You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
207 lines
6.3 KiB
207 lines
6.3 KiB
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR) |
|
#pragma warning disable |
|
using System; |
|
using System.Collections; |
|
using System.IO; |
|
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Operators; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Math; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Security; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Security.Certificates; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities; |
|
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.X509 |
|
{ |
|
/// <remarks>Class to produce an X.509 Version 2 AttributeCertificate.</remarks> |
|
public class X509V2AttributeCertificateGenerator |
|
{ |
|
private readonly X509ExtensionsGenerator extGenerator = new X509ExtensionsGenerator(); |
|
|
|
private V2AttributeCertificateInfoGenerator acInfoGen; |
|
private DerObjectIdentifier sigOID; |
|
private AlgorithmIdentifier sigAlgId; |
|
private string signatureAlgorithm; |
|
|
|
public X509V2AttributeCertificateGenerator() |
|
{ |
|
acInfoGen = new V2AttributeCertificateInfoGenerator(); |
|
} |
|
|
|
/// <summary>Reset the generator</summary> |
|
public void Reset() |
|
{ |
|
acInfoGen = new V2AttributeCertificateInfoGenerator(); |
|
extGenerator.Reset(); |
|
} |
|
|
|
/// <summary>Set the Holder of this Attribute Certificate.</summary> |
|
public void SetHolder( |
|
AttributeCertificateHolder holder) |
|
{ |
|
acInfoGen.SetHolder(holder.holder); |
|
} |
|
|
|
/// <summary>Set the issuer.</summary> |
|
public void SetIssuer( |
|
AttributeCertificateIssuer issuer) |
|
{ |
|
acInfoGen.SetIssuer(AttCertIssuer.GetInstance(issuer.form)); |
|
} |
|
|
|
/// <summary>Set the serial number for the certificate.</summary> |
|
public void SetSerialNumber( |
|
BigInteger serialNumber) |
|
{ |
|
acInfoGen.SetSerialNumber(new DerInteger(serialNumber)); |
|
} |
|
|
|
public void SetNotBefore( |
|
DateTime date) |
|
{ |
|
acInfoGen.SetStartDate(new DerGeneralizedTime(date)); |
|
} |
|
|
|
public void SetNotAfter( |
|
DateTime date) |
|
{ |
|
acInfoGen.SetEndDate(new DerGeneralizedTime(date)); |
|
} |
|
|
|
/// <summary> |
|
/// Set the signature algorithm. This can be either a name or an OID, names |
|
/// are treated as case insensitive. |
|
/// </summary> |
|
/// <param name="signatureAlgorithm">The algorithm name.</param> |
|
|
|
public void SetSignatureAlgorithm( |
|
string signatureAlgorithm) |
|
{ |
|
this.signatureAlgorithm = signatureAlgorithm; |
|
|
|
try |
|
{ |
|
sigOID = X509Utilities.GetAlgorithmOid(signatureAlgorithm); |
|
} |
|
catch (Exception) |
|
{ |
|
throw new ArgumentException("Unknown signature type requested"); |
|
} |
|
|
|
sigAlgId = X509Utilities.GetSigAlgID(sigOID, signatureAlgorithm); |
|
|
|
acInfoGen.SetSignature(sigAlgId); |
|
} |
|
|
|
/// <summary>Add an attribute.</summary> |
|
public void AddAttribute( |
|
X509Attribute attribute) |
|
{ |
|
acInfoGen.AddAttribute(AttributeX509.GetInstance(attribute.ToAsn1Object())); |
|
} |
|
|
|
public void SetIssuerUniqueId( |
|
bool[] iui) |
|
{ |
|
// TODO convert bool array to bit string |
|
//acInfoGen.SetIssuerUniqueID(iui); |
|
throw BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateNotImplementedException("SetIssuerUniqueId()"); |
|
} |
|
|
|
/// <summary>Add a given extension field for the standard extensions tag.</summary> |
|
public void AddExtension( |
|
string oid, |
|
bool critical, |
|
Asn1Encodable extensionValue) |
|
{ |
|
extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue); |
|
} |
|
|
|
/// <summary> |
|
/// Add a given extension field for the standard extensions tag. |
|
/// The value parameter becomes the contents of the octet string associated |
|
/// with the extension. |
|
/// </summary> |
|
public void AddExtension( |
|
string oid, |
|
bool critical, |
|
byte[] extensionValue) |
|
{ |
|
extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue); |
|
} |
|
|
|
/// <summary> |
|
/// Generate an X509 certificate, based on the current issuer and subject. |
|
/// </summary> |
|
|
|
public IX509AttributeCertificate Generate( |
|
AsymmetricKeyParameter privateKey) |
|
{ |
|
return Generate(privateKey, null); |
|
} |
|
|
|
/// <summary> |
|
/// Generate an X509 certificate, based on the current issuer and subject, |
|
/// using the supplied source of randomness, if required. |
|
/// </summary> |
|
|
|
public IX509AttributeCertificate Generate( |
|
AsymmetricKeyParameter privateKey, |
|
SecureRandom random) |
|
{ |
|
return Generate(new Asn1SignatureFactory(signatureAlgorithm, privateKey, random)); |
|
} |
|
|
|
/// <summary> |
|
/// Generate a new X.509 Attribute Certificate using the passed in SignatureCalculator. |
|
/// </summary> |
|
/// <param name="signatureCalculatorFactory">A signature calculator factory with the necessary algorithm details.</param> |
|
/// <returns>An IX509AttributeCertificate.</returns> |
|
public IX509AttributeCertificate Generate(ISignatureFactory signatureCalculatorFactory) |
|
{ |
|
if (!extGenerator.IsEmpty) |
|
{ |
|
acInfoGen.SetExtensions(extGenerator.Generate()); |
|
} |
|
|
|
AlgorithmIdentifier sigAlgID = (AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails; |
|
|
|
acInfoGen.SetSignature(sigAlgID); |
|
|
|
AttributeCertificateInfo acInfo = acInfoGen.GenerateAttributeCertificateInfo(); |
|
|
|
byte[] encoded = acInfo.GetDerEncoded(); |
|
|
|
IStreamCalculator streamCalculator = signatureCalculatorFactory.CreateCalculator(); |
|
|
|
streamCalculator.Stream.Write(encoded, 0, encoded.Length); |
|
|
|
BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.Dispose(streamCalculator.Stream); |
|
|
|
try |
|
{ |
|
DerBitString signatureValue = new DerBitString(((IBlockResult)streamCalculator.GetResult()).Collect()); |
|
|
|
return new X509V2AttributeCertificate(new AttributeCertificate(acInfo, sigAlgID, signatureValue)); |
|
} |
|
catch (Exception e) |
|
{ |
|
// TODO |
|
// throw new ExtCertificateEncodingException("constructed invalid certificate", e); |
|
throw new CertificateEncodingException("constructed invalid certificate", e); |
|
} |
|
} |
|
|
|
/// <summary> |
|
/// Allows enumeration of the signature names supported by the generator. |
|
/// </summary> |
|
public IEnumerable SignatureAlgNames |
|
{ |
|
get { return X509Utilities.GetAlgNames(); } |
|
} |
|
} |
|
} |
|
#pragma warning restore |
|
#endif
|
|
|