1adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project/*
2adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  Licensed to the Apache Software Foundation (ASF) under one or more
3adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  contributor license agreements.  See the NOTICE file distributed with
4adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  this work for additional information regarding copyright ownership.
5adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  The ASF licenses this file to You under the Apache License, Version 2.0
6adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  (the "License"); you may not use this file except in compliance with
7adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  the License.  You may obtain a copy of the License at
8adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *
9adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *     http://www.apache.org/licenses/LICENSE-2.0
10adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *
11adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  Unless required by applicable law or agreed to in writing, software
12adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  distributed under the License is distributed on an "AS IS" BASIS,
13adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  See the License for the specific language governing permissions and
15adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  limitations under the License.
16adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */
17adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
18adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project/**
19adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project* @author Alexander Y. Kleymenov
20adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project* @version $Revision$
21adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project*/
22adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
23adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectpackage org.apache.harmony.security.x509;
24adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
25adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport java.io.IOException;
26adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.asn1.ASN1Explicit;
27adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.asn1.ASN1Implicit;
28adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.asn1.ASN1Sequence;
29adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.asn1.ASN1Type;
30adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Projectimport org.apache.harmony.security.asn1.BerInputStream;
31adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
32adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project/**
33f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes * The class encapsulates the ASN.1 DER encoding/decoding work
34adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * with the DistributionPoint structure which is the part of X.509 CRL
35adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * (as specified in RFC 3280 -
36adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  Internet X.509 Public Key Infrastructure.
37adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  Certificate and Certificate Revocation List (CRL) Profile.
38adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  http://www.ietf.org/rfc/rfc3280.txt):
39adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *
40adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * <pre>
41adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  CRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint
42adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *
43adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  DistributionPoint ::= SEQUENCE {
44adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        distributionPoint       [0]     DistributionPointName OPTIONAL,
45adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        reasons                 [1]     ReasonFlags OPTIONAL,
46f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes *        cRLIssuer               [2]     GeneralNames OPTIONAL
47adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  }
48adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *
49adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  DistributionPointName ::= CHOICE {
50adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        fullName                [0]     GeneralNames,
51f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes *        nameRelativeToCRLIssuer [1]     RelativeDistinguishedName
52adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  }
53adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *
54adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  ReasonFlags ::= BIT STRING {
55adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        unused                  (0),
56adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        keyCompromise           (1),
57adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        cACompromise            (2),
58adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        affiliationChanged      (3),
59adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        superseded              (4),
60adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        cessationOfOperation    (5),
61adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        certificateHold         (6),
62adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *        privilegeWithdrawn      (7),
63f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes *        aACompromise            (8)
64adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project *  }
65adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project * </pre>
66adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project */
675c27fb80ffd335aa45dc8829ba3ecbc18c01e4e8Jesse Wilsonpublic final class DistributionPoint {
68adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    private final DistributionPointName distributionPoint;
69adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    private final ReasonFlags reasons;
70adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    private final GeneralNames cRLIssuer;
71f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes
72adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    public DistributionPoint(DistributionPointName distributionPoint,
73adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            ReasonFlags reasons, GeneralNames cRLIssuer) {
74897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes        if ((reasons != null) && (distributionPoint == null) && (cRLIssuer == null)) {
75897538a36c18f4db8f9f68ee566aec0bda842e9fElliott Hughes            throw new IllegalArgumentException("DistributionPoint MUST NOT consist of only the reasons field");
76adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        }
77adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        this.distributionPoint = distributionPoint;
78adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        this.reasons = reasons;
79adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        this.cRLIssuer = cRLIssuer;
80adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    }
81adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
828216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes    public void dumpValue(StringBuilder sb, String prefix) {
838216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes        sb.append(prefix);
848216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes        sb.append("Distribution Point: [\n");
85adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        if (distributionPoint != null) {
868216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes            distributionPoint.dumpValue(sb, prefix + "  ");
87adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        }
88adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        if (reasons != null) {
898216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes            reasons.dumpValue(sb, prefix + "  ");
90adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        }
91adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        if (cRLIssuer != null) {
928216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes            sb.append(prefix);
938216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes            sb.append("  CRL Issuer: [\n");
948216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes            cRLIssuer.dumpValue(sb, prefix + "    ");
958216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes            sb.append(prefix);
968216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes            sb.append("  ]\n");
97adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        }
988216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes        sb.append(prefix);
998216dc1fd9d31867770439985c3d66570330e4c7Elliott Hughes        sb.append("]\n");
100adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    }
101adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
102adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    /**
103adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project     * Custom X.509 decoder.
104adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project     */
105adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    public static final ASN1Sequence ASN1 = new ASN1Sequence(new ASN1Type[] {
106adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project                new ASN1Explicit(0, DistributionPointName.ASN1),
107adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project                new ASN1Implicit(1, ReasonFlags.ASN1),
108adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project                new ASN1Implicit(2, GeneralNames.ASN1)
109adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            }) {
110adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        {
111adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            setOptional(0);
112adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            setOptional(1);
113adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            setOptional(2);
114adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        }
115adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
1165c27fb80ffd335aa45dc8829ba3ecbc18c01e4e8Jesse Wilson        @Override protected Object getDecodedObject(BerInputStream in) throws IOException {
117adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            Object[] values = (Object[]) in.content;
118f33eae7e84eb6d3b0f4e86b59605bb3de73009f3Elliott Hughes            return new DistributionPoint((DistributionPointName) values[0],
119adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project                    (ReasonFlags) values[1], (GeneralNames) values[2]);
120adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        }
121adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project
1225c27fb80ffd335aa45dc8829ba3ecbc18c01e4e8Jesse Wilson        @Override protected void getValues(Object object, Object[] values) {
123adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            DistributionPoint dp = (DistributionPoint) object;
124adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            values[0] = dp.distributionPoint;
125adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            values[1] = dp.reasons;
126adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project            values[2] = dp.cRLIssuer;
127adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project        }
128adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project    };
129adc854b798c1cfe3bfd4c27d68d5cee38ca617daThe Android Open Source Project}
130