Examples with XMLX509Digest org.apache.xml.security.keys.content.x509.XMLX509Digest used on opensource projects

Example 1 with XMLX509Digest

use of org.apache.xml.security.keys.content.x509.XMLX509Digest in project santuario-java by apache.

the class X509DigestResolver method resolveCertificate.

/**
 * Resolves from the storage resolver the actual certificate represented by the digest.
 *
 * @param element
 * @param baseURI
 * @param storage
 * @return the certificate represented by the digest.
 * @throws XMLSecurityException
 */
private X509Certificate resolveCertificate(Element element, String baseURI, StorageResolver storage) throws XMLSecurityException {
    XMLX509Digest[] x509Digests = null;
    Element[] x509childNodes = XMLUtils.selectDs11Nodes(element.getFirstChild(), Constants._TAG_X509DIGEST);
    if (x509childNodes == null || x509childNodes.length <= 0) {
        return null;
    }
    try {
        checkStorage(storage);
        x509Digests = new XMLX509Digest[x509childNodes.length];
        for (int i = 0; i < x509childNodes.length; i++) {
            x509Digests[i] = new XMLX509Digest(x509childNodes[i], baseURI);
        }
        Iterator<Certificate> storageIterator = storage.getIterator();
        while (storageIterator.hasNext()) {
            X509Certificate cert = (X509Certificate) storageIterator.next();
            for (int i = 0; i < x509Digests.length; i++) {
                XMLX509Digest keyInfoDigest = x509Digests[i];
                byte[] certDigestBytes = XMLX509Digest.getDigestBytesFromCert(cert, keyInfoDigest.getAlgorithm());
                if (Arrays.equals(keyInfoDigest.getDigestBytes(), certDigestBytes)) {
                    LOG.debug("Found certificate with: {}", cert.getSubjectX500Principal().getName());
                    return cert;
                }
            }
        }
    } catch (XMLSecurityException ex) {
        throw new KeyResolverException(ex);
    }
    return null;
}

Example 2 with XMLX509Digest

use of org.apache.xml.security.keys.content.x509.XMLX509Digest in project santuario-java by apache.

the class XMLX509DigestTest method testDigestOnConstructionWithBytes.

@org.junit.Test
public void testDigestOnConstructionWithBytes() throws Exception {
    XMLX509Digest x509Digest = new XMLX509Digest(documentBuilder.newDocument(), digestControl, algorithmURIControl);
    assertEquals(algorithmURIControl, x509Digest.getAlgorithm());
    assertArrayEquals(digestControl, x509Digest.getDigestBytes());
}

Example 3 with XMLX509Digest

use of org.apache.xml.security.keys.content.x509.XMLX509Digest in project santuario-java by apache.

the class XMLX509DigestTest method testSchema.

@org.junit.Test
public void testSchema() throws Exception {
    XMLX509Digest x509Digest = new XMLX509Digest(documentBuilder.newDocument(), digestControl, algorithmURIControl);
    Element element = x509Digest.getElement();
    assertEquals("http://www.w3.org/2009/xmldsig11#", element.getNamespaceURI());
    assertEquals("X509Digest", element.getLocalName());
}

Example 4 with XMLX509Digest

use of org.apache.xml.security.keys.content.x509.XMLX509Digest in project santuario-java by apache.

the class XMLX509DigestTest method testDigestFromElement.

@org.junit.Test
public void testDigestFromElement() throws Exception {
    Document doc = loadXML("X509Digest.xml");
    NodeList nl = doc.getElementsByTagNameNS(Constants.SignatureSpec11NS, Constants._TAG_X509DIGEST);
    Element element = (Element) nl.item(0);
    XMLX509Digest x509Digest = new XMLX509Digest(element, "");
    assertEquals(algorithmURIControl, x509Digest.getAlgorithm());
    assertArrayEquals(digestControl, x509Digest.getDigestBytes());
}

Example 5 with XMLX509Digest

use of org.apache.xml.security.keys.content.x509.XMLX509Digest in project jdk8u_jdk by JetBrains.

the class X509DigestResolver method resolveCertificate.

/**
     * Resolves from the storage resolver the actual certificate represented by the digest.
     *
     * @param element
     * @param baseURI
     * @param storage
     * @return
     * @throws XMLSecurityException
     */
private X509Certificate resolveCertificate(Element element, String baseURI, StorageResolver storage) throws XMLSecurityException {
    XMLX509Digest[] x509Digests = null;
    Element[] x509childNodes = XMLUtils.selectDs11Nodes(element.getFirstChild(), Constants._TAG_X509DIGEST);
    if (x509childNodes == null || x509childNodes.length <= 0) {
        return null;
    }
    try {
        checkStorage(storage);
        x509Digests = new XMLX509Digest[x509childNodes.length];
        for (int i = 0; i < x509childNodes.length; i++) {
            x509Digests[i] = new XMLX509Digest(x509childNodes[i], baseURI);
        }
        Iterator<Certificate> storageIterator = storage.getIterator();
        while (storageIterator.hasNext()) {
            X509Certificate cert = (X509Certificate) storageIterator.next();
            for (int i = 0; i < x509Digests.length; i++) {
                XMLX509Digest keyInfoDigest = x509Digests[i];
                byte[] certDigestBytes = XMLX509Digest.getDigestBytesFromCert(cert, keyInfoDigest.getAlgorithm());
                if (Arrays.equals(keyInfoDigest.getDigestBytes(), certDigestBytes)) {
                    if (log.isLoggable(java.util.logging.Level.FINE)) {
                        log.log(java.util.logging.Level.FINE, "Found certificate with: " + cert.getSubjectX500Principal().getName());
                    }
                    return cert;
                }
            }
        }
    } catch (XMLSecurityException ex) {
        throw new KeyResolverException("empty", ex);
    }
    return null;
}