Examples of org.bouncycastle.asn1.x509.X509NameEntryConverter

org.bouncycastle.asn1.x509.X509NameEntryConverter

It turns out that the number of standard ways the fields in a DN should be encoded into their ASN.1 counterparts is rapidly approaching the number of machines on the internet. By default the X509Name class will produce UTF8Strings in line with the current recommendations (RFC 3280).

An example of an encoder look like below:

 public class X509DirEntryConverter extends X509NameEntryConverter { public ASN1Primitive getConvertedValue( ASN1ObjectIdentifier oid, String value) { if (str.length() != 0 && str.charAt(0) == '#') { return convertHexEncoded(str, 1); } if (oid.equals(EmailAddress)) { return new DERIA5String(str); } else if (canBePrintable(str)) { return new DERPrintableString(str); } else if (canBeUTF8(str)) { return new DERUTF8String(str); } else { return new DERBMPString(str); } } }

        return null;
    }


    public byte[] getExtensionValue(String oid) 
    {
        X509Extensions exts = c.getTBSCertificate().getExtensions();


        if (exts != null)
        {
            X509Extension   ext = exts.getExtension(new DERObjectIdentifier(oid));


            if (ext != null)
            {
                ByteArrayOutputStream    bOut = new ByteArrayOutputStream();
                DEROutputStream            dOut = new DEROutputStream(bOut);

View Full Code Here

    public Set getNonCriticalExtensionOIDs() 
    {
        if (this.getVersion() == 3)
        {
            HashSet         set = new HashSet();
            X509Extensions  extensions = c.getTBSCertificate().getExtensions();


            if (extensions != null)
            {
                Enumeration     e = extensions.oids();


                while (e.hasMoreElements())
                {
                    DERObjectIdentifier oid = (DERObjectIdentifier)e.nextElement();
                    X509Extension       ext = extensions.getExtension(oid);


                    if (!ext.isCritical())
                    {
                        set.add(oid.getId());
                    }

View Full Code Here


    public boolean hasUnsupportedCriticalExtension()
    {
        if (this.getVersion() == 3)
        {
            X509Extensions  extensions = c.getTBSCertificate().getExtensions();


            if (extensions != null)
            {
                Enumeration     e = extensions.oids();


                while (e.hasMoreElements())
                {
                    DERObjectIdentifier oid = (DERObjectIdentifier)e.nextElement();
                    if (oid.getId().equals("2.5.29.15")
                       || oid.getId().equals("2.5.29.19"))
                    {
                        continue;
                    }


                    X509Extension       ext = extensions.getExtension(oid);


                    if (ext.isCritical())
                    {
                        return true;
                    }

View Full Code Here

            {
                buf.append("                       " + new String(Hex.encode(sig, i, sig.length - i)) + nl);
            }
        }


        X509Extensions  extensions = c.getTBSCertificate().getExtensions();


        if (extensions != null)
        {
            Enumeration     e = extensions.oids();


            if (e.hasMoreElements())
            {
                buf.append("       Extensions: \n");
            }


            while (e.hasMoreElements())
            {
                DERObjectIdentifier     oid = (DERObjectIdentifier)e.nextElement();
                X509Extension           ext = extensions.getExtension(oid);


                if (ext.getValue() != null)
                {
                    byte[]                  octs = ext.getValue().getOctets();
                    ByteArrayInputStream    bIn = new ByteArrayInputStream(octs);

View Full Code Here

    
    certificateGenerator.setSignatureAlgorithm( "MD5WithRSAEncryption" );
    
    certificateGenerator.setSerialNumber( new BigInteger( ""+SystemTime.getCurrentTime()));
          
    X509Name  issuer_dn = new X509Name(true,cert_dn);
    
    certificateGenerator.setIssuerDN(issuer_dn);
    
    X509Name  subject_dn = new X509Name(true,cert_dn);
    
    certificateGenerator.setSubjectDN(subject_dn);
    
    Calendar  not_after = Calendar.getInstance();

View Full Code Here

            // Add the signerInfo version
            //
            signerinfo.add(new DERInteger(signerversion));


            IssuerAndSerialNumber isAnds = new IssuerAndSerialNumber(
                        new X509Name((ASN1Sequence)getIssuer(signCert.getTBSCertificate())),
                        new DERInteger(signCert.getSerialNumber()));
            signerinfo.add(isAnds);


            // Add the digestAlgorithm
            //

View Full Code Here

     *          the string will be added to the end positions of OID array.
     * 
     * @return X509Name or null if input is null
     */
    public static X509Name stringToBcX509Name(String dn) {
      X509NameEntryConverter converter = new X509DefaultEntryConverter();
      return stringToBcX509Name(dn, converter, true);      
    }

View Full Code Here

          DEREncodable o = (DEREncodable)iter.next();
          vec.add(o);
          attrset = new DERSet(vec);
        }
      }
        X509NameEntryConverter converter = null;
        if (getUsePrintableStringSubjectDN()) {
          converter = new PrintableStringEntryConverter();
        } else {
          converter = new X509DefaultEntryConverter();
        }

View Full Code Here

        
        if(certProfile.getUseCNPostfix()){
          dn = CertTools.insertCNPostfix(dn,certProfile.getCNPostfix());  
        }
                
        X509NameEntryConverter converter = null;
        if (getUsePrintableStringSubjectDN()) {
          converter = new PrintableStringEntryConverter();
        } else {
          converter = new X509DefaultEntryConverter();
        }

View Full Code Here

        // Make DNs
        X509Certificate cacert = (X509Certificate)getCACertificate();
        if (cacert == null) {
          // This is an initial root CA, since no CA-certificate exists
          // (I don't think we can ever get here!!!)
            X509NameEntryConverter converter = null;
            if (getUsePrintableStringSubjectDN()) {
              converter = new PrintableStringEntryConverter();
            } else {
              converter = new X509DefaultEntryConverter();
            }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.bouncycastle.asn1.x509.X509NameEntryConverter

net.sf.libpdfsign.CRLDownloader

net.sf.libpdfsign.OCSPClient

org.apache.geronimo.util.asn1.ASN1InputStream

org.bouncycastle.asn1.ASN1Encodable

org.bouncycastle.asn1.ASN1EncodableVector

org.bouncycastle.asn1.ASN1Enumerated

org.bouncycastle.asn1.ASN1InputStream

org.bouncycastle.asn1.ASN1Integer

org.bouncycastle.asn1.ASN1ObjectIdentifier

org.bouncycastle.asn1.ASN1Primitive

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.