You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
208 lines
6.3 KiB
208 lines
6.3 KiB
8 months ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
#pragma warning disable
|
||
|
using System;
|
||
|
using System.Collections;
|
||
|
using System.IO;
|
||
|
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Operators;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Security;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Security.Certificates;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
|
||
|
|
||
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.X509
|
||
|
{
|
||
|
/// <remarks>Class to produce an X.509 Version 2 AttributeCertificate.</remarks>
|
||
|
public class X509V2AttributeCertificateGenerator
|
||
|
{
|
||
|
private readonly X509ExtensionsGenerator extGenerator = new X509ExtensionsGenerator();
|
||
|
|
||
|
private V2AttributeCertificateInfoGenerator acInfoGen;
|
||
|
private DerObjectIdentifier sigOID;
|
||
|
private AlgorithmIdentifier sigAlgId;
|
||
|
private string signatureAlgorithm;
|
||
|
|
||
|
public X509V2AttributeCertificateGenerator()
|
||
|
{
|
||
|
acInfoGen = new V2AttributeCertificateInfoGenerator();
|
||
|
}
|
||
|
|
||
|
/// <summary>Reset the generator</summary>
|
||
|
public void Reset()
|
||
|
{
|
||
|
acInfoGen = new V2AttributeCertificateInfoGenerator();
|
||
|
extGenerator.Reset();
|
||
|
}
|
||
|
|
||
|
/// <summary>Set the Holder of this Attribute Certificate.</summary>
|
||
|
public void SetHolder(
|
||
|
AttributeCertificateHolder holder)
|
||
|
{
|
||
|
acInfoGen.SetHolder(holder.holder);
|
||
|
}
|
||
|
|
||
|
/// <summary>Set the issuer.</summary>
|
||
|
public void SetIssuer(
|
||
|
AttributeCertificateIssuer issuer)
|
||
|
{
|
||
|
acInfoGen.SetIssuer(AttCertIssuer.GetInstance(issuer.form));
|
||
|
}
|
||
|
|
||
|
/// <summary>Set the serial number for the certificate.</summary>
|
||
|
public void SetSerialNumber(
|
||
|
BigInteger serialNumber)
|
||
|
{
|
||
|
acInfoGen.SetSerialNumber(new DerInteger(serialNumber));
|
||
|
}
|
||
|
|
||
|
public void SetNotBefore(
|
||
|
DateTime date)
|
||
|
{
|
||
|
acInfoGen.SetStartDate(new DerGeneralizedTime(date));
|
||
|
}
|
||
|
|
||
|
public void SetNotAfter(
|
||
|
DateTime date)
|
||
|
{
|
||
|
acInfoGen.SetEndDate(new DerGeneralizedTime(date));
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Set the signature algorithm. This can be either a name or an OID, names
|
||
|
/// are treated as case insensitive.
|
||
|
/// </summary>
|
||
|
/// <param name="signatureAlgorithm">The algorithm name.</param>
|
||
|
|
||
|
public void SetSignatureAlgorithm(
|
||
|
string signatureAlgorithm)
|
||
|
{
|
||
|
this.signatureAlgorithm = signatureAlgorithm;
|
||
|
|
||
|
try
|
||
|
{
|
||
|
sigOID = X509Utilities.GetAlgorithmOid(signatureAlgorithm);
|
||
|
}
|
||
|
catch (Exception)
|
||
|
{
|
||
|
throw new ArgumentException("Unknown signature type requested");
|
||
|
}
|
||
|
|
||
|
sigAlgId = X509Utilities.GetSigAlgID(sigOID, signatureAlgorithm);
|
||
|
|
||
|
acInfoGen.SetSignature(sigAlgId);
|
||
|
}
|
||
|
|
||
|
/// <summary>Add an attribute.</summary>
|
||
|
public void AddAttribute(
|
||
|
X509Attribute attribute)
|
||
|
{
|
||
|
acInfoGen.AddAttribute(AttributeX509.GetInstance(attribute.ToAsn1Object()));
|
||
|
}
|
||
|
|
||
|
public void SetIssuerUniqueId(
|
||
|
bool[] iui)
|
||
|
{
|
||
|
// TODO convert bool array to bit string
|
||
|
//acInfoGen.SetIssuerUniqueID(iui);
|
||
|
throw BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateNotImplementedException("SetIssuerUniqueId()");
|
||
|
}
|
||
|
|
||
|
/// <summary>Add a given extension field for the standard extensions tag.</summary>
|
||
|
public void AddExtension(
|
||
|
string oid,
|
||
|
bool critical,
|
||
|
Asn1Encodable extensionValue)
|
||
|
{
|
||
|
extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue);
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Add a given extension field for the standard extensions tag.
|
||
|
/// The value parameter becomes the contents of the octet string associated
|
||
|
/// with the extension.
|
||
|
/// </summary>
|
||
|
public void AddExtension(
|
||
|
string oid,
|
||
|
bool critical,
|
||
|
byte[] extensionValue)
|
||
|
{
|
||
|
extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue);
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Generate an X509 certificate, based on the current issuer and subject.
|
||
|
/// </summary>
|
||
|
|
||
|
public IX509AttributeCertificate Generate(
|
||
|
AsymmetricKeyParameter privateKey)
|
||
|
{
|
||
|
return Generate(privateKey, null);
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Generate an X509 certificate, based on the current issuer and subject,
|
||
|
/// using the supplied source of randomness, if required.
|
||
|
/// </summary>
|
||
|
|
||
|
public IX509AttributeCertificate Generate(
|
||
|
AsymmetricKeyParameter privateKey,
|
||
|
SecureRandom random)
|
||
|
{
|
||
|
return Generate(new Asn1SignatureFactory(signatureAlgorithm, privateKey, random));
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Generate a new X.509 Attribute Certificate using the passed in SignatureCalculator.
|
||
|
/// </summary>
|
||
|
/// <param name="signatureCalculatorFactory">A signature calculator factory with the necessary algorithm details.</param>
|
||
|
/// <returns>An IX509AttributeCertificate.</returns>
|
||
|
public IX509AttributeCertificate Generate(ISignatureFactory signatureCalculatorFactory)
|
||
|
{
|
||
|
if (!extGenerator.IsEmpty)
|
||
|
{
|
||
|
acInfoGen.SetExtensions(extGenerator.Generate());
|
||
|
}
|
||
|
|
||
|
AlgorithmIdentifier sigAlgID = (AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails;
|
||
|
|
||
|
acInfoGen.SetSignature(sigAlgID);
|
||
|
|
||
|
AttributeCertificateInfo acInfo = acInfoGen.GenerateAttributeCertificateInfo();
|
||
|
|
||
|
byte[] encoded = acInfo.GetDerEncoded();
|
||
|
|
||
|
IStreamCalculator streamCalculator = signatureCalculatorFactory.CreateCalculator();
|
||
|
|
||
|
streamCalculator.Stream.Write(encoded, 0, encoded.Length);
|
||
|
|
||
|
BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.Dispose(streamCalculator.Stream);
|
||
|
|
||
|
try
|
||
|
{
|
||
|
DerBitString signatureValue = new DerBitString(((IBlockResult)streamCalculator.GetResult()).Collect());
|
||
|
|
||
|
return new X509V2AttributeCertificate(new AttributeCertificate(acInfo, sigAlgID, signatureValue));
|
||
|
}
|
||
|
catch (Exception e)
|
||
|
{
|
||
|
// TODO
|
||
|
// throw new ExtCertificateEncodingException("constructed invalid certificate", e);
|
||
|
throw new CertificateEncodingException("constructed invalid certificate", e);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Allows enumeration of the signature names supported by the generator.
|
||
|
/// </summary>
|
||
|
public IEnumerable SignatureAlgNames
|
||
|
{
|
||
|
get { return X509Utilities.GetAlgNames(); }
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
#pragma warning restore
|
||
|
#endif
|