| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215 |
- #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
- #pragma warning disable
- using System;
- using System.Collections;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Digests;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
- namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509
- {
- /**
- * The AuthorityKeyIdentifier object.
- * <pre>
- * id-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::= { id-ce 35 }
- *
- * AuthorityKeyIdentifier ::= Sequence {
- * keyIdentifier [0] IMPLICIT KeyIdentifier OPTIONAL,
- * authorityCertIssuer [1] IMPLICIT GeneralNames OPTIONAL,
- * authorityCertSerialNumber [2] IMPLICIT CertificateSerialNumber OPTIONAL }
- *
- * KeyIdentifier ::= OCTET STRING
- * </pre>
- *
- */
- public class AuthorityKeyIdentifier
- : Asn1Encodable
- {
- internal readonly Asn1OctetString keyidentifier;
- internal readonly GeneralNames certissuer;
- internal readonly DerInteger certserno;
- public static AuthorityKeyIdentifier GetInstance(
- Asn1TaggedObject obj,
- bool explicitly)
- {
- return GetInstance(Asn1Sequence.GetInstance(obj, explicitly));
- }
- public static AuthorityKeyIdentifier GetInstance(
- object obj)
- {
- if (obj is AuthorityKeyIdentifier)
- {
- return (AuthorityKeyIdentifier) obj;
- }
- if (obj is Asn1Sequence)
- {
- return new AuthorityKeyIdentifier((Asn1Sequence) obj);
- }
- if (obj is X509Extension)
- {
- return GetInstance(X509Extension.ConvertValueToObject((X509Extension) obj));
- }
- throw new ArgumentException("unknown object in factory: " + BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.GetTypeName(obj), "obj");
- }
- protected internal AuthorityKeyIdentifier(
- Asn1Sequence seq)
- {
- foreach (Asn1TaggedObject o in seq)
- {
- switch (o.TagNo)
- {
- case 0:
- this.keyidentifier = Asn1OctetString.GetInstance(o, false);
- break;
- case 1:
- this.certissuer = GeneralNames.GetInstance(o, false);
- break;
- case 2:
- this.certserno = DerInteger.GetInstance(o, false);
- break;
- default:
- throw new ArgumentException("illegal tag");
- }
- }
- }
- /**
- *
- * Calulates the keyidentifier using a SHA1 hash over the BIT STRING
- * from SubjectPublicKeyInfo as defined in RFC2459.
- *
- * Example of making a AuthorityKeyIdentifier:
- * <pre>
- * SubjectPublicKeyInfo apki = new SubjectPublicKeyInfo((ASN1Sequence)new ASN1InputStream(
- * publicKey.getEncoded()).readObject());
- * AuthorityKeyIdentifier aki = new AuthorityKeyIdentifier(apki);
- * </pre>
- *
- **/
- public AuthorityKeyIdentifier(
- SubjectPublicKeyInfo spki)
- {
- IDigest digest = new Sha1Digest();
- byte[] resBuf = new byte[digest.GetDigestSize()];
- byte[] bytes = spki.PublicKeyData.GetBytes();
- digest.BlockUpdate(bytes, 0, bytes.Length);
- digest.DoFinal(resBuf, 0);
- this.keyidentifier = new DerOctetString(resBuf);
- }
- /**
- * create an AuthorityKeyIdentifier with the GeneralNames tag and
- * the serial number provided as well.
- */
- public AuthorityKeyIdentifier(
- SubjectPublicKeyInfo spki,
- GeneralNames name,
- BigInteger serialNumber)
- {
- IDigest digest = new Sha1Digest();
- byte[] resBuf = new byte[digest.GetDigestSize()];
- byte[] bytes = spki.PublicKeyData.GetBytes();
- digest.BlockUpdate(bytes, 0, bytes.Length);
- digest.DoFinal(resBuf, 0);
- this.keyidentifier = new DerOctetString(resBuf);
- this.certissuer = name;
- this.certserno = new DerInteger(serialNumber);
- }
- /**
- * create an AuthorityKeyIdentifier with the GeneralNames tag and
- * the serial number provided.
- */
- public AuthorityKeyIdentifier(
- GeneralNames name,
- BigInteger serialNumber)
- {
- this.keyidentifier = null;
- this.certissuer = GeneralNames.GetInstance(name.ToAsn1Object());
- this.certserno = new DerInteger(serialNumber);
- }
- /**
- * create an AuthorityKeyIdentifier with a precomputed key identifier
- */
- public AuthorityKeyIdentifier(
- byte[] keyIdentifier)
- {
- this.keyidentifier = new DerOctetString(keyIdentifier);
- this.certissuer = null;
- this.certserno = null;
- }
- /**
- * create an AuthorityKeyIdentifier with a precomupted key identifier
- * and the GeneralNames tag and the serial number provided as well.
- */
- public AuthorityKeyIdentifier(
- byte[] keyIdentifier,
- GeneralNames name,
- BigInteger serialNumber)
- {
- this.keyidentifier = new DerOctetString(keyIdentifier);
- this.certissuer = GeneralNames.GetInstance(name.ToAsn1Object());
- this.certserno = new DerInteger(serialNumber);
- }
- public byte[] GetKeyIdentifier()
- {
- return keyidentifier == null ? null : keyidentifier.GetOctets();
- }
- public GeneralNames AuthorityCertIssuer
- {
- get { return certissuer; }
- }
- public BigInteger AuthorityCertSerialNumber
- {
- get { return certserno == null ? null : certserno.Value; }
- }
- /**
- * Produce an object suitable for an Asn1OutputStream.
- */
- public override Asn1Object ToAsn1Object()
- {
- Asn1EncodableVector v = new Asn1EncodableVector();
- if (keyidentifier != null)
- {
- v.Add(new DerTaggedObject(false, 0, keyidentifier));
- }
- if (certissuer != null)
- {
- v.Add(new DerTaggedObject(false, 1, certissuer));
- }
- if (certserno != null)
- {
- v.Add(new DerTaggedObject(false, 2, certserno));
- }
- return new DerSequence(v);
- }
- public override string ToString()
- {
- return ("AuthorityKeyIdentifier: KeyID(" + this.keyidentifier.GetOctets() + ")");
- }
- }
- }
- #pragma warning restore
- #endif
|