Examples with Asn1OpaqueObject com.android.apksig.internal.asn1.Asn1OpaqueObject used on opensource projects

Example 1 with Asn1OpaqueObject

use of com.android.apksig.internal.asn1.Asn1OpaqueObject in project apksig by venshine.

the class Asn1BerParser method parseSetOf.

// NOTE: This method returns List rather than Set because ASN.1 SET_OF does require uniqueness
// of elements -- it's an unordered collection.
@SuppressWarnings("unchecked")
private static <T> List<T> parseSetOf(BerDataValue container, Class<T> elementClass) throws Asn1DecodingException {
    List<T> result = new ArrayList<>();
    BerDataValueReader elementsReader = container.contentsReader();
    while (true) {
        BerDataValue dataValue;
        try {
            dataValue = elementsReader.readDataValue();
        } catch (BerDataValueFormatException e) {
            throw new Asn1DecodingException("Malformed data value", e);
        }
        if (dataValue == null) {
            break;
        }
        T element;
        if (ByteBuffer.class.equals(elementClass)) {
            element = (T) dataValue.getEncodedContents();
        } else if (Asn1OpaqueObject.class.equals(elementClass)) {
            element = (T) new Asn1OpaqueObject(dataValue.getEncoded());
        } else {
            element = parse(dataValue, elementClass);
        }
        result.add(element);
    }
    return result;
}

Example 2 with Asn1OpaqueObject

use of com.android.apksig.internal.asn1.Asn1OpaqueObject in project apksig by venshine.

the class Certificate method parseCertificates.

public static List<X509Certificate> parseCertificates(List<Asn1OpaqueObject> encodedCertificates) throws CertificateException {
    if (encodedCertificates.isEmpty()) {
        return Collections.emptyList();
    }
    List<X509Certificate> result = new ArrayList<>(encodedCertificates.size());
    for (int i = 0; i < encodedCertificates.size(); i++) {
        Asn1OpaqueObject encodedCertificate = encodedCertificates.get(i);
        X509Certificate certificate;
        byte[] encodedForm = ByteBufferUtils.toByteArray(encodedCertificate.getEncoded());
        try {
            certificate = X509CertificateUtils.generateCertificate(encodedForm);
        } catch (CertificateException e) {
            throw new CertificateException("Failed to parse certificate #" + (i + 1), e);
        }
        // Wrap the cert so that the result's getEncoded returns exactly the original
        // encoded form. Without this, getEncoded may return a different form from what was
        // stored in the signature. This is because some X509Certificate(Factory)
        // implementations re-encode certificates and/or some implementations of
        // X509Certificate.getEncoded() re-encode certificates.
        certificate = new GuaranteedEncodedFormX509Certificate(certificate, encodedForm);
        result.add(certificate);
    }
    return result;
}

Example 3 with Asn1OpaqueObject

use of com.android.apksig.internal.asn1.Asn1OpaqueObject in project apksig by venshine.

the class ApkSigningBlockUtils method generatePkcs7DerEncodedMessage.

/**
 * Wrap the signature according to CMS PKCS #7 RFC 5652.
 * The high-level simplified structure is as follows:
 * // ContentInfo
 *     //   digestAlgorithm
 *     //   SignedData
 *     //     bag of certificates
 *     //     SignerInfo
 *     //       signing cert issuer and serial number (for locating the cert in the above bag)
 *     //       digestAlgorithm
 *     //       signatureAlgorithm
 *     //       signature
 *
 * @throws Asn1EncodingException if the ASN.1 structure could not be encoded
 */
public static byte[] generatePkcs7DerEncodedMessage(byte[] signatureBytes, ByteBuffer data, List<X509Certificate> signerCerts, AlgorithmIdentifier digestAlgorithmId, AlgorithmIdentifier signatureAlgorithmId) throws Asn1EncodingException, CertificateEncodingException {
    SignerInfo signerInfo = new SignerInfo();
    signerInfo.version = 1;
    X509Certificate signingCert = signerCerts.get(0);
    X500Principal signerCertIssuer = signingCert.getIssuerX500Principal();
    signerInfo.sid = new SignerIdentifier(new IssuerAndSerialNumber(new Asn1OpaqueObject(signerCertIssuer.getEncoded()), signingCert.getSerialNumber()));
    signerInfo.digestAlgorithm = digestAlgorithmId;
    signerInfo.signatureAlgorithm = signatureAlgorithmId;
    signerInfo.signature = ByteBuffer.wrap(signatureBytes);
    SignedData signedData = new SignedData();
    signedData.certificates = new ArrayList<>(signerCerts.size());
    for (X509Certificate cert : signerCerts) {
        signedData.certificates.add(new Asn1OpaqueObject(cert.getEncoded()));
    }
    signedData.version = 1;
    signedData.digestAlgorithms = Collections.singletonList(digestAlgorithmId);
    signedData.encapContentInfo = new EncapsulatedContentInfo(Pkcs7Constants.OID_DATA);
    // If data is not null, data will be embedded as is in the result -- an attached pcsk7
    signedData.encapContentInfo.content = data;
    signedData.signerInfos = Collections.singletonList(signerInfo);
    ContentInfo contentInfo = new ContentInfo();
    contentInfo.contentType = Pkcs7Constants.OID_SIGNED_DATA;
    contentInfo.content = new Asn1OpaqueObject(Asn1DerEncoder.encode(signedData));
    return Asn1DerEncoder.encode(contentInfo);
}