BasicCertificateExtension baseExt = new BasicCertificateExtension();

    baseExt.init(1, "1.2.3", false, props);

   

    assertTrue(((DEROctetString)value).toString(),((DEROctetString)value).toString().equalsIgnoreCase("#DBE81232"));

   

    props = new Properties();

    props.put("id1.property.encoding", "DEROCTETSTRING");

    props.put("id1.property.value", "123SA4");

   

    BasicCertificateExtension baseExt = new BasicCertificateExtension();

    baseExt.init(1, "1.2.3", false, props);

   

    assertTrue(((DERPrintableString)value).toString(),((DERPrintableString)value).toString().equals("This is a printable string"));

   

    props = new Properties();

    props.put("id1.property.encoding", "DERPRINTABLESTRING");

    props.put("id1.property.value", "This is a non  printable string ���");

    for (int i = 0; i < gns.length; i++) {

      int tag = gns[i].getTagNo();

      if (tag == 4) {

        found = true;

        X509Name dir = (X509Name) enc;

        String str = dir.toString();

        log.debug("DirectoryName: " + str);

        assertEquals("CN=testDirName,O=Foo,OU=Bar,C=SE", str);

      }

    }

    assertTrue(found);

    altName = "rfc822name=foo@bar.se, rfc822name=foo@bar.com, uri=http://foo.bar.se, directoryName="

        + LDAPDN.escapeRDN("CN=testDirName, O=Foo, OU=Bar, C=SE")

        + ", dnsName=foo.bar.se, dnsName=foo.bar.com";

    san = CertTools.getGeneralNamesFromAltName(altName);

    gns = san.getNames();

    int dnscount = 0;

    int rfc822count = 0;

    for (int i = 0; i < gns.length; i++) {

      int tag = gns[i].getTagNo();

      if (tag == 2) {

        dnscount++;

        DERIA5String dir = (DERIA5String) enc;

        String str = dir.getString();

        log.info("DnsName: " + str);

      }

      if (tag == 1) {

        rfc822count++;

        DERIA5String dir = (DERIA5String) enc;

        String str = dir.getString();

        log.info("Rfc822Name: " + str);

      }

        if (attributes == null) {

            return null;

        }       

        Attribute attr = attributes.get(PKCSObjectIdentifiers.pkcs_9_at_challengePassword);

        if (attr == null) {

            // See if we have it embedded in an extension request instead

            attr = attributes.get(PKCSObjectIdentifiers.pkcs_9_at_extensionRequest);

            if (attr == null) {

                return null;               

            // Get self signed cert to identify the senders public key

            ASN1Set certs = sd.getCertificates();

            if (certs.size() > 0) {

                // There should be only one...

                if (dercert != null) {

                    // Requestors self-signed certificate is requestKeyInfo

                    ByteArrayOutputStream bOut = new ByteArrayOutputStream();

                    DEROutputStream dOut = new DEROutputStream(bOut);

                    dOut.writeObject(dercert);

        return retval;

    }

  private DEREncodable parseDERInteger(String value) throws CertificateExtentionConfigurationException {

    try{

      BigInteger intValue = new BigInteger(value,10);

      retval = new DERInteger(intValue);

    }catch(NumberFormatException e){

      throw new CertificateExtentionConfigurationException(intres.getLocalizedMessage("certext.basic.illegalvalue",value,Integer.valueOf(getId())));

    return retval;

  }

 

  private DEREncodable parseDEROctetString(String value) throws CertificateExtentionConfigurationException {

    if(value.matches("^\\p{XDigit}*")){     

      byte[] bytes = Hex.decode(value);

      retval = new DEROctetString(bytes);

    }else{   

      throw new CertificateExtentionConfigurationException(intres.getLocalizedMessage("certext.basic.illegalvalue",value,Integer.valueOf(getId())));

  /**

   * Tries to read the hex-string as an DERObject. If it contains more than one DEREncodable object, return a DERSequence of the objects.

   */

  private DEREncodable parseHexEncodedDERObject(String value) throws CertificateExtentionConfigurationException {

    if(value.matches("^\\p{XDigit}*")){     

      byte[] bytes = Hex.decode(value);

      try {

        ASN1InputStream ais = new ASN1InputStream(bytes);

        if (ais.available() > 0) {

          ASN1EncodableVector ev = new ASN1EncodableVector();

          ev.add(firstObject);

          while (ais.available() > 0) {

            ev.add(ais.readObject());

    return retval;

  }

  private DEREncodable parseDERBoolean(String value) throws CertificateExtentionConfigurationException {

    if(value.equalsIgnoreCase("TRUE")){

      retval = DERBoolean.TRUE;

    }

   

    if(value.equalsIgnoreCase("FALSE")){

      do {

        av = getReq().getRegInfo(i);

        if (av != null) {

          if (StringUtils.equals(CRMFObjectIdentifiers.regCtrl_regToken.getId(), av.getObjectId().getId())) {

            final DERUTF8String str = DERUTF8String.getInstance(enc);

            ret = str.getString();

            if (log.isDebugEnabled()) {

              log.debug("Found a request password in CRMF request regCtrl_regToken");

            }

          }

        }

        i++;

      } while ( (av != null) && (ret == null) );

    }   

    if (ret == null) {

      // If there is "Registration Token Control" in the CertRequest controls containing a password, we can use that

      // Note, this is the correct way to use the regToken according to RFC4211, section "6.1.  Registration Token Control"

      AttributeTypeAndValue av = null;

      int i = 0;

      do {

        av = getReq().getCertReq().getControls(i);

        if (av != null) {

          if (StringUtils.equals(CRMFObjectIdentifiers.regCtrl_regToken.getId(), av.getObjectId().getId())) {

            final DERUTF8String str = DERUTF8String.getInstance(enc);

            ret = str.getString();

            if (log.isDebugEnabled()) {

              log.debug("Found a request password in CRMF request regCtrl_regToken");

            }