|
startDate = Time.GetInstance(dates[0]); |
|
endDate = Time.GetInstance(dates[1]); |
|
|
|
subject = X509Name.GetInstance(seq[seqStart + 5]); |
|
|
|
// |
|
// public key info. |
|
// |
|
subjectPublicKeyInfo = SubjectPublicKeyInfo.GetInstance(seq[seqStart + 6]); |
|
|
|
int extras = seq.Count - (seqStart + 6) - 1; |
|
if (extras != 0 && isV1) |
|
throw new ArgumentException("version 1 certificate contains extra data"); |
|
|
|
while (extras > 0) |
|
{ |
|
Asn1TaggedObject extra = Asn1TaggedObject.GetInstance(seq[seqStart + 6 + extras]); |
|
switch (extra.TagNo) |
|
{ |
|
case 1: |
|
{ |
|
issuerUniqueID = DerBitString.GetInstance(extra, false); |
|
break; |
|
} |
|
case 2: |
|
{ |
|
subjectUniqueID = DerBitString.GetInstance(extra, false); |
|
break; |
|
} |
|
case 3: |
|
{ |
|
if (isV2) |
|
throw new ArgumentException("version 2 certificate cannot contain extensions"); |
|
|
|
extensions = X509Extensions.GetInstance(Asn1Sequence.GetInstance(extra, true)); |
|
break; |
|
} |
|
default: |
|
{ |
|
throw new ArgumentException("Unknown tag encountered in structure: " + extra.TagNo); |
|
} |
|
} |
|
extras--; |
|
} |
|
} |
|
|
|
public int Version |
|
{ |
|
get { return version.IntValueExact + 1; } |
|
} |
|
|
|
public DerInteger VersionNumber |
|
{ |
|
get { return version; } |
|
} |
|
|
|
public DerInteger SerialNumber |
|
{ |
|
get { return serialNumber; } |
|
} |
|
|
|
public AlgorithmIdentifier Signature |
|
{ |
|
get { return signature; } |
|
} |
|
|
|
public X509Name Issuer |
|
{ |
|
get { return issuer; } |
|
} |
|
|
|
public Time StartDate |
|
{ |
|
get { return startDate; } |
|
} |
|
|
|
public Time EndDate |
|
{ |
|
get { return endDate; } |
|
} |
|
|
|
public X509Name Subject |
|
{ |
|
get { return subject; } |
|
} |
|
|
|
public SubjectPublicKeyInfo SubjectPublicKeyInfo |
|
{ |
|
get { return subjectPublicKeyInfo; } |
|
} |
|
|
|
public DerBitString IssuerUniqueID |
|
{ |
|
get { return issuerUniqueID; } |
|
} |
|
|
|
public DerBitString SubjectUniqueID |
|
{ |
|
get { return subjectUniqueID; } |
|
} |
|
|
|
public X509Extensions Extensions |
|
{ |
|
get { return extensions; } |
|
} |
|
|
|
public override Asn1Object ToAsn1Object() |
|
{ |
|
string property = Org.BouncyCastle.Utilities.Platform.GetEnvironmentVariable("BestHTTP.SecureProtocol.Org.BouncyCastle.X509.Allow_Non-DER_TBSCert"); |
|
if (null == property || BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.EqualsIgnoreCase("true", property)) |
|
return seq; |
|
|
|
Asn1EncodableVector v = new Asn1EncodableVector(); |
|
|
|
// DEFAULT Zero |
|
if (!version.HasValue(0)) |
|
{ |
|
v.Add(new DerTaggedObject(true, 0, version)); |
|
} |
|
|
|
v.Add(serialNumber, signature, issuer); |
|
|
|
// |
|
// before and after dates |
|
// |
|
v.Add(new DerSequence(startDate, endDate)); |
|
|
|
if (subject != null) |
|
{ |
|
v.Add(subject); |
|
} |
|
else |
|
{ |
|
v.Add(DerSequence.Empty); |
|
} |
|
|
|
v.Add(subjectPublicKeyInfo); |
|
|
|
// Note: implicit tag |
|
v.AddOptionalTagged(false, 1, issuerUniqueID); |
|
|
|
// Note: implicit tag |
|
v.AddOptionalTagged(false, 2, subjectUniqueID); |
|
|
|
v.AddOptionalTagged(true, 3, extensions); |
|
|
|
return new DerSequence(v); |
|
} |
|
} |
|
} |
|
#pragma warning restore |
|
#endif
|
|
|