X509CertSelector.java revision 866e7ae17a3da81a02b0b144e0c9c2b3196d293a
1adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project/* 2adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Licensed to the Apache Software Foundation (ASF) under one or more 3adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * contributor license agreements. See the NOTICE file distributed with 4adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * this work for additional information regarding copyright ownership. 5adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The ASF licenses this file to You under the Apache License, Version 2.0 6adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * (the "License"); you may not use this file except in compliance with 7adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the License. You may obtain a copy of the License at 8adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * 9adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * http://www.apache.org/licenses/LICENSE-2.0 10adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * 11adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Unless required by applicable law or agreed to in writing, software 12adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * distributed under the License is distributed on an "AS IS" BASIS, 13adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 14adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * See the License for the specific language governing permissions and 15adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * limitations under the License. 16adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 17adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 18adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectpackage java.security.cert; 19adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 20adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.io.IOException; 21adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.math.BigInteger; 22adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.security.PublicKey; 23adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.ArrayList; 24adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.Arrays; 25adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.Collection; 26adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.Collections; 27adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.Date; 28adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.HashSet; 29adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.Iterator; 30adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.List; 31adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.util.Set; 32adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport javax.security.auth.x500.X500Principal; 33693eacca9fa67ad79d1b35dbaad61c5ac1ac457cElliott Hughesimport libcore.base.EmptyArray; 34adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.asn1.ASN1OctetString; 35adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.AlgorithmIdentifier; 36adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.CertificatePolicies; 37adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.GeneralName; 38adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.GeneralNames; 39adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.NameConstraints; 40adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.PolicyInformation; 41adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.PrivateKeyUsagePeriod; 42adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.x509.SubjectPublicKeyInfo; 43adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 44adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 45adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 46adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project/** 47adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * A certificate selector ({@code CertSelector} for selecting {@code 48adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * X509Certificate}s that match the specified criteria. 49adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 50adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectpublic class X509CertSelector implements CertSelector { 51adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 52adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // match criteria 53adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private X509Certificate certificateEquals; 54adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private BigInteger serialNumber; 55adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private X500Principal issuer; 56adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private X500Principal subject; 57adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private byte[] subjectKeyIdentifier; 58adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private byte[] authorityKeyIdentifier; 59adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private Date certificateValid; 60adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private String subjectPublicKeyAlgID; 61adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private Date privateKeyValid; 62adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private byte[] subjectPublicKey; 63adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private boolean[] keyUsage; 64adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private Set extendedKeyUsage; 65adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private boolean matchAllNames = true; 66adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private int pathLen = -1; 67adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private List[] subjectAltNames; 68adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private NameConstraints nameConstraints; 69866e7ae17a3da81a02b0b144e0c9c2b3196d293aElliott Hughes private Set<String> policies; 70adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private ArrayList pathToNames; 71adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 72adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // needed to avoid needless encoding/decoding work 73adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private PublicKey subjectPublicKeyImpl; 74adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private String issuerName; 75adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private byte[] issuerBytes; 76adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 77adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 78adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Creates a new {@code X509CertSelector}. 79adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 80adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public X509CertSelector() {} 81adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 82adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 83adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the certificate that a matching certificate must be equal to. 842f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 85adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param certificate 86adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the certificate to match, or null to not check this criteria. 87adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 88adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setCertificate(X509Certificate certificate) { 89adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project certificateEquals = certificate; 90adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 91adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 92adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 93adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the certificate that a matching certificate must be equal to. 942f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 95adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the certificate to match, or null if this criteria is not 96adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * checked. 97adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 98adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public X509Certificate getCertificate() { 99adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return certificateEquals; 100adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 101adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 102adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 103adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the serial number that a certificate must match. 1042f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 105adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param serialNumber 106adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the serial number to match, or {@code null} to not check the 107adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * serial number. 108adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 109adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSerialNumber(BigInteger serialNumber) { 110adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.serialNumber = serialNumber; 111adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 112adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 113adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 114adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the serial number that a certificate must match. 1152f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 116adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the serial number to match, or {@code null} if the serial number 117adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * is not to be checked. 118adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 119adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public BigInteger getSerialNumber() { 120adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return serialNumber; 121adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 122adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 123adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 124adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the issuer that a certificate must match. 1252f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 126adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param issuer 127adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the issuer to match, or {@code null} if the issuer is not to 128adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * be checked. 129adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 130adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setIssuer(X500Principal issuer) { 131adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuer = issuer; 132adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerName = null; 133adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerBytes = null; 134adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 135adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 136adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 137adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the issuer that a certificate must match. 1382f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 139adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the issuer that a certificate must match, or {@code null} if the 140adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * issuer is not to be checked. 141adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 142adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public X500Principal getIssuer() { 143adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return issuer; 144adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 145adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 146adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 147adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <b>Do not use</b>, use {@link #getIssuer()} or 148adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link #getIssuerAsBytes()} instead. Sets the issuer that a certificate 149adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * must match. 1502f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 151adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param issuerName 152adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the issuer in a RFC 2253 format string, or {@code null} to not 153adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * check the issuer. 154adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 155adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if parsing the issuer fails. 156adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 157adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setIssuer(String issuerName) throws IOException { 158adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (issuerName == null) { 159adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuer = null; 160adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerName = null; 161adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerBytes = null; 162adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 163adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 164adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 165adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuer = new X500Principal(issuerName); 166adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerName = issuerName; 167adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerBytes = null; 168adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IllegalArgumentException e) { 169adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throw new IOException(e.getMessage()); 170adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 171adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 172adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 173adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 174adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <b>Do not use</b>, use {@link #getIssuer()} or 175adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link #getIssuerAsBytes()} instead. Returns the issuer that a 176adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * certificate must match in a RFC 2253 format string. 1772f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 178adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the issuer in a RFC 2253 format string, or {@code null} if the 179adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * issuer is not to be checked. 180adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 181adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public String getIssuerAsString() { 182adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (issuer == null) { 183adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 184adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 185adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (issuerName == null) { 186adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project issuerName = issuer.getName(); 187adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 188adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return issuerName; 189adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 190adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 191adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 192adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the issuer that a certificate must match. 1932f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 194adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param issuerDN 195adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the distinguished issuer name in ASN.1 DER encoded format, or 196adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@code null} to not check the issuer. 197adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 198adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if decoding the issuer fail. 199adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 200adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setIssuer(byte[] issuerDN) throws IOException { 201adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (issuerDN == null) { 202adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project issuer = null; 203adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 204adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 205adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 206adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project issuer = new X500Principal(issuerDN); 207adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerName = null; 208adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.issuerBytes = new byte[issuerDN.length]; 209adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(issuerDN, 0, this.issuerBytes, 0, issuerDN.length); 210adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IllegalArgumentException e) { 211adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throw new IOException(e.getMessage()); 212adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 213adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 214adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 215adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 216adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the issuer that a certificate must match. 2172f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 218adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the distinguished issuer name in ASN.1 DER encoded format, or 219adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@code null} if the issuer is not to be checked. 220adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 221adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if encoding the issuer fails. 222adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 223adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public byte[] getIssuerAsBytes() throws IOException { 224adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (issuer == null) { 225adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 226adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 227adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (issuerBytes == null) { 228adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project issuerBytes = issuer.getEncoded(); 229adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 230adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project byte[] result = new byte[issuerBytes.length]; 231adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(issuerBytes, 0, result, 0, issuerBytes.length); 232adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return result; 233adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 234adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 235adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 236adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Set the subject that a certificate must match. 2372f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 238adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param subject 239adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the subject distinguished name or {@code null} to not check 240adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the subject. 241adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 242adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubject(X500Principal subject) { 243adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.subject = subject; 244adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 245adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 246adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 247adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the subject that a certificate must match. 2482f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 249adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the subject distinguished name, or null if the subject is not to 250adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * be checked. 251adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 252adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public X500Principal getSubject() { 253adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return subject; 254adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 255adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 256adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 257adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <b>Do not use</b>, use {@link #setSubject(byte[])} or 258adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link #setSubject(X500Principal)} instead. Returns the subject that a 259adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * certificate must match. 2602f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 261adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param subjectDN 262adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the subject distinguished name in RFC 2253 format or {@code 263adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * null} to not check the subject. 264adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 265adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if decoding the subject fails. 266adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 267adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubject(String subjectDN) throws IOException { 268adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectDN == null) { 269adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subject = null; 270adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 271adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 272adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 273adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subject = new X500Principal(subjectDN); 274adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IllegalArgumentException e) { 275adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throw new IOException(e.getMessage()); 276adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 277adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 278adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 279adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 280adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <b>Do not use</b>, use {@link #getSubject()} or 281adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link #getSubjectAsBytes()} instead. Returns the subject that a 282adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * certificate must match. 2832f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 284adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the subject distinguished name in RFC 2253 format, or {@code 285adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * null} if the subject is not to be checked. 286adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 287adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public String getSubjectAsString() { 288adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subject == null) { 289adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 290adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 291adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return subject.getName(); 292adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 293adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 294adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 295adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the subject that a certificate must match. 2962f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 297adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param subjectDN 298adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the subject distinguished name in ASN.1 DER format, or {@code 299adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * null} to not check the subject. 300adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 301adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if decoding the subject fails. 302adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 303adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubject(byte[] subjectDN) throws IOException { 304adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectDN == null) { 305adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subject = null; 306adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 307adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 308adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 309adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subject = new X500Principal(subjectDN); 310adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IllegalArgumentException e) { 311adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throw new IOException(e.getMessage()); 312adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 313adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 314adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 315adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 316adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the subject that a certificate must match. 3172f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 318adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the subject distinguished name in ASN.1 DER format, or {@code 319adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * null} if the subject is not to be checked. 320adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 321adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if encoding the subject fails. 322adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 323adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public byte[] getSubjectAsBytes() throws IOException { 324adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subject == null) { 325adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 326adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 327adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return subject.getEncoded(); 328adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 329adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 330adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 331adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the {@literal SubjectKeyIdentifier} extension. 332adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 333adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The {@code subjectKeyIdentifier} should be a single DER encoded value. 3342f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 335adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param subjectKeyIdentifier 336adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the subject key identifier or {@code null} to disable this 337adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * check. 338adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 339adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubjectKeyIdentifier(byte[] subjectKeyIdentifier) { 340adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectKeyIdentifier == null) { 341adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.subjectKeyIdentifier = null; 342adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 343adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 344adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.subjectKeyIdentifier = new byte[subjectKeyIdentifier.length]; 345adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(subjectKeyIdentifier, 0, this.subjectKeyIdentifier, 0, 346adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectKeyIdentifier.length); 347adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 348adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 349adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 350adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the {@literal SubjectKeyIdentifier} extension. 3512f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 352adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the subject key identifier or {@code null} if it is not to be 353adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * checked. 354adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 355adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public byte[] getSubjectKeyIdentifier() { 356adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectKeyIdentifier == null) { 357adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 358adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 359adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project byte[] res = new byte[subjectKeyIdentifier.length]; 360adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(subjectKeyIdentifier, 0, res, 0, res.length); 361adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return res; 362adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 363adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 364adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 365adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the {@literal AuthorityKeyIdentifier} extension. 3662f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 367adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param authorityKeyIdentifier 368adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the authority key identifier, or {@code null} to disable this 369adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * check. 370adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 371adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setAuthorityKeyIdentifier(byte[] authorityKeyIdentifier) { 372adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (authorityKeyIdentifier == null) { 373adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.authorityKeyIdentifier = null; 374adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 375adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 376adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.authorityKeyIdentifier = new byte[authorityKeyIdentifier.length]; 377adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(authorityKeyIdentifier, 0, 378adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.authorityKeyIdentifier, 0, 379adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project authorityKeyIdentifier.length); 380adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 381adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 382adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 383adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the {@literal AuthorityKeyIdentifier} 384adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * extension. 3852f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 386adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the authority key identifier, or {@code null} if it is not to be 387adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * checked. 388adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 389adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public byte[] getAuthorityKeyIdentifier() { 390adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (authorityKeyIdentifier == null) { 391adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 392adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 393adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project byte[] res = new byte[authorityKeyIdentifier.length]; 394adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(authorityKeyIdentifier, 0, res, 0, res.length); 395adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return res; 396adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 397adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 398adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 399adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the validity date of the certificate. 400adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 401adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The certificate must be valid at the specified date. 402adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param certificateValid 403adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the validity date or {@code null} to not check the date. 404adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 405adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setCertificateValid(Date certificateValid) { 406adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.certificateValid = (certificateValid == null) 407adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ? null 408adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project : (Date) certificateValid.clone(); 409adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 410adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 411adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 412adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the validity date of the certificate. 4132f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 414adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the validity date or {@code null} if the date is not to be 415adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * checked. 416adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 417adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public Date getCertificateValid() { 418adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return (certificateValid == null) 419adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ? null 420adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project : (Date) certificateValid.clone(); 421adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 422adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 423adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 424adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the validity date of the private key. 425adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 426adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The private key must be valid at the specified date. 4272f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 428adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param privateKeyValid 429adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the validity date or {@code null} to not check the date. 430adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 431adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setPrivateKeyValid(Date privateKeyValid) { 432adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (privateKeyValid == null) { 433adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.privateKeyValid = null; 434adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 435adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 436adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.privateKeyValid = (Date) privateKeyValid.clone(); 437adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 438adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 439adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 440adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the validity date of the private key. 441adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 442adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The private key must be valid at the specified date. 4432f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 444adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the validity date or {@code null} if the date is not to be 445adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * checked. 446adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 447adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public Date getPrivateKeyValid() { 448adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (privateKeyValid != null) { 449adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return (Date) privateKeyValid.clone(); 450adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 451adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 452adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 453adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 454adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private void checkOID(String oid) throws IOException { 455adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int beg = 0; 456adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int end = oid.indexOf('.', beg); 457adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 458adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int comp = Integer.parseInt(oid.substring(beg, end)); 459adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project beg = end + 1; 460adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((comp < 0) || (comp > 2)) { 461897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes throw new IOException("Bad OID: " + oid); 462adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 463adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project end = oid.indexOf('.', beg); 464adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project comp = Integer.parseInt(oid.substring(beg, end)); 465adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((comp < 0) || (comp > 39)) { 466897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes throw new IOException("Bad OID: " + oid); 467adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 468adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IndexOutOfBoundsException e) { 469897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes throw new IOException("Bad OID: " + oid); 470adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (NumberFormatException e) { 471897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes throw new IOException("Bad OID: " + oid); 472adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 473adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 474adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 475adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 476adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the subject public key signature algorithm. 477adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 478adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The certificate must contain a subject public key with the algorithm 479adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * specified. 4802f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 481adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param oid 482adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the OID (object identifier) of the signature algorithm or 483adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@code null} to not check the OID. 484adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 485adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if the specified object identifier is invalid. 486adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 487adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubjectPublicKeyAlgID(String oid) throws IOException { 488adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (oid == null) { 489adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectPublicKeyAlgID = null; 490adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 491adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 492adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project checkOID(oid); 493adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectPublicKeyAlgID = oid; 494adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 495adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 496adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 497adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the subject public key signature algorithm. 4982f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 499adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the OID (object identifier) or the signature algorithm or {@code 500adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * null} if it's not to be checked. 501adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 502adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public String getSubjectPublicKeyAlgID() { 503adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return subjectPublicKeyAlgID; 504adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 505adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 506adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 507adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the subject public key. 5082f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 509adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param key 510adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the subject public key or {@code null} to not check the key. 511adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 512adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubjectPublicKey(PublicKey key) { 513adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectPublicKey = (key == null) ? null : key.getEncoded(); 514adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectPublicKeyImpl = key; 515adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 516adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 517adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 518adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the subject public key. 5192f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 520adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param key 521adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the subject public key in ASN.1 DER encoded format or {@code null} to 522adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * not check the key. 523adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 524adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if decoding the the public key fails. 525adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 526adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubjectPublicKey(byte[] key) throws IOException { 527adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (key == null) { 528adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectPublicKey = null; 529adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectPublicKeyImpl = null; 530adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 531adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 532adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectPublicKey = new byte[key.length]; 533adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(key, 0, subjectPublicKey, 0, key.length); 534f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes subjectPublicKeyImpl = 535adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ((SubjectPublicKeyInfo) SubjectPublicKeyInfo.ASN1.decode(key)) 536adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project .getPublicKey(); 537adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 538adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 539adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 540adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the subject public key. 5412f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 542adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the subject public key or {@code null} if the key is not to be 543adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * checked. 544adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 545adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public PublicKey getSubjectPublicKey() { 546adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return subjectPublicKeyImpl; 547adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 548adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 549adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 550adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the {@literal KeyUsage} extension. 5512f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 552adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param keyUsage 553adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the boolean array in the format as returned by 554adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link X509Certificate#getKeyUsage()}, or {@code null} to not 555adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * check the key usage. 556adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 557adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setKeyUsage(boolean[] keyUsage) { 558adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (keyUsage == null) { 559adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.keyUsage = null; 560adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 561adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 562adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.keyUsage = new boolean[keyUsage.length]; 563adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(keyUsage, 0, this.keyUsage, 0, keyUsage.length); 564adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 565adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 566adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 567adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the {@literal KeyUsage} extension. 5682f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 569adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the boolean array in the format as returned by 570adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link X509Certificate#getKeyUsage()}, or {@code null} if the key 571adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * usage is not to be checked. 572adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 573adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public boolean[] getKeyUsage() { 574adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (keyUsage == null) { 575adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 576adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 577adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project boolean[] result = new boolean[keyUsage.length]; 578adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(keyUsage, 0, result, 0, keyUsage.length); 579adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return result; 580adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 581adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 582adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 583adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the {@literal ExtendedKeyUsage} extension. 5842f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 585adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param keyUsage 586adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the set of key usage OIDs, or {@code null} to not check it. 587adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 588adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if one of the OIDs is invalid. 589adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 590adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setExtendedKeyUsage(Set<String> keyUsage) 591adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throws IOException { 592adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project extendedKeyUsage = null; 593adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((keyUsage == null) || (keyUsage.size() == 0)) { 594adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 595adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 596adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project HashSet key_u = new HashSet(); 597adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Iterator it = keyUsage.iterator(); 598adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project while (it.hasNext()) { 599adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project String usage = (String) it.next(); 600adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project checkOID(usage); 601adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project key_u.add(usage); 602adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 603adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project extendedKeyUsage = Collections.unmodifiableSet(key_u); 604adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 605adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 606adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 607adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the {@literal ExtendedKeyUsage} extension. 6082f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 609adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the set of key usage OIDs, or {@code null} if it's not to be 610adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * checked. 611adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 612adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public Set<String> getExtendedKeyUsage() { 613adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return extendedKeyUsage; 614adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 615adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 616adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 617adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the flag for the matching behavior for subject alternative names. 618adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 619adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The flag indicates whether a certificate must contain all or at least one 6202f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * of the subject alternative names specified by {@link 6212f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * #setSubjectAlternativeNames} or {@link #addSubjectAlternativeName}. 6222f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 623adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param matchAllNames 624adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@code true} if a certificate must contain all of the 625adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * specified subject alternative names, otherwise {@code false}. 626adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 627adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setMatchAllSubjectAltNames(boolean matchAllNames) { 628adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.matchAllNames = matchAllNames; 629adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 630adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 631adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 632adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the flag for the matching behavior for subject alternative names. 633adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 634adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The flag indicates whether a certificate must contain all or at least one 6352f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * of the subject alternative names specified by {@link 6362f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * #setSubjectAlternativeNames} or {@link #addSubjectAlternativeName}. 6372f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 638adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return {@code true} if a certificate must contain all of the specified 639adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * subject alternative names, otherwise {@code false}. 640adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 641adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public boolean getMatchAllSubjectAltNames() { 642adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return matchAllNames; 643adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 644adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 645adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 646adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for subject alternative names. 647adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 648adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the certificate must contain all or at least one of the specified subject 649adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * alternative names. The behavior is specified by 650adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link #getMatchAllSubjectAltNames}. 651adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 652adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The specified parameter {@code names} is a collection with an entry for 653adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * each name to be included in the criterion. The name is specified as a 654adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@code List}, the first entry must be an {@code Integer} specifying the 655adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * name type (0-8), the second entry must be a {@code String} or a byte 656adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * array specifying the name (in string or ASN.1 DER encoded form) 6572f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 658adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param names 659adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the names collection or {@code null} to not perform this check. 660adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 661adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if the decoding of a name fails. 662adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 663adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setSubjectAlternativeNames(Collection<List<?>> names) 664adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throws IOException { 665adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectAltNames = null; 666adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((names == null) || (names.size() == 0)) { 667adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 668adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 669adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Iterator it = names.iterator(); 670adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project while (it.hasNext()) { 671adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project List name = (List) it.next(); 672adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int tag = ((Integer) name.get(0)).intValue(); 673adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Object value = name.get(1); 674adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (value instanceof String) { 675adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project addSubjectAlternativeName(tag, (String) value); 676adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } else if (value instanceof byte[]) { 677adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project addSubjectAlternativeName(tag, (byte[]) value); 678adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } else { 679897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes throw new IOException("name neither a String nor a byte[]"); 680adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 681adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 682adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 683adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 684adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 685adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Adds a subject alternative name to the respective criterion. 6862f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 687adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param tag 688adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the type of the name 689adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param name 690adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the name in string format. 691adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 692adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if parsing the name fails. 693adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 694adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void addSubjectAlternativeName(int tag, String name) 695adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throws IOException { 696adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project GeneralName alt_name = new GeneralName(tag, name); 697adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // create only if there was not any errors 698adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectAltNames == null) { 699adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectAltNames = new ArrayList[9]; 700adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 701adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectAltNames[tag] == null) { 702adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectAltNames[tag] = new ArrayList(); 703adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 704adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectAltNames[tag].add(alt_name); 705adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 706adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 707adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 708adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Adds a subject alternative name to the respective criterion. 7092f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 710adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param tag 711adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the type of the name. 712adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param name 713adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the name in ASN.1 DER encoded form. 714adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 715adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if the decoding of the name fails. 716adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 717adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void addSubjectAlternativeName(int tag, byte[] name) 718adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project throws IOException { 719adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project GeneralName alt_name = new GeneralName(tag, name); 720adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // create only if there was not any errors 721adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectAltNames == null) { 722adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectAltNames = new ArrayList[9]; 723adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 724adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectAltNames[tag] == null) { 725adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectAltNames[tag] = new ArrayList(); 726adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 727adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project subjectAltNames[tag].add(alt_name); 728adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 729adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 730adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 731adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for subject alternative names. 732adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 733adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the certificate must contain all or at least one of the specified subject 734adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * alternative names. The behavior is specified by 735adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@link #getMatchAllSubjectAltNames}. 736adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 737adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The subject alternative names is a collection with an entry for each name 738adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * included in the criterion. The name is specified as a {@code List}, the 739adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * first entry is an {@code Integer} specifying the name type (0-8), the 740adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * second entry is byte array specifying the name in ASN.1 DER encoded form) 7412f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 742adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the names collection or {@code null} if none specified. 743adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 744adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public Collection<List<?>> getSubjectAlternativeNames() { 745adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectAltNames == null) { 746adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 747adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 748adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ArrayList result = new ArrayList(); 749adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int tag=0; tag<9; tag++) { 750adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectAltNames[tag] != null) { 751adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int name=0; name<subjectAltNames[tag].size(); name++) { 752adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Object neim = subjectAltNames[tag].get(name); 753adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (neim instanceof byte[]) { 754adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project byte[] arr_neim = (byte[]) neim; 755adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project neim = new byte[arr_neim.length]; 756adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(arr_neim, 0, neim, 0, arr_neim.length); 757adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 758adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project List list = new ArrayList(2); 759a0a4196cb15480959f053d0ebe6b412bd23c8170Elliott Hughes list.add(Integer.valueOf(tag)); // android-changed 760adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project list.add(neim); 761adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.add(list); 762adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 763adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 764adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 765adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return result; 766adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 767adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 768adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 769adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the name constraints. 770adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 771adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The certificate must constraint subject and subject alternative names 772adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * that match the specified name constraints. 773adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 774adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The name constraints in ASN.1: 7752f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 776adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <pre> 777adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * NameConstraints ::= SEQUENCE { 778adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * permittedSubtrees [0] GeneralSubtrees OPTIONAL, 779adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * excludedSubtrees [1] GeneralSubtrees OPTIONAL } 7802f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 781adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * GeneralSubtrees ::= SEQUENCE SIZE (1..MAX) OF GeneralSubtree 7822f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 783adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * GeneralSubtree ::= SEQUENCE { 784adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * base GeneralName, 785adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * minimum [0] BaseDistance DEFAULT 0, 786adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * maximum [1] BaseDistance OPTIONAL } 7872f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 788adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * BaseDistance ::= INTEGER (0..MAX) 7892f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 790adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * GeneralName ::= CHOICE { 791adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * otherName [0] OtherName, 792adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * rfc822Name [1] IA5String, 793adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * dNSName [2] IA5String, 794adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * x400Address [3] ORAddress, 795adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * directoryName [4] Name, 796adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * ediPartyName [5] EDIPartyName, 797adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * uniformResourceIdentifier [6] IA5String, 798adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * iPAddress [7] OCTET STRING, 799adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * registeredID [8] OBJECT IDENTIFIER} 8002f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 801adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * </pre> 8022f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 803adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param bytes 804adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the name constraints in ASN.1 DER encoded format, or null to 805adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * not check any constraints. 806adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 807adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if decoding the name constraints fail. 808adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 809adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setNameConstraints(byte[] bytes) throws IOException { 810adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.nameConstraints = (bytes == null) 811adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ? null 812adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project : (NameConstraints) NameConstraints.ASN1.decode(bytes); 813adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 814adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 815adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 816adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the name constraints. 8172f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 818adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the name constraints or {@code null} if none specified. 819adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @see #setNameConstraints 820adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 821adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public byte[] getNameConstraints() { 822adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return (nameConstraints == null) 823adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ? null 824adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project : nameConstraints.getEncoded(); 825adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 826adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 827adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 828adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the basic constraints extension. 829adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 830adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * A value greater than or equal to zero indicates that a certificate must 831adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * include a basic constraints extension with a path length of a least that 832adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * value. A value of {@code -2} indicates that only end-entity certificates 833adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * are accepted. A value of {@code -1} indicates that no check is done. 8342f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 835adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param pathLen 836adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the value specifying the criterion. 837adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IllegalArgumentException 838adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if {@code pathLen} is less than {@code -2}. 839adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 840adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setBasicConstraints(int pathLen) { 841adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (pathLen < -2) { 842897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes throw new IllegalArgumentException("pathLen < -2"); 843adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 844adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.pathLen = pathLen; 845adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 846adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 847adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 848adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the basic constraints extension. 849adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 850adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * A value greater than or equal to zero indicates that a certificate must 851adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * include a basic constraints extension with a path length of a least that 852adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * value. A value of {@code -2} indicates that only end-entity certificates 853adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * are accepted. A value of {@code -1} indicates that no check is done. 8542f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 855adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the value of the criterion. 856adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 857adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public int getBasicConstraints() { 858adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return pathLen; 859adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 860adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 861adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 862adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the policy constraint. 863adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 864adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The certificate must have at least one of the specified certificate 865adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * policy extensions. For an empty set the certificate must have at least 866adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * some policies in its policy extension. 8672f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 868adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param policies 869adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the certificate policy OIDs, an empty set, or {@code null} to 870adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * not perform this check. 871adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 872adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if parsing the specified OIDs fails. 873adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 874adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void setPolicy(Set<String> policies) throws IOException { 875adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (policies == null) { 876adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.policies = null; 877adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 878adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 879866e7ae17a3da81a02b0b144e0c9c2b3196d293aElliott Hughes HashSet<String> pols = new HashSet<String>(policies.size()); 880866e7ae17a3da81a02b0b144e0c9c2b3196d293aElliott Hughes Iterator<String> it = policies.iterator(); 881adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project while (it.hasNext()) { 882866e7ae17a3da81a02b0b144e0c9c2b3196d293aElliott Hughes String certPolicyId = it.next(); 883adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project checkOID(certPolicyId); 884adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project pols.add(certPolicyId); 885adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 886adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.policies = Collections.unmodifiableSet(pols); 887adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 888adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 889adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 890adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the policy constraint. 891adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 892adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The certificate must have at least one of the certificate policy 893adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * extensions. For an empty set the certificate must have at least some 894adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * policies in its policy extension. 8952f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 896adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the certificate policy OIDs, an empty set, or {@code null} if not 897adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * to be checked. 898adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 899adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public Set<String> getPolicy() { 900adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return policies; 901adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 902adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 903adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 904adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Sets the criterion for the pathToNames constraint. 905adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 906adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * This allows to specify the complete set of names, a certificate's name 907adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * constraints must permit. 908adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 909adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The specified parameter {@code names} is a collection with an entry for 910adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * each name to be included in the criterion. The name is specified as a 911adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * {@code List}, the first entry must be an {@code Integer} specifying the 912adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * name type (0-8), the second entry must be a {@code String} or a byte 913adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * array specifying the name (in string or ASN.1 DER encoded form) 9142f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 915adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param names 916adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the names collection or {@code null} to not perform this 917adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * check. 918adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 919adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if decoding fails. 920adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 921866e7ae17a3da81a02b0b144e0c9c2b3196d293aElliott Hughes public void setPathToNames(Collection<List<?>> names) throws IOException { 922adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project pathToNames = null; 923adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((names == null) || (names.size() == 0)) { 924adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return; 925adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 926adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Iterator it = names.iterator(); 927adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project while (it.hasNext()) { 928adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project List name = (List) it.next(); 929adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int tag = ((Integer) name.get(0)).intValue(); 930adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Object value = name.get(1); 931adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (value instanceof String) { 932adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project addPathToName(tag, (String) value); 933adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } else if (value instanceof byte[]) { 934adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project addPathToName(tag, (byte[]) value); 935adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } else { 936897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes throw new IOException("name neither a String nor a byte[]"); 937adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 938adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 939adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 940adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 941adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 942adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Adds a {@literal "pathToName"} to the respective criterion. 9432f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 944adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param type 945adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the type of the name. 946adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param name 947adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the name in string format. 948adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 949adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if parsing fails. 950adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @see #setPathToNames 951adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 952adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void addPathToName(int type, String name) throws IOException { 953adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project GeneralName path_name = new GeneralName(type, name); 954adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // create only if there was not any errors 955adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (pathToNames == null) { 956adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project pathToNames = new ArrayList(); 957adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 958adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project pathToNames.add(path_name); 959adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 960adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 961adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 962adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Adds a {@literal "pathToName"} to the respective criterion. 9632f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 964adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param type 965adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the type of the name 966adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param name 967adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the name in ASN.1 DER encoded form. 968adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @throws IOException 969adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * if decoding fails. 970adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @see #setPathToNames 971adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 972adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public void addPathToName(int type, byte[] name) throws IOException { 973adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project GeneralName path_name= new GeneralName(type, name); 974adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // create only if there was not any errors 975adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (pathToNames == null) { 976adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project pathToNames = new ArrayList(); 977adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 978adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project pathToNames.add(path_name); 979adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 980adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 981adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 982adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns the criterion for the pathToNames constraint. 983adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <p> 984adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * The constraint is a collection with an entry for each name to be included 985adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * in the criterion. The name is specified as a {@code List}, the first 986adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * entry is an {@code Integer} specifying the name type (0-8), the second 987adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * entry is a byte array specifying the name in ASN.1 DER encoded form. 9882f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 989adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the pathToNames constraint or {@code null} if none specified. 990adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 991adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public Collection<List<?>> getPathToNames() { 992adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (pathToNames == null) { 993adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 994adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 995adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ArrayList result = new ArrayList(); 996adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Iterator it = pathToNames.iterator(); 997adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project while (it.hasNext()) { 998adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project GeneralName name = (GeneralName) it.next(); 999adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.add(name.getAsList()); 1000adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1001adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return result; 1002adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1003adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 1004adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 1005adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns a string representation of this {@code X509CertSelector} 1006adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * instance. 10072f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 1008adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return a string representation of this {@code X509CertSelector} 1009adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * instance. 1010adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 1011adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public String toString() { 1012adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // For convenient reading of the string representation 1013adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // all of the fields named according to the rfc 3280 1014adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // (http://www.ietf.org/rfc/rfc3280.txt). 1015adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 10162f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes StringBuilder result = new StringBuilder(); 1017f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("X509CertSelector: \n["); 1018adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.certificateEquals != null) { 1019f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n certificateEquals: " + certificateEquals); 1020adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1021adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.serialNumber != null) { 1022adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project //FIXME: needs DRL's BigInteger.toString implementation 1023adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project //result.append("\n serialNumber: " + serialNumber); 1024adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1025adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.issuer != null) { 1026f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n issuer: " + issuer); 1027adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1028adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subject != null) { 1029f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n subject: " + subject); 1030adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1031adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectKeyIdentifier != null) { 1032f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n subjectKeyIdentifier: " 1033adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project + getBytesAsString(subjectKeyIdentifier)); 1034adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1035adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.authorityKeyIdentifier != null) { 1036f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n authorityKeyIdentifier: " 1037adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project + getBytesAsString(authorityKeyIdentifier)); 1038adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1039adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.certificateValid != null) { 1040f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n certificateValid: " + certificateValid); 1041adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1042adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectPublicKeyAlgID != null) { 1043f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n subjectPublicKeyAlgID: " 1044adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project + subjectPublicKeyAlgID); 1045adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1046adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.privateKeyValid != null) { 1047f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n privateKeyValid: " + privateKeyValid); 1048adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1049adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectPublicKey != null) { 1050f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n subjectPublicKey: " 1051adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project + getBytesAsString(subjectPublicKey)); 1052adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1053adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.keyUsage != null) { 1054f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n keyUsage: \n ["); 1055adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project String[] kuNames = new String[] { 1056f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes "digitalSignature", "nonRepudiation", "keyEncipherment", 1057f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes "dataEncipherment", "keyAgreement", "keyCertSign", "cRLSign", 1058f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes "encipherOnly", "decipherOnly" 1059adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project }; 1060adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int i=0; i<9; i++) { 1061adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (keyUsage[i]) { 1062f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n " + kuNames[i]); 1063adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1064adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1065f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n ]"); 1066adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1067adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.extendedKeyUsage != null) { 1068f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n extendedKeyUsage: " 1069adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project + extendedKeyUsage.toString()); 1070adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1071f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n matchAllNames: " + matchAllNames); 1072f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n pathLen: " + pathLen); 1073adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectAltNames != null) { 1074f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n subjectAltNames: \n ["); 1075adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int i=0; i<9; i++) { 1076adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project List names = this.subjectAltNames[i]; 1077adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (names != null) { 1078adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int size = names.size(); 1079adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int j=0; j<size; j++) { 1080f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n " 1081adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project + ((GeneralName)names.get(j)).toString()); 1082adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1083adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1084adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1085f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n ]"); 1086adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1087adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.nameConstraints != null) { 1088adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1089adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.policies != null) { 1090f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n policies: " + policies.toString()); 1091adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1092adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.pathToNames != null) { 1093f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n pathToNames: \n ["); 1094adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int size = pathToNames.size(); 1095adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int i = 0; i < size; i++) { 1096f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n " 1097adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project + ((GeneralName)pathToNames.get(i)).toString()); 1098adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1099adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1100f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result.append("\n]"); 1101adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return result.toString(); 1102adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1103adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 1104adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private String getBytesAsString(byte[] data) { 1105f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes String result = ""; 1106adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int i=0; i<data.length; i++) { 1107adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project String tail = Integer.toHexString(0x00ff & data[i]); 1108adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (tail.length() == 1) { 1109f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes tail = "0" + tail; 1110adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1111f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes result += tail + " "; 1112adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1113adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return result; 1114adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1115adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 1116adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project private byte[] getExtensionValue(X509Certificate cert, String oid) { 1117adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1118adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project byte[] bytes = cert.getExtensionValue(oid); 1119adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (bytes == null) { 1120adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 1121adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1122adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return (byte[]) ASN1OctetString.getInstance().decode(bytes); 1123adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IOException e) { 1124adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return null; 1125adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1126adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1127adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 1128adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 1129adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Returns whether the specified certificate matches all the criteria 1130adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * collected in this instance. 11312f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 1132adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @param certificate 1133adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * the certificate to check. 1134adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return {@code true} if the certificate matches all the criteria, 1135adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * otherwise {@code false}. 1136adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 1137adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public boolean match(Certificate certificate) { 1138adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (! (certificate instanceof X509Certificate)) { 1139adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1140adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1141adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 1142adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project X509Certificate cert = (X509Certificate) certificate; 1143adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((certificateEquals != null) && 1144adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project !certificateEquals.equals(cert)) { 1145adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1146adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1147adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((serialNumber != null) && 1148adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project !serialNumber.equals(cert.getSerialNumber())) { 1149adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1150adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1151adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((issuer != null) && 1152adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project !issuer.equals(cert.getIssuerX500Principal())) { 1153adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1154adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1155adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((subject != null) && 1156adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project !subject.equals(cert.getSubjectX500Principal())) { 1157adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1158adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1159adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((subjectKeyIdentifier != null) && 1160adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project !Arrays.equals(subjectKeyIdentifier, 1161f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes // Here and later all of the extension OIDs 1162adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // are taken from rfc 3280 (http://www.ietf.org/rfc/rfc3280.txt) 1163f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes getExtensionValue(cert, "2.5.29.14"))) { 1164adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1165adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1166adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((authorityKeyIdentifier != null) && 1167adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project !Arrays.equals(authorityKeyIdentifier, 1168f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes getExtensionValue(cert, "2.5.29.35"))) { 1169adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1170adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1171adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (certificateValid != null) { 1172adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1173adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project cert.checkValidity(certificateValid); 1174adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch(CertificateExpiredException e) { 1175adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1176adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch(CertificateNotYetValidException e) { 1177adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1178adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1179adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1180adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (privateKeyValid != null) { 1181adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1182f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes byte[] bytes = getExtensionValue(cert, "2.5.29.16"); 1183adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (bytes == null) { 1184adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1185adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1186f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes PrivateKeyUsagePeriod pkup = (PrivateKeyUsagePeriod) 1187adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project PrivateKeyUsagePeriod.ASN1.decode(bytes); 1188adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Date notBefore = pkup.getNotBefore(); 1189adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Date notAfter = pkup.getNotAfter(); 1190adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((notBefore == null) && (notAfter == null)) { 1191adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1192adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1193adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((notBefore != null) 1194adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project && notBefore.compareTo(privateKeyValid) > 0) { 1195adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1196adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1197adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((notAfter != null) 1198adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project && notAfter.compareTo(privateKeyValid) < 0) { 1199adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1200adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1201adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IOException e) { 1202adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1203adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1204adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1205adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectPublicKeyAlgID != null) { 1206adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1207adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project byte[] encoding = cert.getPublicKey().getEncoded(); 1208f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes AlgorithmIdentifier ai = ((SubjectPublicKeyInfo) 1209adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project SubjectPublicKeyInfo.ASN1.decode(encoding)) 1210adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project .getAlgorithmIdentifier(); 1211adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!subjectPublicKeyAlgID.equals(ai.getAlgorithm())) { 1212adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1213adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1214adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IOException e) { 1215adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project e.printStackTrace(); 1216adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1217adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1218adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1219adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectPublicKey != null) { 1220adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!Arrays.equals(subjectPublicKey, 1221adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project cert.getPublicKey().getEncoded())) { 1222adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1223adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1224adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1225adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (keyUsage != null) { 1226adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project boolean[] ku = cert.getKeyUsage(); 1227adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (ku != null) { 1228adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int i = 0; 1229adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int min_length = (ku.length < keyUsage.length) ? ku.length 1230adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project : keyUsage.length; 1231adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (; i < min_length; i++) { 1232adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (keyUsage[i] && !ku[i]) { 1233adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // the specified keyUsage allows, 1234adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // but certificate does not. 1235adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1236adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1237adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1238adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (; i<keyUsage.length; i++) { 1239adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (keyUsage[i]) { 1240adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1241adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1242adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1243adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1244adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1245adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (extendedKeyUsage != null) { 1246adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1247adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project List keyUsage = cert.getExtendedKeyUsage(); 1248adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (keyUsage != null) { 1249adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!keyUsage.containsAll(extendedKeyUsage)) { 1250adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1251adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1252adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1253adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (CertificateParsingException e) { 1254adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1255adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1256adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1257adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (pathLen != -1) { 1258adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int p_len = cert.getBasicConstraints(); 1259adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((pathLen < 0) && (p_len >= 0)) { 1260adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // need end-entity but got CA 1261adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1262adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1263adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((pathLen > 0) && (pathLen > p_len)) { 1264adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // allowed _pathLen is small 1265adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1266adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1267adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1268adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (subjectAltNames != null) { 1269adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project PASSED: 1270adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1271f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes byte[] bytes = getExtensionValue(cert, "2.5.29.17"); 1272adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (bytes == null) { 1273adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1274adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1275adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project List sans = ((GeneralNames) GeneralNames.ASN1.decode(bytes)) 1276adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project .getNames(); 1277adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if ((sans == null) || (sans.size() == 0)) { 1278adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1279adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1280adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project boolean[][] map = new boolean[9][]; 1281adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // initialize the check map 1282adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int i=0; i<9; i++) { 1283adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project map[i] = (subjectAltNames[i] == null) 1284693eacca9fa67ad79d1b35dbaad61c5ac1ac457cElliott Hughes ? EmptyArray.BOOLEAN : new boolean[subjectAltNames[i].size()]; 1285adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1286adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Iterator it = sans.iterator(); 1287adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project while (it.hasNext()) { 1288adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project GeneralName name = (GeneralName) it.next(); 1289adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project int tag = name.getTag(); 1290adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int i=0; i<map[tag].length; i++) { 1291adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (((GeneralName) subjectAltNames[tag].get(i)) 1292adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project .equals(name)) { 1293adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!matchAllNames) { 1294adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project break PASSED; 1295adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1296adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project map[tag][i] = true; 1297adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1298adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1299adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1300adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!matchAllNames) { 1301adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // there was not any match 1302adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1303adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1304adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // else check the map 1305adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int tag=0; tag<9; tag++) { 1306adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int name=0; name<map[tag].length; name++) { 1307adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!map[tag][name]) { 1308adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1309adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1310adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1311adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1312adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IOException e) { 1313adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project e.printStackTrace(); 1314adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1315adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1316adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1317adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (nameConstraints != null) { 1318adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!nameConstraints.isAcceptable(cert)) { 1319adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1320adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1321adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1322adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (policies != null) { 1323f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes byte[] bytes = getExtensionValue(cert, "2.5.29.32"); 1324adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (bytes == null) { 1325adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1326adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1327adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (policies.size() == 0) { 1328adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // if certificate has such extension than it has at least 1329adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // one policy in it. 1330adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return true; 1331adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1332adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project PASSED: 1333adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1334f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes List policyInformations = ((CertificatePolicies) 1335adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project CertificatePolicies.ASN1.decode(bytes)) 1336adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project .getPolicyInformations(); 1337adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project Iterator it = policyInformations.iterator(); 1338adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project while (it.hasNext()) { 1339adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (policies.contains(((PolicyInformation) it.next()) 1340adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project .getPolicyIdentifier())) { 1341adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project break PASSED; 1342adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1343adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1344adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1345adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IOException e) { 1346adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // the extension is invalid 1347adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1348adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1349adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1350adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (pathToNames != null) { 1351f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes byte[] bytes = getExtensionValue(cert, "2.5.29.30"); 1352adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (bytes != null) { 1353adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project NameConstraints nameConstraints; 1354adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project try { 1355adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project nameConstraints = 1356adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project (NameConstraints) NameConstraints.ASN1.decode(bytes); 1357adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } catch (IOException e) { 1358adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project // the extension is invalid; 1359adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1360adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1361adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (!nameConstraints.isAcceptable(pathToNames)) { 1362adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return false; 1363adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1364adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1365adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1366adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return true; 1367adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1368adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 1369adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project /** 1370adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * Clones this {@code X509CertSelector} instance. 13712f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes * 1372adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * @return the cloned instance. 1373adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */ 1374adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project public Object clone() { 13752f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes X509CertSelector result; 13762f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes 1377d21d78fd49a2d798218e8c8aefbddb26a0e71bbbElliott Hughes try { 1378d21d78fd49a2d798218e8c8aefbddb26a0e71bbbElliott Hughes result = (X509CertSelector) super.clone(); 1379d21d78fd49a2d798218e8c8aefbddb26a0e71bbbElliott Hughes } catch (CloneNotSupportedException e) { 1380d21d78fd49a2d798218e8c8aefbddb26a0e71bbbElliott Hughes return null; 1381d21d78fd49a2d798218e8c8aefbddb26a0e71bbbElliott Hughes } 13822f9e468ed4985edfd5e351faf2089d91e561e41dElliott Hughes 1383adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectKeyIdentifier != null) { 1384adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.subjectKeyIdentifier = 1385adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project new byte[this.subjectKeyIdentifier.length]; 1386adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(this.subjectKeyIdentifier, 0, 1387adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.subjectKeyIdentifier, 0, 1388adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.subjectKeyIdentifier.length); 1389adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1390adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.authorityKeyIdentifier != null) { 1391adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.authorityKeyIdentifier = 1392adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project new byte[this.authorityKeyIdentifier.length]; 1393adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(this.authorityKeyIdentifier, 0, 1394adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.authorityKeyIdentifier, 0, 1395adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.authorityKeyIdentifier.length); 1396adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1397adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectPublicKey != null) { 1398adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.subjectPublicKey = new byte[this.subjectPublicKey.length]; 1399adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(this.subjectPublicKey, 0, result.subjectPublicKey, 1400adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project 0, this.subjectPublicKey.length); 1401adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1402adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.keyUsage != null) { 1403adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.keyUsage = new boolean[this.keyUsage.length]; 1404adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project System.arraycopy(this.keyUsage, 0, result.keyUsage, 0, 1405adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project this.keyUsage.length); 1406adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1407adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.extendedKeyUsage = (this.extendedKeyUsage == null) 1408adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ? null 1409adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project : new HashSet(this.extendedKeyUsage); 1410adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectAltNames != null) { 1411adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.subjectAltNames = new ArrayList[9]; 1412adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project for (int i=0; i<9; i++) { 1413adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project if (this.subjectAltNames[i] != null) { 1414adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.subjectAltNames[i] = 1415adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project new ArrayList(this.subjectAltNames[i]); 1416adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1417adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1418adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1419866e7ae17a3da81a02b0b144e0c9c2b3196d293aElliott Hughes result.policies = (this.policies == null) ? null : new HashSet<String>(this.policies); 1420adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project result.pathToNames = (this.pathToNames == null) 1421adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project ? null 1422adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project : new ArrayList(this.pathToNames); 1423adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project return result; 1424adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project } 1425adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project} 1426