123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189 |
- #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
- #pragma warning disable
- using System;
- using System.Collections;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Digests;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Encoders;
- namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509
- {
- /**
- * The AuthorityKeyIdentifier object.
- * <pre>
- * id-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::= { id-ce 35 }
- *
- * AuthorityKeyIdentifier ::= Sequence {
- * keyIdentifier [0] IMPLICIT KeyIdentifier OPTIONAL,
- * authorityCertIssuer [1] IMPLICIT GeneralNames OPTIONAL,
- * authorityCertSerialNumber [2] IMPLICIT CertificateSerialNumber OPTIONAL }
- *
- * KeyIdentifier ::= OCTET STRING
- * </pre>
- *
- */
- public class AuthorityKeyIdentifier
- : Asn1Encodable
- {
- public static AuthorityKeyIdentifier GetInstance(Asn1TaggedObject obj, bool explicitly)
- {
- return GetInstance(Asn1Sequence.GetInstance(obj, explicitly));
- }
- public static AuthorityKeyIdentifier GetInstance(object obj)
- {
- if (obj is AuthorityKeyIdentifier)
- return (AuthorityKeyIdentifier)obj;
- if (obj is X509Extension)
- return GetInstance(X509Extension.ConvertValueToObject((X509Extension)obj));
- if (obj == null)
- return null;
- return new AuthorityKeyIdentifier(Asn1Sequence.GetInstance(obj));
- }
- public static AuthorityKeyIdentifier FromExtensions(X509Extensions extensions)
- {
- return GetInstance(X509Extensions.GetExtensionParsedValue(extensions, X509Extensions.AuthorityKeyIdentifier));
- }
- private readonly Asn1OctetString keyidentifier;
- private readonly GeneralNames certissuer;
- private readonly DerInteger certserno;
- protected internal AuthorityKeyIdentifier(
- Asn1Sequence seq)
- {
- foreach (Asn1Encodable element in seq)
- {
- Asn1TaggedObject obj = Asn1TaggedObject.GetInstance(element);
- switch (obj.TagNo)
- {
- case 0:
- this.keyidentifier = Asn1OctetString.GetInstance(obj, false);
- break;
- case 1:
- this.certissuer = GeneralNames.GetInstance(obj, false);
- break;
- case 2:
- this.certserno = DerInteger.GetInstance(obj, false);
- break;
- default:
- throw new ArgumentException("illegal tag");
- }
- }
- }
- /**
- *
- * Calulates the keyidentifier using a SHA1 hash over the BIT STRING
- * from SubjectPublicKeyInfo as defined in RFC2459.
- *
- * Example of making a AuthorityKeyIdentifier:
- * <pre>
- * SubjectPublicKeyInfo apki = new SubjectPublicKeyInfo((ASN1Sequence)new ASN1InputStream(
- * publicKey.getEncoded()).readObject());
- * AuthorityKeyIdentifier aki = new AuthorityKeyIdentifier(apki);
- * </pre>
- *
- **/
- public AuthorityKeyIdentifier(
- SubjectPublicKeyInfo spki)
- : this(spki, null, null)
- {
- }
- /**
- * create an AuthorityKeyIdentifier with the GeneralNames tag and
- * the serial number provided as well.
- */
- public AuthorityKeyIdentifier(
- SubjectPublicKeyInfo spki,
- GeneralNames name,
- BigInteger serialNumber)
- {
- IDigest digest = new Sha1Digest();
- byte[] resBuf = new byte[digest.GetDigestSize()];
- byte[] bytes = spki.PublicKeyData.GetBytes();
- digest.BlockUpdate(bytes, 0, bytes.Length);
- digest.DoFinal(resBuf, 0);
- this.keyidentifier = new DerOctetString(resBuf);
- this.certissuer = name;
- this.certserno = serialNumber == null ? null : new DerInteger(serialNumber);
- }
- /**
- * create an AuthorityKeyIdentifier with the GeneralNames tag and
- * the serial number provided.
- */
- public AuthorityKeyIdentifier(
- GeneralNames name,
- BigInteger serialNumber)
- : this((byte[])null, name, serialNumber)
- {
- }
- /**
- * create an AuthorityKeyIdentifier with a precomputed key identifier
- */
- public AuthorityKeyIdentifier(
- byte[] keyIdentifier)
- : this(keyIdentifier, null, null)
- {
- }
- /**
- * create an AuthorityKeyIdentifier with a precomupted key identifier
- * and the GeneralNames tag and the serial number provided as well.
- */
- public AuthorityKeyIdentifier(
- byte[] keyIdentifier,
- GeneralNames name,
- BigInteger serialNumber)
- {
- this.keyidentifier = keyIdentifier == null ? null : new DerOctetString(keyIdentifier);
- this.certissuer = name;
- this.certserno = serialNumber == null ? null : new DerInteger(serialNumber);
- }
- public byte[] GetKeyIdentifier()
- {
- return keyidentifier == null ? null : keyidentifier.GetOctets();
- }
- public GeneralNames AuthorityCertIssuer
- {
- get { return certissuer; }
- }
- public BigInteger AuthorityCertSerialNumber
- {
- get { return certserno == null ? null : certserno.Value; }
- }
- /**
- * Produce an object suitable for an Asn1OutputStream.
- */
- public override Asn1Object ToAsn1Object()
- {
- Asn1EncodableVector v = new Asn1EncodableVector();
- v.AddOptionalTagged(false, 0, keyidentifier);
- v.AddOptionalTagged(false, 1, certissuer);
- v.AddOptionalTagged(false, 2, certserno);
- return new DerSequence(v);
- }
- public override string ToString()
- {
- string keyID = (keyidentifier != null) ? Hex.ToHexString(keyidentifier.GetOctets()) : "null";
- return "AuthorityKeyIdentifier: KeyID(" + keyID + ")";
- }
- }
- }
- #pragma warning restore
- #endif
|