| Methods Summary |
|---|
| private static org.bouncycastle.asn1.ASN1Set | getASN1Set(org.bouncycastle.asn1.ASN1SetParser asn1SetParser)
return asn1SetParser == null
? null
: ASN1Set.getInstance(asn1SetParser.getDERObject());
|
| public org.bouncycastle.x509.X509Store | getAttributeCertificates(java.lang.String type, java.lang.String provider)return a X509Store containing the attribute certificates, if any, contained
in this message.
return getAttributeCertificates(type, CMSUtils.getProvider(provider));
|
| public org.bouncycastle.x509.X509Store | getAttributeCertificates(java.lang.String type, java.security.Provider provider)return a X509Store containing the attribute certificates, if any, contained
in this message.
if (_attributeStore == null)
{
populateCertCrlSets();
_attributeStore = HELPER.createAttributeStore(type, provider, _certSet);
}
return _attributeStore;
|
| public org.bouncycastle.x509.X509Store | getCRLs(java.lang.String type, java.lang.String provider)return a X509Store containing CRLs, if any, contained
in this message.
return getCRLs(type, CMSUtils.getProvider(provider));
|
| public org.bouncycastle.x509.X509Store | getCRLs(java.lang.String type, java.security.Provider provider)return a X509Store containing CRLs, if any, contained
in this message.
if (_crlStore == null)
{
populateCertCrlSets();
_crlStore = HELPER.createCRLsStore(type, provider, _crlSet);
}
return _crlStore;
|
| public org.bouncycastle.x509.X509Store | getCertificates(java.lang.String type, java.security.Provider provider)return a X509Store containing the public key certificates, if any, contained
in this message.
if (_certificateStore == null)
{
populateCertCrlSets();
_certificateStore = HELPER.createCertificateStore(type, provider, _certSet);
}
return _certificateStore;
|
| public org.bouncycastle.x509.X509Store | getCertificates(java.lang.String type, java.lang.String provider)return a X509Store containing the public key certificates, if any, contained
in this message.
return getCertificates(type, CMSUtils.getProvider(provider));
|
| public java.security.cert.CertStore | getCertificatesAndCRLs(java.lang.String type, java.lang.String provider)return a CertStore containing the certificates and CRLs associated with
this message.
return getCertificatesAndCRLs(type, CMSUtils.getProvider(provider));
|
| public java.security.cert.CertStore | getCertificatesAndCRLs(java.lang.String type, java.security.Provider provider)return a CertStore containing the certificates and CRLs associated with
this message.
if (_certStore == null)
{
populateCertCrlSets();
_certStore = HELPER.createCertStore(type, provider, _certSet, _crlSet);
}
return _certStore;
|
| public CMSTypedStream | getSignedContent()
if (_signedContent != null)
{
InputStream digStream = _signedContent.getContentStream();
Iterator it = _digests.values().iterator();
while (it.hasNext())
{
digStream = new DigestInputStream(digStream, (MessageDigest)it.next());
}
return new CMSTypedStream(_signedContent.getContentType(), digStream);
}
else
{
return null;
}
|
| public java.lang.String | getSignedContentTypeOID()Return the a string representation of the OID associated with the
encapsulated content info structure carried in the signed data.
return _signedContentType.getId();
|
| public SignerInformationStore | getSignerInfos()return the collection of signers that are associated with the
signatures for the message.
if (_signerInfoStore == null)
{
populateCertCrlSets();
List signerInfos = new ArrayList();
Map hashes = new HashMap();
Iterator it = _digests.keySet().iterator();
while (it.hasNext())
{
Object digestKey = it.next();
hashes.put(digestKey, ((MessageDigest)_digests.get(digestKey)).digest());
}
try
{
ASN1SetParser s = _signedData.getSignerInfos();
DEREncodable o;
while ((o = s.readObject()) != null)
{
SignerInfo info = SignerInfo.getInstance(o.getDERObject());
String digestName = HELPER.getDigestAlgName(info.getDigestAlgorithm().getObjectId().getId());
byte[] hash = (byte[])hashes.get(digestName);
signerInfos.add(new SignerInformation(info, _signedContentType, null, new BaseDigestCalculator(hash)));
}
}
catch (IOException e)
{
throw new CMSException("io exception: " + e.getMessage(), e);
}
_signerInfoStore = new SignerInformationStore(signerInfos);
}
return _signerInfoStore;
|
| public int | getVersion()Return the version number for the SignedData object
return _signedData.getVersion().getValue().intValue();
|
| private static org.bouncycastle.asn1.x509.AlgorithmIdentifier | makeAlgId(java.lang.String oid, byte[] params)
if (params != null)
{
return new AlgorithmIdentifier(
new DERObjectIdentifier(oid), makeObj(params));
}
else
{
return new AlgorithmIdentifier(
new DERObjectIdentifier(oid), new DERNull());
}
|
| private static org.bouncycastle.asn1.DERObject | makeObj(byte[] encoding)
if (encoding == null)
{
return null;
}
ASN1InputStream aIn = new ASN1InputStream(encoding);
return aIn.readObject();
|
| private static void | pipeOctetString(org.bouncycastle.asn1.ASN1OctetStringParser octs, java.io.OutputStream output)
BEROctetStringGenerator octGen = new BEROctetStringGenerator(output, 0, true);
// TODO Allow specification of a specific fragment size?
OutputStream outOctets = octGen.getOctetOutputStream();
Streams.pipeAll(octs.getOctetStream(), outOctets);
outOctets.close();
|
| private void | populateCertCrlSets()
if (_isCertCrlParsed)
{
return;
}
_isCertCrlParsed = true;
try
{
// care! Streaming - these must be done in exactly this order.
_certSet = getASN1Set(_signedData.getCertificates());
_crlSet = getASN1Set(_signedData.getCrls());
}
catch (IOException e)
{
throw new CMSException("problem parsing cert/crl sets", e);
}
|
| public static java.io.OutputStream | replaceCertificatesAndCRLs(java.io.InputStream original, java.security.cert.CertStore certsAndCrls, java.io.OutputStream out)Replace the certificate and CRL information associated with this
CMSSignedData object with the new one passed in.
The output stream is returned unclosed.
ASN1StreamParser in = new ASN1StreamParser(original, CMSUtils.getMaximumMemory());
ContentInfoParser contentInfo = new ContentInfoParser((ASN1SequenceParser)in.readObject());
SignedDataParser signedData = SignedDataParser.getInstance(contentInfo.getContent(DERTags.SEQUENCE));
BERSequenceGenerator sGen = new BERSequenceGenerator(out);
sGen.addObject(CMSObjectIdentifiers.signedData);
BERSequenceGenerator sigGen = new BERSequenceGenerator(sGen.getRawOutputStream(), 0, true);
// version number
sigGen.addObject(signedData.getVersion());
// digests
sigGen.getRawOutputStream().write(signedData.getDigestAlgorithms().getDERObject().getEncoded());
// encap content info
ContentInfoParser encapContentInfo = signedData.getEncapContentInfo();
BERSequenceGenerator eiGen = new BERSequenceGenerator(sigGen.getRawOutputStream());
eiGen.addObject(encapContentInfo.getContentType());
ASN1OctetStringParser octs = (ASN1OctetStringParser)
encapContentInfo.getContent(DERTags.OCTET_STRING);
if (octs != null)
{
pipeOctetString(octs, eiGen.getRawOutputStream());
}
eiGen.close();
//
// skip existing certs and CRLs
//
getASN1Set(signedData.getCertificates());
getASN1Set(signedData.getCrls());
//
// replace the certs and crls in the SignedData object
//
ASN1Set certs;
try
{
certs = CMSUtils.createBerSetFromList(CMSUtils.getCertificatesFromStore(certsAndCrls));
}
catch (CertStoreException e)
{
throw new CMSException("error getting certs from certStore", e);
}
if (certs.size() > 0)
{
sigGen.getRawOutputStream().write(new DERTaggedObject(false, 0, certs).getEncoded());
}
ASN1Set crls;
try
{
crls = CMSUtils.createBerSetFromList(CMSUtils.getCRLsFromStore(certsAndCrls));
}
catch (CertStoreException e)
{
throw new CMSException("error getting crls from certStore", e);
}
if (crls.size() > 0)
{
sigGen.getRawOutputStream().write(new DERTaggedObject(false, 1, crls).getEncoded());
}
sigGen.getRawOutputStream().write(signedData.getSignerInfos().getDERObject().getEncoded());
sigGen.close();
sGen.close();
return out;
|
| public static java.io.OutputStream | replaceSigners(java.io.InputStream original, SignerInformationStore signerInformationStore, java.io.OutputStream out)Replace the signerinformation store associated with the passed
in message contained in the stream original with the new one passed in.
You would probably only want to do this if you wanted to change the unsigned
attributes associated with a signer, or perhaps delete one.
The output stream is returned unclosed.
ASN1StreamParser in = new ASN1StreamParser(original, CMSUtils.getMaximumMemory());
ContentInfoParser contentInfo = new ContentInfoParser((ASN1SequenceParser)in.readObject());
SignedDataParser signedData = SignedDataParser.getInstance(contentInfo.getContent(DERTags.SEQUENCE));
BERSequenceGenerator sGen = new BERSequenceGenerator(out);
sGen.addObject(CMSObjectIdentifiers.signedData);
BERSequenceGenerator sigGen = new BERSequenceGenerator(sGen.getRawOutputStream(), 0, true);
// version number
sigGen.addObject(signedData.getVersion());
// digests
signedData.getDigestAlgorithms().getDERObject(); // skip old ones
ASN1EncodableVector digestAlgs = new ASN1EncodableVector();
for (Iterator it = signerInformationStore.getSigners().iterator(); it.hasNext();)
{
SignerInformation signer = (SignerInformation)it.next();
AlgorithmIdentifier digAlgId;
digAlgId = makeAlgId(signer.getDigestAlgOID(), signer.getDigestAlgParams());
digestAlgs.add(digAlgId);
}
sigGen.getRawOutputStream().write(new DERSet(digestAlgs).getEncoded());
// encap content info
ContentInfoParser encapContentInfo = signedData.getEncapContentInfo();
BERSequenceGenerator eiGen = new BERSequenceGenerator(sigGen.getRawOutputStream());
eiGen.addObject(encapContentInfo.getContentType());
ASN1OctetStringParser octs = (ASN1OctetStringParser)
encapContentInfo.getContent(DERTags.OCTET_STRING);
if (octs != null)
{
pipeOctetString(octs, eiGen.getRawOutputStream());
}
eiGen.close();
writeSetToGeneratorTagged(sigGen, signedData.getCertificates(), 0);
writeSetToGeneratorTagged(sigGen, signedData.getCrls(), 1);
ASN1EncodableVector signerInfos = new ASN1EncodableVector();
for (Iterator it = signerInformationStore.getSigners().iterator(); it.hasNext();)
{
SignerInformation signer = (SignerInformation)it.next();
signerInfos.add(signer.toSignerInfo());
}
sigGen.getRawOutputStream().write(new DERSet(signerInfos).getEncoded());
sigGen.close();
sGen.close();
return out;
|
| private static void | writeSetToGeneratorTagged(org.bouncycastle.asn1.ASN1Generator asn1Gen, org.bouncycastle.asn1.ASN1SetParser asn1SetParser, int tagNo)
ASN1Set asn1Set = getASN1Set(asn1SetParser);
if (asn1Set != null)
{
ASN1TaggedObject taggedObj = (asn1SetParser instanceof BERSetParser)
? new BERTaggedObject(false, tagNo, asn1Set)
: new DERTaggedObject(false, tagNo, asn1Set);
asn1Gen.getRawOutputStream().write(taggedObj.getEncoded());
}
|
