Search in sources :

Example 1 with DSAKeyValueType

use of org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType in project keycloak by keycloak.

the class SAMLParserTest method testSaml20AssertionDsaKey.

@Test
public void testSaml20AssertionDsaKey() throws Exception {
    AssertionType a = assertParsed("saml20-assertion-dsakey.xml", AssertionType.class);
    assertThat(a.getSubject().getConfirmation(), hasSize(1));
    assertThat(a.getSubject().getConfirmation().get(0).getSubjectConfirmationData(), notNullValue());
    assertThat(a.getSubject().getConfirmation().get(0).getSubjectConfirmationData().getAnyType(), instanceOf(KeyInfoType.class));
    KeyInfoType kit = (KeyInfoType) a.getSubject().getConfirmation().get(0).getSubjectConfirmationData().getAnyType();
    assertThat(kit.getContent(), hasItem(instanceOf(DSAKeyValueType.class)));
    DSAKeyValueType rsaKit = (DSAKeyValueType) kit.getContent().get(0);
    assertThat(rsaKit.getG(), notNullValue());
    assertThat(rsaKit.getJ(), nullValue());
    assertThat(rsaKit.getP(), notNullValue());
    assertThat(rsaKit.getQ(), notNullValue());
    assertThat(rsaKit.getY(), notNullValue());
}
Also used : EncryptedAssertionType(org.keycloak.dom.saml.v2.assertion.EncryptedAssertionType) AssertionType(org.keycloak.dom.saml.v2.assertion.AssertionType) DSAKeyValueType(org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType) KeyInfoType(org.keycloak.dom.xmlsec.w3.xmldsig.KeyInfoType) Test(org.junit.Test)

Example 2 with DSAKeyValueType

use of org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType in project keycloak by keycloak.

the class XMLSignatureUtil method getRSAKeyValue.

/**
 * Given a dsig:DSAKeyValue element, return {@link DSAKeyValueType}
 *
 * @param element
 *
 * @return
 *
 * @throws ProcessingException
 */
public static RSAKeyValueType getRSAKeyValue(Element element) throws ParsingException {
    RSAKeyValueType rsa = new RSAKeyValueType();
    NodeList nl = element.getChildNodes();
    int length = nl.getLength();
    for (int i = 0; i < length; i++) {
        Node node = nl.item(i);
        if (node instanceof Element) {
            Element childElement = (Element) node;
            String tag = childElement.getLocalName();
            byte[] text = childElement.getTextContent().getBytes(GeneralConstants.SAML_CHARSET);
            if (WSTrustConstants.XMLDSig.MODULUS.equals(tag)) {
                rsa.setModulus(text);
            } else if (WSTrustConstants.XMLDSig.EXPONENT.equals(tag)) {
                rsa.setExponent(text);
            }
        }
    }
    return rsa;
}
Also used : NodeList(org.w3c.dom.NodeList) Node(org.w3c.dom.Node) Element(org.w3c.dom.Element) RSAKeyValueType(org.keycloak.dom.xmlsec.w3.xmldsig.RSAKeyValueType)

Example 3 with DSAKeyValueType

use of org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType in project keycloak by keycloak.

the class SAML11ParserUtil method getDSAKeyValue.

/**
 * Given a dsig:DSAKeyValue element, return {@link DSAKeyValueType}
 *
 * @param element
 *
 * @return
 *
 * @throws org.keycloak.saml.common.exceptions.ParsingException
 */
private static DSAKeyValueType getDSAKeyValue(Element element) throws ParsingException {
    DSAKeyValueType dsa = new DSAKeyValueType();
    NodeList nl = element.getChildNodes();
    int length = nl.getLength();
    for (int i = 0; i < length; i++) {
        Node node = nl.item(i);
        if (node instanceof Element) {
            Element childElement = (Element) node;
            String tag = childElement.getLocalName();
            byte[] text = childElement.getTextContent().getBytes(GeneralConstants.SAML_CHARSET);
            if (WSTrustConstants.XMLDSig.P.equals(tag)) {
                dsa.setP(text);
            } else if (WSTrustConstants.XMLDSig.Q.equals(tag)) {
                dsa.setQ(text);
            } else if (WSTrustConstants.XMLDSig.G.equals(tag)) {
                dsa.setG(text);
            } else if (WSTrustConstants.XMLDSig.Y.equals(tag)) {
                dsa.setY(text);
            } else if (WSTrustConstants.XMLDSig.SEED.equals(tag)) {
                dsa.setSeed(text);
            } else if (WSTrustConstants.XMLDSig.PGEN_COUNTER.equals(tag)) {
                dsa.setPgenCounter(text);
            }
        }
    }
    return dsa;
}
Also used : NodeList(org.w3c.dom.NodeList) Node(org.w3c.dom.Node) EndElement(javax.xml.stream.events.EndElement) StartElement(javax.xml.stream.events.StartElement) Element(org.w3c.dom.Element) DSAKeyValueType(org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType)

Example 4 with DSAKeyValueType

use of org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType in project keycloak by keycloak.

the class XMLSignatureUtil method createKeyValue.

/**
 * <p>
 * Creates a {@code KeyValueType} that wraps the specified public key. This method supports DSA and RSA keys.
 * </p>
 *
 * @param key the {@code PublicKey} that will be represented as a {@code KeyValueType}.
 *
 * @return the constructed {@code KeyValueType} or {@code null} if the specified key is neither a DSA nor a RSA
 *         key.
 */
public static KeyValueType createKeyValue(PublicKey key) {
    if (key instanceof RSAPublicKey) {
        RSAPublicKey pubKey = (RSAPublicKey) key;
        byte[] modulus = pubKey.getModulus().toByteArray();
        byte[] exponent = pubKey.getPublicExponent().toByteArray();
        RSAKeyValueType rsaKeyValue = new RSAKeyValueType();
        rsaKeyValue.setModulus(Base64.encodeBytes(modulus).getBytes(GeneralConstants.SAML_CHARSET));
        rsaKeyValue.setExponent(Base64.encodeBytes(exponent).getBytes(GeneralConstants.SAML_CHARSET));
        return rsaKeyValue;
    } else if (key instanceof DSAPublicKey) {
        DSAPublicKey pubKey = (DSAPublicKey) key;
        byte[] P = pubKey.getParams().getP().toByteArray();
        byte[] Q = pubKey.getParams().getQ().toByteArray();
        byte[] G = pubKey.getParams().getG().toByteArray();
        byte[] Y = pubKey.getY().toByteArray();
        DSAKeyValueType dsaKeyValue = new DSAKeyValueType();
        dsaKeyValue.setP(Base64.encodeBytes(P).getBytes(GeneralConstants.SAML_CHARSET));
        dsaKeyValue.setQ(Base64.encodeBytes(Q).getBytes(GeneralConstants.SAML_CHARSET));
        dsaKeyValue.setG(Base64.encodeBytes(G).getBytes(GeneralConstants.SAML_CHARSET));
        dsaKeyValue.setY(Base64.encodeBytes(Y).getBytes(GeneralConstants.SAML_CHARSET));
        return dsaKeyValue;
    }
    throw logger.unsupportedType(key.toString());
}
Also used : RSAPublicKey(java.security.interfaces.RSAPublicKey) RSAKeyValueType(org.keycloak.dom.xmlsec.w3.xmldsig.RSAKeyValueType) DSAKeyValueType(org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType) DSAPublicKey(java.security.interfaces.DSAPublicKey)

Example 5 with DSAKeyValueType

use of org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType in project keycloak by keycloak.

the class XMLSignatureUtil method getDSAKeyValue.

/**
 * Given a dsig:DSAKeyValue element, return {@link DSAKeyValueType}
 *
 * @param element
 *
 * @return
 *
 * @throws ProcessingException
 */
public static DSAKeyValueType getDSAKeyValue(Element element) throws ParsingException {
    DSAKeyValueType dsa = new DSAKeyValueType();
    NodeList nl = element.getChildNodes();
    int length = nl.getLength();
    for (int i = 0; i < length; i++) {
        Node node = nl.item(i);
        if (node instanceof Element) {
            Element childElement = (Element) node;
            String tag = childElement.getLocalName();
            byte[] text = childElement.getTextContent().getBytes(GeneralConstants.SAML_CHARSET);
            if (WSTrustConstants.XMLDSig.P.equals(tag)) {
                dsa.setP(text);
            } else if (WSTrustConstants.XMLDSig.Q.equals(tag)) {
                dsa.setQ(text);
            } else if (WSTrustConstants.XMLDSig.G.equals(tag)) {
                dsa.setG(text);
            } else if (WSTrustConstants.XMLDSig.Y.equals(tag)) {
                dsa.setY(text);
            } else if (WSTrustConstants.XMLDSig.SEED.equals(tag)) {
                dsa.setSeed(text);
            } else if (WSTrustConstants.XMLDSig.PGEN_COUNTER.equals(tag)) {
                dsa.setPgenCounter(text);
            }
        }
    }
    return dsa;
}
Also used : NodeList(org.w3c.dom.NodeList) Node(org.w3c.dom.Node) Element(org.w3c.dom.Element) DSAKeyValueType(org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType)

Aggregations

DSAKeyValueType (org.keycloak.dom.xmlsec.w3.xmldsig.DSAKeyValueType)6 RSAKeyValueType (org.keycloak.dom.xmlsec.w3.xmldsig.RSAKeyValueType)4 Element (org.w3c.dom.Element)4 Node (org.w3c.dom.Node)3 NodeList (org.w3c.dom.NodeList)3 DSAPublicKey (java.security.interfaces.DSAPublicKey)2 RSAPublicKey (java.security.interfaces.RSAPublicKey)2 EndElement (javax.xml.stream.events.EndElement)1 StartElement (javax.xml.stream.events.StartElement)1 Test (org.junit.Test)1 AssertionType (org.keycloak.dom.saml.v2.assertion.AssertionType)1 EncryptedAssertionType (org.keycloak.dom.saml.v2.assertion.EncryptedAssertionType)1 KeyInfoType (org.keycloak.dom.xmlsec.w3.xmldsig.KeyInfoType)1 KeyValueType (org.keycloak.dom.xmlsec.w3.xmldsig.KeyValueType)1 X509CertificateType (org.keycloak.dom.xmlsec.w3.xmldsig.X509CertificateType)1 X509DataType (org.keycloak.dom.xmlsec.w3.xmldsig.X509DataType)1 ProcessingException (org.keycloak.saml.common.exceptions.ProcessingException)1