123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207 |
- #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
- #pragma warning disable
- using System;
- using System.Collections;
- using System.IO;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Operators;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Security;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Security.Certificates;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
- namespace BestHTTP.SecureProtocol.Org.BouncyCastle.X509
- {
- /// <remarks>Class to produce an X.509 Version 2 AttributeCertificate.</remarks>
- public class X509V2AttributeCertificateGenerator
- {
- private readonly X509ExtensionsGenerator extGenerator = new X509ExtensionsGenerator();
- private V2AttributeCertificateInfoGenerator acInfoGen;
- private DerObjectIdentifier sigOID;
- private AlgorithmIdentifier sigAlgId;
- private string signatureAlgorithm;
- public X509V2AttributeCertificateGenerator()
- {
- acInfoGen = new V2AttributeCertificateInfoGenerator();
- }
- /// <summary>Reset the generator</summary>
- public void Reset()
- {
- acInfoGen = new V2AttributeCertificateInfoGenerator();
- extGenerator.Reset();
- }
- /// <summary>Set the Holder of this Attribute Certificate.</summary>
- public void SetHolder(
- AttributeCertificateHolder holder)
- {
- acInfoGen.SetHolder(holder.holder);
- }
- /// <summary>Set the issuer.</summary>
- public void SetIssuer(
- AttributeCertificateIssuer issuer)
- {
- acInfoGen.SetIssuer(AttCertIssuer.GetInstance(issuer.form));
- }
- /// <summary>Set the serial number for the certificate.</summary>
- public void SetSerialNumber(
- BigInteger serialNumber)
- {
- acInfoGen.SetSerialNumber(new DerInteger(serialNumber));
- }
- public void SetNotBefore(
- DateTime date)
- {
- acInfoGen.SetStartDate(new DerGeneralizedTime(date));
- }
- public void SetNotAfter(
- DateTime date)
- {
- acInfoGen.SetEndDate(new DerGeneralizedTime(date));
- }
- /// <summary>
- /// Set the signature algorithm. This can be either a name or an OID, names
- /// are treated as case insensitive.
- /// </summary>
- /// <param name="signatureAlgorithm">The algorithm name.</param>
- public void SetSignatureAlgorithm(
- string signatureAlgorithm)
- {
- this.signatureAlgorithm = signatureAlgorithm;
- try
- {
- sigOID = X509Utilities.GetAlgorithmOid(signatureAlgorithm);
- }
- catch (Exception)
- {
- throw new ArgumentException("Unknown signature type requested");
- }
- sigAlgId = X509Utilities.GetSigAlgID(sigOID, signatureAlgorithm);
- acInfoGen.SetSignature(sigAlgId);
- }
- /// <summary>Add an attribute.</summary>
- public void AddAttribute(
- X509Attribute attribute)
- {
- acInfoGen.AddAttribute(AttributeX509.GetInstance(attribute.ToAsn1Object()));
- }
- public void SetIssuerUniqueId(
- bool[] iui)
- {
- // TODO convert bool array to bit string
- //acInfoGen.SetIssuerUniqueID(iui);
- throw BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateNotImplementedException("SetIssuerUniqueId()");
- }
- /// <summary>Add a given extension field for the standard extensions tag.</summary>
- public void AddExtension(
- string oid,
- bool critical,
- Asn1Encodable extensionValue)
- {
- extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue);
- }
- /// <summary>
- /// Add a given extension field for the standard extensions tag.
- /// The value parameter becomes the contents of the octet string associated
- /// with the extension.
- /// </summary>
- public void AddExtension(
- string oid,
- bool critical,
- byte[] extensionValue)
- {
- extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue);
- }
- /// <summary>
- /// Generate an X509 certificate, based on the current issuer and subject.
- /// </summary>
- public IX509AttributeCertificate Generate(
- AsymmetricKeyParameter privateKey)
- {
- return Generate(privateKey, null);
- }
- /// <summary>
- /// Generate an X509 certificate, based on the current issuer and subject,
- /// using the supplied source of randomness, if required.
- /// </summary>
- public IX509AttributeCertificate Generate(
- AsymmetricKeyParameter privateKey,
- SecureRandom random)
- {
- return Generate(new Asn1SignatureFactory(signatureAlgorithm, privateKey, random));
- }
- /// <summary>
- /// Generate a new X.509 Attribute Certificate using the passed in SignatureCalculator.
- /// </summary>
- /// <param name="signatureCalculatorFactory">A signature calculator factory with the necessary algorithm details.</param>
- /// <returns>An IX509AttributeCertificate.</returns>
- public IX509AttributeCertificate Generate(ISignatureFactory signatureCalculatorFactory)
- {
- if (!extGenerator.IsEmpty)
- {
- acInfoGen.SetExtensions(extGenerator.Generate());
- }
- AlgorithmIdentifier sigAlgID = (AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails;
- acInfoGen.SetSignature(sigAlgID);
- AttributeCertificateInfo acInfo = acInfoGen.GenerateAttributeCertificateInfo();
- byte[] encoded = acInfo.GetDerEncoded();
- IStreamCalculator streamCalculator = signatureCalculatorFactory.CreateCalculator();
- streamCalculator.Stream.Write(encoded, 0, encoded.Length);
- BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.Dispose(streamCalculator.Stream);
- try
- {
- DerBitString signatureValue = new DerBitString(((IBlockResult)streamCalculator.GetResult()).Collect());
- return new X509V2AttributeCertificate(new AttributeCertificate(acInfo, sigAlgID, signatureValue));
- }
- catch (Exception e)
- {
- // TODO
- // throw new ExtCertificateEncodingException("constructed invalid certificate", e);
- throw new CertificateEncodingException("constructed invalid certificate", e);
- }
- }
- /// <summary>
- /// Allows enumeration of the signature names supported by the generator.
- /// </summary>
- public IEnumerable SignatureAlgNames
- {
- get { return X509Utilities.GetAlgNames(); }
- }
- }
- }
- #pragma warning restore
- #endif
|