blob: 7bf15755b7572235a97452de6d645076657f947a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
package org.spongycastle.jce.provider.test;
import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.Security;
import org.spongycastle.asn1.ASN1InputStream;
import org.spongycastle.asn1.ASN1Sequence;
import org.spongycastle.asn1.DEROutputStream;
import org.spongycastle.asn1.pkcs.PKCSObjectIdentifiers;
import org.spongycastle.asn1.x509.AlgorithmIdentifier;
import org.spongycastle.jce.netscape.NetscapeCertRequest;
import org.spongycastle.jce.provider.BouncyCastleProvider;
import org.spongycastle.util.encoders.Base64;
import org.spongycastle.util.test.SimpleTestResult;
import org.spongycastle.util.test.Test;
import org.spongycastle.util.test.TestResult;
/**
*/
public class NetscapeCertRequestTest
implements Test
{
/* from NS 4.75 */
static final String test1 =
"MIIBRzCBsTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAmwdh+LJXQ8AtXczo"+
"4EIGfXjpmDwsoIRpPaXEx1CBHhpon/Dpo/o5Vw2WoWNICXj5lmqhftIpCPO9qKxx"+
"85x6k/fuyTPH8P02hkmscAYsgqOgb/1yRCNXFryuFOATqxw1tsuye5Q3lTU9JCLU"+
"UilQ6BV8n3fm2egtPPUaJEuCvcsCAwEAARYNZml4ZWQtZm9yLW5vdzANBgkqhkiG"+
"9w0BAQQFAAOBgQAImbJD6xHbJtXl6kOTbCFoMnDk7U0o6pHy9l56DYVsiluXegiY"+
"6twB4o7OWsrqTb+gVvzK65FfP+NBVVzxY8UzcjbqC51yvO/9wnpUsIBqD/Gvi1gE"+
"qvw7RHwVEhdzsvLwlL22G8CfDxHnWLww39j8uRJsmoNiKJly3BcsZkLd9g==";
public String getName()
{
return "NetscapeCertRequest";
}
public TestResult perform()
{
try
{
String challenge = "fixed-for-now";
byte data [] = Base64.decode (test1);
ASN1InputStream in = new ASN1InputStream (new ByteArrayInputStream(data));
ASN1Sequence spkac = (ASN1Sequence)in.readObject ();
// System.out.println("SPKAC: \n"+DERDump.dumpAsString (spkac));
NetscapeCertRequest nscr = new NetscapeCertRequest (spkac);
if (!nscr.verify (challenge))
{
return new SimpleTestResult(false, getName() + ": 1 - not verified");
}
//now try to generate one
KeyPairGenerator kpg =
KeyPairGenerator.getInstance (nscr.getKeyAlgorithm().getObjectId ().getId(), "SC");
kpg.initialize (1024);
KeyPair kp = kpg.genKeyPair();
nscr.setPublicKey (kp.getPublic());
nscr.sign (kp.getPrivate());
ByteArrayOutputStream baos = new ByteArrayOutputStream();
DEROutputStream deros = new DEROutputStream (baos);
deros.writeObject (nscr);
deros.close();
ASN1InputStream in2 =
new ASN1InputStream (new ByteArrayInputStream(baos.toByteArray()));
ASN1Sequence spkac2 = (ASN1Sequence)in2.readObject ();
// System.out.println("SPKAC2: \n"+DERDump.dumpAsString (spkac2));
NetscapeCertRequest nscr2 = new NetscapeCertRequest (spkac2);
if (!nscr2.verify (challenge))
{
return new SimpleTestResult(false, getName() + ": 2 - not verified");
}
//lets build it from scratch
challenge = "try it";
NetscapeCertRequest nscr3 =
new NetscapeCertRequest (challenge,
new AlgorithmIdentifier(PKCSObjectIdentifiers.sha1WithRSAEncryption, null),
kp.getPublic());
nscr3.sign (kp.getPrivate());
// System.out.println("SPKAC3: \n"+DERDump.dumpAsString (nscr3));
if (nscr3.verify (challenge))
{
return new SimpleTestResult(true, getName() + ": Okay");
}
else
{
return new SimpleTestResult(false, getName() + ": 3 - not verified");
}
}
catch (Exception e)
{
return new SimpleTestResult(false, getName() + ": exception - " + e.toString());
}
}
public static void main(
String[] args)
{
Security.addProvider(new BouncyCastleProvider());
Test test = new NetscapeCertRequestTest();
TestResult result = test.perform();
System.out.println(result.toString());
}
}
|
