Examples with PasswordRequiredException de.carne.certmgr.certs.PasswordRequiredException used on opensource projects

Example 1 with PasswordRequiredException

use of de.carne.certmgr.certs.PasswordRequiredException in project certmgr by hdecarne.

the class DERCertReaderWriter method tryDecodeKey.

@Nullable
private static KeyPair tryDecodeKey(ASN1Primitive asn1Object, String resource, PasswordCallback password) throws IOException {
    PKCS8EncryptedPrivateKeyInfo encryptedPrivateKeyInfo = null;
    try {
        encryptedPrivateKeyInfo = new PKCS8EncryptedPrivateKeyInfo(EncryptedPrivateKeyInfo.getInstance(asn1Object));
    } catch (Exception e) {
        Exceptions.ignore(e);
    }
    PrivateKeyInfo privateKeyInfo = null;
    if (encryptedPrivateKeyInfo != null) {
        Throwable passwordException = null;
        while (privateKeyInfo == null) {
            char[] passwordChars = password.queryPassword(resource);
            if (passwordChars == null) {
                throw new PasswordRequiredException(resource, passwordException);
            }
            InputDecryptorProvider inputDecryptorProvider = INPUT_DECRYPTOR_BUILDER.build(passwordChars);
            try {
                privateKeyInfo = encryptedPrivateKeyInfo.decryptPrivateKeyInfo(inputDecryptorProvider);
            } catch (PKCSException e) {
                passwordException = e;
            }
        }
    }
    try {
        privateKeyInfo = PrivateKeyInfo.getInstance(asn1Object);
    } catch (Exception e) {
        Exceptions.ignore(e);
    }
    KeyPair key = null;
    if (privateKeyInfo != null) {
        PrivateKey privateKey;
        try {
            String algorithmId = privateKeyInfo.getPrivateKeyAlgorithm().getAlgorithm().getId();
            KeyFactory keyFactory = JCA_JCE_HELPER.createKeyFactory(algorithmId);
            PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(privateKeyInfo.getEncoded());
            privateKey = keyFactory.generatePrivate(keySpec);
        } catch (GeneralSecurityException e) {
            throw new CertProviderException(e);
        }
        key = KeyHelper.rebuildKeyPair(privateKey);
    }
    return key;
}

Example 2 with PasswordRequiredException

use of de.carne.certmgr.certs.PasswordRequiredException in project certmgr by hdecarne.

the class JKSCertReaderWriter method loadKeyStore.

private static KeyStore loadKeyStore(String keyStoreType, @Nullable InputStream inputStream, String resource, PasswordCallback password) throws GeneralSecurityException, IOException {
    KeyStore keyStore = KeyStore.getInstance(keyStoreType);
    char[] passwordChars = null;
    Throwable passwordException = null;
    do {
        try {
            keyStore.load(inputStream, passwordChars);
            passwordException = null;
        } catch (IOException e) {
            if (e.getCause() instanceof UnrecoverableKeyException) {
                passwordException = e.getCause();
            } else {
                throw e;
            }
        }
        if (passwordException != null) {
            passwordChars = password.requeryPassword(resource, passwordException);
            if (passwordChars == null) {
                throw new PasswordRequiredException(resource, passwordException);
            }
        }
    } while (passwordException != null);
    return keyStore;
}

Example 3 with PasswordRequiredException

use of de.carne.certmgr.certs.PasswordRequiredException in project certmgr by hdecarne.

the class PEMCertReaderWriter method convertKey.

private static KeyPair convertKey(PEMEncryptedKeyPair pemObject, String resource, PasswordCallback password) throws IOException {
    PEMKeyPair pemKeyPair = null;
    Throwable passwordException = null;
    while (pemKeyPair == null) {
        char[] passwordChars = (passwordException == null ? password.queryPassword(resource) : password.requeryPassword(resource, passwordException));
        if (passwordChars == null) {
            throw new PasswordRequiredException(resource, passwordException);
        }
        PEMDecryptorProvider pemDecryptorProvider = PEM_DECRYPTOR_PROVIDER_BUILDER.build(passwordChars);
        try {
            pemKeyPair = pemObject.decryptKeyPair(pemDecryptorProvider);
        } catch (EncryptionException e) {
            passwordException = e;
        }
    }
    return convertKey(pemKeyPair);
}

Example 4 with PasswordRequiredException

use of de.carne.certmgr.certs.PasswordRequiredException in project certmgr by hdecarne.

the class PKCS12CertReaderWriter method writeEncryptedBinary.

@Override
public void writeEncryptedBinary(IOResource<OutputStream> out, CertObjectStore certObjects, PasswordCallback newPassword) throws IOException {
    char[] passwordChars = newPassword.queryPassword(out.resource());
    if (passwordChars == null) {
        throw new PasswordRequiredException(out.resource());
    }
    try {
        List<PKCS12SafeBagBuilder> safeBagBuilders = new ArrayList<>(certObjects.size());
        for (CertObjectStore.Entry certObject : certObjects) {
            switch(certObject.type()) {
                case CRT:
                    safeBagBuilders.add(createCRTSafeBagBuilder(certObject.alias(), certObject.getCRT(), safeBagBuilders.isEmpty()));
                    break;
                case KEY:
                    safeBagBuilders.add(createKeySafeBagBuilder(certObject.alias(), certObject.getKey(), passwordChars));
                    break;
                case CSR:
                    break;
                case CRL:
                    break;
            }
        }
        PKCS12PfxPduBuilder pkcs12Builder = new PKCS12PfxPduBuilder();
        for (PKCS12SafeBagBuilder safeBagBuilder : safeBagBuilders) {
            pkcs12Builder.addData(safeBagBuilder.build());
        }
        PKCS12PfxPdu pkcs12 = pkcs12Builder.build(new BcPKCS12MacCalculatorBuilder(), passwordChars);
        out.io().write(pkcs12.getEncoded());
    } catch (GeneralSecurityException | PKCSException e) {
        throw new CertProviderException(e);
    }
}

Example 5 with PasswordRequiredException

use of de.carne.certmgr.certs.PasswordRequiredException in project certmgr by hdecarne.

the class DERCertReaderWriter method encryptKey.

private static byte[] encryptKey(KeyPair key, String resource, PasswordCallback newPassword) throws IOException {
    char[] passwordChars = newPassword.queryPassword(resource);
    if (passwordChars == null) {
        throw new PasswordRequiredException(resource);
    }
    byte[] encoded;
    try {
        PKCS8EncryptedPrivateKeyInfoBuilder encryptedPrivateKeyInfoBuilder = new PKCS8EncryptedPrivateKeyInfoBuilder(KeyHelper.encodePrivateKey(key.getPrivate()));
        OutputEncryptor encryptor = OUTPUT_ENCRYPTOR_BUILDER.build(passwordChars);
        encoded = encryptedPrivateKeyInfoBuilder.build(encryptor).getEncoded();
    } catch (OperatorCreationException e) {
        throw new CertProviderException(e);
    }
    return encoded;
}