0N/A/*
2362N/A * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
0N/A * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
0N/A *
0N/A * This code is free software; you can redistribute it and/or modify it
0N/A * under the terms of the GNU General Public License version 2 only, as
2362N/A * published by the Free Software Foundation. Oracle designates this
0N/A * particular file as subject to the "Classpath" exception as provided
2362N/A * by Oracle in the LICENSE file that accompanied this code.
0N/A *
0N/A * This code is distributed in the hope that it will be useful, but WITHOUT
0N/A * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
0N/A * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
0N/A * version 2 for more details (a copy is included in the LICENSE file that
0N/A * accompanied this code).
0N/A *
0N/A * You should have received a copy of the GNU General Public License version
0N/A * 2 along with this work; if not, write to the Free Software Foundation,
0N/A * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
0N/A *
2362N/A * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
2362N/A * or visit www.oracle.com if you need additional information or have any
2362N/A * questions.
0N/A */
0N/A
0N/Apackage sun.security.provider.certpath;
0N/A
1652N/Aimport java.io.IOException;
0N/Aimport java.math.BigInteger;
0N/Aimport java.security.MessageDigest;
1652N/Aimport java.security.NoSuchAlgorithmException;
1652N/Aimport java.security.cert.X509Certificate;
0N/Aimport java.util.Arrays;
0N/Aimport sun.misc.HexDumpEncoder;
0N/Aimport sun.security.x509.*;
0N/Aimport sun.security.util.*;
0N/A
0N/A/**
0N/A * This class corresponds to the CertId field in OCSP Request
0N/A * and the OCSP Response. The ASN.1 definition for CertID is defined
0N/A * in RFC 2560 as:
0N/A * <pre>
0N/A *
0N/A * CertID ::= SEQUENCE {
0N/A * hashAlgorithm AlgorithmIdentifier,
0N/A * issuerNameHash OCTET STRING, -- Hash of Issuer's DN
0N/A * issuerKeyHash OCTET STRING, -- Hash of Issuers public key
0N/A * serialNumber CertificateSerialNumber
0N/A * }
0N/A *
0N/A * </pre>
0N/A *
0N/A * @author Ram Marti
0N/A */
0N/A
0N/Apublic class CertId {
0N/A
0N/A private static final boolean debug = false;
1652N/A private static final AlgorithmId SHA1_ALGID
1652N/A = new AlgorithmId(AlgorithmId.SHA_oid);
1652N/A private final AlgorithmId hashAlgId;
1652N/A private final byte[] issuerNameHash;
1652N/A private final byte[] issuerKeyHash;
1652N/A private final SerialNumber certSerialNumber;
0N/A private int myhash = -1; // hashcode for this CertId
0N/A
0N/A /**
0N/A * Creates a CertId. The hash algorithm used is SHA-1.
0N/A */
1652N/A public CertId(X509Certificate issuerCert, SerialNumber serialNumber)
1652N/A throws IOException {
0N/A
0N/A // compute issuerNameHash
1652N/A MessageDigest md = null;
1652N/A try {
1652N/A md = MessageDigest.getInstance("SHA1");
1652N/A } catch (NoSuchAlgorithmException nsae) {
1652N/A throw new IOException("Unable to create CertId", nsae);
1652N/A }
1652N/A hashAlgId = SHA1_ALGID;
0N/A md.update(issuerCert.getSubjectX500Principal().getEncoded());
0N/A issuerNameHash = md.digest();
0N/A
0N/A // compute issuerKeyHash (remove the tag and length)
0N/A byte[] pubKey = issuerCert.getPublicKey().getEncoded();
0N/A DerValue val = new DerValue(pubKey);
0N/A DerValue[] seq = new DerValue[2];
0N/A seq[0] = val.data.getDerValue(); // AlgorithmID
0N/A seq[1] = val.data.getDerValue(); // Key
0N/A byte[] keyBytes = seq[1].getBitString();
0N/A md.update(keyBytes);
0N/A issuerKeyHash = md.digest();
0N/A certSerialNumber = serialNumber;
0N/A
0N/A if (debug) {
0N/A HexDumpEncoder encoder = new HexDumpEncoder();
0N/A System.out.println("Issuer Certificate is " + issuerCert);
0N/A System.out.println("issuerNameHash is " +
2341N/A encoder.encodeBuffer(issuerNameHash));
0N/A System.out.println("issuerKeyHash is " +
2341N/A encoder.encodeBuffer(issuerKeyHash));
1652N/A System.out.println("SerialNumber is " + serialNumber.getNumber());
0N/A }
0N/A }
0N/A
0N/A /**
0N/A * Creates a CertId from its ASN.1 DER encoding.
0N/A */
0N/A public CertId(DerInputStream derIn) throws IOException {
0N/A hashAlgId = AlgorithmId.parse(derIn.getDerValue());
0N/A issuerNameHash = derIn.getOctetString();
0N/A issuerKeyHash = derIn.getOctetString();
0N/A certSerialNumber = new SerialNumber(derIn);
0N/A }
0N/A
0N/A /**
0N/A * Return the hash algorithm identifier.
0N/A */
0N/A public AlgorithmId getHashAlgorithm() {
0N/A return hashAlgId;
0N/A }
0N/A
0N/A /**
0N/A * Return the hash value for the issuer name.
0N/A */
0N/A public byte[] getIssuerNameHash() {
0N/A return issuerNameHash;
0N/A }
0N/A
0N/A /**
0N/A * Return the hash value for the issuer key.
0N/A */
0N/A public byte[] getIssuerKeyHash() {
0N/A return issuerKeyHash;
0N/A }
0N/A
0N/A /**
0N/A * Return the serial number.
0N/A */
0N/A public BigInteger getSerialNumber() {
0N/A return certSerialNumber.getNumber();
0N/A }
0N/A
0N/A /**
0N/A * Encode the CertId using ASN.1 DER.
0N/A * The hash algorithm used is SHA-1.
0N/A */
0N/A public void encode(DerOutputStream out) throws IOException {
0N/A
0N/A DerOutputStream tmp = new DerOutputStream();
0N/A hashAlgId.encode(tmp);
0N/A tmp.putOctetString(issuerNameHash);
0N/A tmp.putOctetString(issuerKeyHash);
0N/A certSerialNumber.encode(tmp);
0N/A out.write(DerValue.tag_Sequence, tmp);
0N/A
0N/A if (debug) {
0N/A HexDumpEncoder encoder = new HexDumpEncoder();
0N/A System.out.println("Encoded certId is " +
0N/A encoder.encode(out.toByteArray()));
0N/A }
0N/A }
0N/A
0N/A /**
0N/A * Returns a hashcode value for this CertId.
0N/A *
0N/A * @return the hashcode value.
0N/A */
1652N/A @Override public int hashCode() {
0N/A if (myhash == -1) {
0N/A myhash = hashAlgId.hashCode();
0N/A for (int i = 0; i < issuerNameHash.length; i++) {
0N/A myhash += issuerNameHash[i] * i;
0N/A }
0N/A for (int i = 0; i < issuerKeyHash.length; i++) {
0N/A myhash += issuerKeyHash[i] * i;
0N/A }
0N/A myhash += certSerialNumber.getNumber().hashCode();
0N/A }
0N/A return myhash;
0N/A }
0N/A
0N/A /**
0N/A * Compares this CertId for equality with the specified
0N/A * object. Two CertId objects are considered equal if their hash algorithms,
0N/A * their issuer name and issuer key hash values and their serial numbers
0N/A * are equal.
0N/A *
0N/A * @param other the object to test for equality with this object.
0N/A * @return true if the objects are considered equal, false otherwise.
0N/A */
1652N/A @Override public boolean equals(Object other) {
0N/A if (this == other) {
0N/A return true;
0N/A }
0N/A if (other == null || (!(other instanceof CertId))) {
0N/A return false;
0N/A }
0N/A
0N/A CertId that = (CertId) other;
0N/A if (hashAlgId.equals(that.getHashAlgorithm()) &&
0N/A Arrays.equals(issuerNameHash, that.getIssuerNameHash()) &&
0N/A Arrays.equals(issuerKeyHash, that.getIssuerKeyHash()) &&
0N/A certSerialNumber.getNumber().equals(that.getSerialNumber())) {
0N/A return true;
0N/A } else {
0N/A return false;
0N/A }
0N/A }
0N/A
0N/A /**
0N/A * Create a string representation of the CertId.
0N/A */
1652N/A @Override public String toString() {
0N/A StringBuilder sb = new StringBuilder();
0N/A sb.append("CertId \n");
0N/A sb.append("Algorithm: " + hashAlgId.toString() +"\n");
0N/A sb.append("issuerNameHash \n");
0N/A HexDumpEncoder encoder = new HexDumpEncoder();
0N/A sb.append(encoder.encode(issuerNameHash));
0N/A sb.append("\nissuerKeyHash: \n");
0N/A sb.append(encoder.encode(issuerKeyHash));
0N/A sb.append("\n" + certSerialNumber.toString());
0N/A return sb.toString();
0N/A }
0N/A}