You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
200 lines
4.4 KiB
200 lines
4.4 KiB
8 months ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
#pragma warning disable
|
||
|
using System;
|
||
|
using System.Collections;
|
||
|
using System.IO;
|
||
|
using System.Text;
|
||
|
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Pkcs;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Security.Certificates;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Encoders;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.IO;
|
||
|
|
||
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.X509
|
||
|
{
|
||
|
public class X509CrlParser
|
||
|
{
|
||
|
private static readonly PemParser PemCrlParser = new PemParser("CRL");
|
||
|
|
||
|
private readonly bool lazyAsn1;
|
||
|
|
||
|
private Asn1Set sCrlData;
|
||
|
private int sCrlDataObjectCount;
|
||
|
private Stream currentCrlStream;
|
||
|
|
||
|
public X509CrlParser()
|
||
|
: this(false)
|
||
|
{
|
||
|
}
|
||
|
|
||
|
public X509CrlParser(
|
||
|
bool lazyAsn1)
|
||
|
{
|
||
|
this.lazyAsn1 = lazyAsn1;
|
||
|
}
|
||
|
|
||
|
private X509Crl ReadPemCrl(
|
||
|
Stream inStream)
|
||
|
{
|
||
|
Asn1Sequence seq = PemCrlParser.ReadPemObject(inStream);
|
||
|
|
||
|
return seq == null
|
||
|
? null
|
||
|
: CreateX509Crl(CertificateList.GetInstance(seq));
|
||
|
}
|
||
|
|
||
|
private X509Crl ReadDerCrl(
|
||
|
Asn1InputStream dIn)
|
||
|
{
|
||
|
Asn1Sequence seq = (Asn1Sequence)dIn.ReadObject();
|
||
|
|
||
|
if (seq.Count > 1 && seq[0] is DerObjectIdentifier)
|
||
|
{
|
||
|
if (seq[0].Equals(PkcsObjectIdentifiers.SignedData))
|
||
|
{
|
||
|
sCrlData = SignedData.GetInstance(
|
||
|
Asn1Sequence.GetInstance((Asn1TaggedObject) seq[1], true)).Crls;
|
||
|
|
||
|
return GetCrl();
|
||
|
}
|
||
|
}
|
||
|
|
||
|
return CreateX509Crl(CertificateList.GetInstance(seq));
|
||
|
}
|
||
|
|
||
|
private X509Crl GetCrl()
|
||
|
{
|
||
|
if (sCrlData == null || sCrlDataObjectCount >= sCrlData.Count)
|
||
|
{
|
||
|
return null;
|
||
|
}
|
||
|
|
||
|
return CreateX509Crl(
|
||
|
CertificateList.GetInstance(
|
||
|
sCrlData[sCrlDataObjectCount++]));
|
||
|
}
|
||
|
|
||
|
protected virtual X509Crl CreateX509Crl(
|
||
|
CertificateList c)
|
||
|
{
|
||
|
return new X509Crl(c);
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Create loading data from byte array.
|
||
|
/// </summary>
|
||
|
/// <param name="input"></param>
|
||
|
public X509Crl ReadCrl(
|
||
|
byte[] input)
|
||
|
{
|
||
|
return ReadCrl(new MemoryStream(input, false));
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Create loading data from byte array.
|
||
|
/// </summary>
|
||
|
/// <param name="input"></param>
|
||
|
public ICollection ReadCrls(
|
||
|
byte[] input)
|
||
|
{
|
||
|
return ReadCrls(new MemoryStream(input, false));
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Generates a certificate revocation list (CRL) object and initializes
|
||
|
* it with the data read from the input stream inStream.
|
||
|
*/
|
||
|
public X509Crl ReadCrl(
|
||
|
Stream inStream)
|
||
|
{
|
||
|
if (inStream == null)
|
||
|
throw new ArgumentNullException("inStream");
|
||
|
if (!inStream.CanRead)
|
||
|
throw new ArgumentException("inStream must be read-able", "inStream");
|
||
|
|
||
|
if (currentCrlStream == null)
|
||
|
{
|
||
|
currentCrlStream = inStream;
|
||
|
sCrlData = null;
|
||
|
sCrlDataObjectCount = 0;
|
||
|
}
|
||
|
else if (currentCrlStream != inStream) // reset if input stream has changed
|
||
|
{
|
||
|
currentCrlStream = inStream;
|
||
|
sCrlData = null;
|
||
|
sCrlDataObjectCount = 0;
|
||
|
}
|
||
|
|
||
|
try
|
||
|
{
|
||
|
if (sCrlData != null)
|
||
|
{
|
||
|
if (sCrlDataObjectCount != sCrlData.Count)
|
||
|
{
|
||
|
return GetCrl();
|
||
|
}
|
||
|
|
||
|
sCrlData = null;
|
||
|
sCrlDataObjectCount = 0;
|
||
|
return null;
|
||
|
}
|
||
|
|
||
|
PushbackStream pis = new PushbackStream(inStream);
|
||
|
int tag = pis.ReadByte();
|
||
|
|
||
|
if (tag < 0)
|
||
|
return null;
|
||
|
|
||
|
pis.Unread(tag);
|
||
|
|
||
|
if (tag != 0x30) // assume ascii PEM encoded.
|
||
|
{
|
||
|
return ReadPemCrl(pis);
|
||
|
}
|
||
|
|
||
|
Asn1InputStream asn1 = lazyAsn1
|
||
|
? new LazyAsn1InputStream(pis)
|
||
|
: new Asn1InputStream(pis);
|
||
|
|
||
|
return ReadDerCrl(asn1);
|
||
|
}
|
||
|
catch (CrlException e)
|
||
|
{
|
||
|
throw e;
|
||
|
}
|
||
|
catch (Exception e)
|
||
|
{
|
||
|
throw new CrlException(e.ToString());
|
||
|
}
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Returns a (possibly empty) collection view of the CRLs read from
|
||
|
* the given input stream inStream.
|
||
|
*
|
||
|
* The inStream may contain a sequence of DER-encoded CRLs, or
|
||
|
* a PKCS#7 CRL set. This is a PKCS#7 SignedData object, with the
|
||
|
* only significant field being crls. In particular the signature
|
||
|
* and the contents are ignored.
|
||
|
*/
|
||
|
public ICollection ReadCrls(
|
||
|
Stream inStream)
|
||
|
{
|
||
|
X509Crl crl;
|
||
|
IList crls = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateArrayList();
|
||
|
|
||
|
while ((crl = ReadCrl(inStream)) != null)
|
||
|
{
|
||
|
crls.Add(crl);
|
||
|
}
|
||
|
|
||
|
return crls;
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
#pragma warning restore
|
||
|
#endif
|