Examples with PrivateKeyInfo org.bouncycastle.asn1.pkcs.PrivateKeyInfo used on opensource projects

Example 66 with PrivateKeyInfo

use of org.bouncycastle.asn1.pkcs.PrivateKeyInfo in project thingsboard by thingsboard.

the class PemSslCredentials method loadKeyStore.

@Override
protected KeyStore loadKeyStore(boolean trustsOnly, char[] keyPasswordArray) throws IOException, GeneralSecurityException {
    if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {
        Security.addProvider(new BouncyCastleProvider());
    }
    List<X509Certificate> certificates = new ArrayList<>();
    PrivateKey privateKey = null;
    JcaX509CertificateConverter certConverter = new JcaX509CertificateConverter();
    JcaPEMKeyConverter keyConverter = new JcaPEMKeyConverter();
    try (InputStream inStream = ResourceUtils.getInputStream(this, this.certFile)) {
        try (PEMParser pemParser = new PEMParser(new InputStreamReader(inStream))) {
            Object object;
            while ((object = pemParser.readObject()) != null) {
                if (object instanceof X509CertificateHolder) {
                    X509Certificate x509Cert = certConverter.getCertificate((X509CertificateHolder) object);
                    certificates.add(x509Cert);
                } else if (object instanceof PEMEncryptedKeyPair) {
                    PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder().build(keyPasswordArray);
                    privateKey = keyConverter.getKeyPair(((PEMEncryptedKeyPair) object).decryptKeyPair(decProv)).getPrivate();
                } else if (object instanceof PEMKeyPair) {
                    privateKey = keyConverter.getKeyPair((PEMKeyPair) object).getPrivate();
                } else if (object instanceof PrivateKeyInfo) {
                    privateKey = keyConverter.getPrivateKey((PrivateKeyInfo) object);
                }
            }
        }
    }
    if (privateKey == null && !StringUtils.isEmpty(this.keyFile)) {
        if (ResourceUtils.resourceExists(this, this.keyFile)) {
            try (InputStream inStream = ResourceUtils.getInputStream(this, this.keyFile)) {
                try (PEMParser pemParser = new PEMParser(new InputStreamReader(inStream))) {
                    Object object;
                    while ((object = pemParser.readObject()) != null) {
                        if (object instanceof PEMEncryptedKeyPair) {
                            PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder().build(keyPasswordArray);
                            privateKey = keyConverter.getKeyPair(((PEMEncryptedKeyPair) object).decryptKeyPair(decProv)).getPrivate();
                            break;
                        } else if (object instanceof PEMKeyPair) {
                            privateKey = keyConverter.getKeyPair((PEMKeyPair) object).getPrivate();
                            break;
                        } else if (object instanceof PrivateKeyInfo) {
                            privateKey = keyConverter.getPrivateKey((PrivateKeyInfo) object);
                        }
                    }
                }
            }
        }
    }
    if (certificates.isEmpty()) {
        throw new IllegalArgumentException("No certificates found in certFile: " + this.certFile);
    }
    if (privateKey == null && !trustsOnly) {
        throw new IllegalArgumentException("Unable to load private key neither from certFile: " + this.certFile + " nor from keyFile: " + this.keyFile);
    }
    KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
    keyStore.load(null);
    if (trustsOnly) {
        List<Certificate> unique = certificates.stream().distinct().collect(Collectors.toList());
        for (int i = 0; i < unique.size(); i++) {
            keyStore.setCertificateEntry("root-" + i, unique.get(i));
        }
    }
    if (privateKey != null) {
        CertificateFactory factory = CertificateFactory.getInstance("X.509");
        CertPath certPath = factory.generateCertPath(certificates);
        List<? extends Certificate> path = certPath.getCertificates();
        Certificate[] x509Certificates = path.toArray(new Certificate[0]);
        keyStore.setKeyEntry(DEFAULT_KEY_ALIAS, privateKey, keyPasswordArray, x509Certificates);
    }
    return keyStore;
}

Example 67 with PrivateKeyInfo

use of org.bouncycastle.asn1.pkcs.PrivateKeyInfo in project tray by qzind.

the class CertificateManager method createTrustedKeystore.

public CertificateManager createTrustedKeystore(File pemKey, File pemCert) throws Exception {
    sslKeyPair = new KeyPairWrapper(SSL);
    // Private Key
    PEMParser pem = new PEMParser(new FileReader(pemKey));
    Object parsedObject = pem.readObject();
    PrivateKeyInfo privateKeyInfo = parsedObject instanceof PEMKeyPair ? ((PEMKeyPair) parsedObject).getPrivateKeyInfo() : (PrivateKeyInfo) parsedObject;
    PKCS8EncodedKeySpec privateKeySpec = new PKCS8EncodedKeySpec(privateKeyInfo.getEncoded());
    KeyFactory factory = KeyFactory.getInstance("RSA");
    PrivateKey key = factory.generatePrivate(privateKeySpec);
    List<X509Certificate> certs = new ArrayList<>();
    X509CertificateHolder certHolder = (X509CertificateHolder) pem.readObject();
    if (certHolder != null) {
        certs.add(new JcaX509CertificateConverter().setProvider("BC").getCertificate(certHolder));
    }
    // Certificate
    pem = new PEMParser(new FileReader(pemCert));
    while ((certHolder = (X509CertificateHolder) pem.readObject()) != null) {
        certs.add(new JcaX509CertificateConverter().setProvider("BC").getCertificate(certHolder));
    }
    // Keystore
    KeyStore ks = KeyStore.getInstance("PKCS12");
    ks.load(null);
    for (int i = 0; i < certs.size(); i++) {
        ks.setCertificateEntry(sslKeyPair.getAlias() + "_" + i, certs.get(i));
    }
    KeyStore keyStore = KeyStore.getInstance("PKCS12");
    keyStore.load(null);
    keyStore.setKeyEntry(sslKeyPair.getAlias(), key, getPassword(), certs.toArray(new X509Certificate[certs.size()]));
    sslKeyPair.init(keyStore, getPassword());
    return this;
}