Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/quite/humla-spongycastle.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'prov/src/main/java/org/spongycastle/jce/provider/X509CertParser.java')
-rw-r--r--prov/src/main/java/org/spongycastle/jce/provider/X509CertParser.java158
1 files changed, 158 insertions, 0 deletions
diff --git a/prov/src/main/java/org/spongycastle/jce/provider/X509CertParser.java b/prov/src/main/java/org/spongycastle/jce/provider/X509CertParser.java
new file mode 100644
index 00000000..455310cf
--- /dev/null
+++ b/prov/src/main/java/org/spongycastle/jce/provider/X509CertParser.java
@@ -0,0 +1,158 @@
+package org.spongycastle.jce.provider;
+
+import java.io.BufferedInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.security.cert.Certificate;
+import java.security.cert.CertificateParsingException;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.List;
+
+import org.spongycastle.asn1.ASN1InputStream;
+import org.spongycastle.asn1.ASN1ObjectIdentifier;
+import org.spongycastle.asn1.ASN1Sequence;
+import org.spongycastle.asn1.ASN1Set;
+import org.spongycastle.asn1.ASN1TaggedObject;
+import org.spongycastle.asn1.pkcs.PKCSObjectIdentifiers;
+import org.spongycastle.asn1.pkcs.SignedData;
+import org.spongycastle.x509.X509StreamParserSpi;
+import org.spongycastle.x509.util.StreamParsingException;
+
+public class X509CertParser
+ extends X509StreamParserSpi
+{
+ private static final PEMUtil PEM_PARSER = new PEMUtil("CERTIFICATE");
+
+ private ASN1Set sData = null;
+ private int sDataObjectCount = 0;
+ private InputStream currentStream = null;
+
+ private Certificate readDERCertificate(
+ InputStream in)
+ throws IOException, CertificateParsingException
+ {
+ ASN1InputStream dIn = new ASN1InputStream(in);
+ ASN1Sequence seq = (ASN1Sequence)dIn.readObject();
+
+ if (seq.size() > 1
+ && seq.getObjectAt(0) instanceof ASN1ObjectIdentifier)
+ {
+ if (seq.getObjectAt(0).equals(PKCSObjectIdentifiers.signedData))
+ {
+ sData = new SignedData(ASN1Sequence.getInstance(
+ (ASN1TaggedObject)seq.getObjectAt(1), true)).getCertificates();
+
+ return getCertificate();
+ }
+ }
+
+ return new X509CertificateObject(
+ org.spongycastle.asn1.x509.Certificate.getInstance(seq));
+ }
+
+ private Certificate getCertificate()
+ throws CertificateParsingException
+ {
+ if (sData != null)
+ {
+ while (sDataObjectCount < sData.size())
+ {
+ Object obj = sData.getObjectAt(sDataObjectCount++);
+
+ if (obj instanceof ASN1Sequence)
+ {
+ return new X509CertificateObject(
+ org.spongycastle.asn1.x509.Certificate.getInstance(obj));
+ }
+ }
+ }
+
+ return null;
+ }
+
+ private Certificate readPEMCertificate(
+ InputStream in)
+ throws IOException, CertificateParsingException
+ {
+ ASN1Sequence seq = PEM_PARSER.readPEMObject(in);
+
+ if (seq != null)
+ {
+ return new X509CertificateObject(
+ org.spongycastle.asn1.x509.Certificate.getInstance(seq));
+ }
+
+ return null;
+ }
+
+ public void engineInit(InputStream in)
+ {
+ currentStream = in;
+ sData = null;
+ sDataObjectCount = 0;
+
+ if (!currentStream.markSupported())
+ {
+ currentStream = new BufferedInputStream(currentStream);
+ }
+ }
+
+ public Object engineRead()
+ throws StreamParsingException
+ {
+ try
+ {
+ if (sData != null)
+ {
+ if (sDataObjectCount != sData.size())
+ {
+ return getCertificate();
+ }
+ else
+ {
+ sData = null;
+ sDataObjectCount = 0;
+ return null;
+ }
+ }
+
+ currentStream.mark(10);
+ int tag = currentStream.read();
+
+ if (tag == -1)
+ {
+ return null;
+ }
+
+ if (tag != 0x30) // assume ascii PEM encoded.
+ {
+ currentStream.reset();
+ return readPEMCertificate(currentStream);
+ }
+ else
+ {
+ currentStream.reset();
+ return readDERCertificate(currentStream);
+ }
+ }
+ catch (Exception e)
+ {
+ throw new StreamParsingException(e.toString(), e);
+ }
+ }
+
+ public Collection engineReadAll()
+ throws StreamParsingException
+ {
+ Certificate cert;
+ List certs = new ArrayList();
+
+ while ((cert = (Certificate)engineRead()) != null)
+ {
+ certs.add(cert);
+ }
+
+ return certs;
+ }
+}