use of org.mozilla.jss.asn1.NULL in project jss by dogtagpki.
the class CertificateInfo method encode.
@Override
public void encode(Tag implicitTag, OutputStream ostream) throws IOException {
SEQUENCE seq = new SEQUENCE();
if (version != v1) {
// v1 is the default
seq.addElement(new EXPLICIT(new Tag(0), new INTEGER(version.getNumber())));
}
seq.addElement(serialNumber);
seq.addElement(signatureAlgId);
seq.addElement(issuer);
SEQUENCE validity = new SEQUENCE();
validity.addElement(encodeValidityDate(notBefore));
validity.addElement(encodeValidityDate(notAfter));
seq.addElement(validity);
seq.addElement(subject);
seq.addElement(subjectPublicKeyInfo);
if (issuerUniqueIdentifier != null) {
seq.addElement(new Tag(1), issuerUniqueIdentifier);
}
if (subjectUniqueIdentifier != null) {
seq.addElement(new Tag(2), subjectUniqueIdentifier);
}
if (extensions.size() > 0) {
seq.addElement(new EXPLICIT(new Tag(3), extensions));
}
seq.encode(implicitTag, ostream);
}
use of org.mozilla.jss.asn1.NULL in project jss by dogtagpki.
the class PFX method encode.
@Override
public void encode(Tag implicitTag, OutputStream ostream) throws IOException {
SEQUENCE seq = new SEQUENCE();
seq.addElement(version);
seq.addElement(new ContentInfo(ASN1Util.encode(authSafes)));
if (macData != null) {
seq.addElement(macData);
}
seq.encode(implicitTag, ostream);
}
use of org.mozilla.jss.asn1.NULL in project jss by dogtagpki.
the class PFX method main.
public static void main(String[] args) {
try {
if (args.length != 2) {
System.out.println("Usage: PFX <dbdir> <infile>");
System.exit(-1);
}
int certfile = 0;
CryptoManager.initialize(args[0]);
// Decode the P12 file
PFX.Template pfxt = new PFX.Template();
PFX pfx;
FileInputStream fis = new FileInputStream(args[1]);
try (BufferedInputStream in = new BufferedInputStream(fis, 2048)) {
pfx = (PFX) pfxt.decode(in);
}
System.out.println("Decoded PFX");
// now peruse it for interesting info
System.out.println("Version: " + pfx.getVersion());
AuthenticatedSafes authSafes = pfx.getAuthSafes();
SEQUENCE asSeq = authSafes.getSequence();
System.out.println("AuthSafes has " + asSeq.size() + " SafeContents");
System.out.println("Enter password: ");
Password pass = Password.readPasswordFromConsole();
// get new password
System.out.println("Enter new password:");
Password newPass = Password.readPasswordFromConsole();
// verify the PFX
StringBuffer sb = new StringBuffer();
if (pfx.verifyAuthSafes(pass, sb)) {
System.out.println("AuthSafes verifies correctly");
} else {
System.out.println("AuthSafes failed to verify because: " + sb);
}
// get new AuthSafes ready
AuthenticatedSafes newAuthSafes = new AuthenticatedSafes();
for (int i = 0; i < asSeq.size(); i++) {
SEQUENCE safeContents = authSafes.getSafeContentsAt(pass, i);
System.out.println("\n\nSafeContents #" + i + " has " + safeContents.size() + " bags");
for (int j = 0; j < safeContents.size(); j++) {
SafeBag safeBag = (SafeBag) safeContents.elementAt(j);
System.out.println("\nBag " + j + " has type " + safeBag.getBagType());
SET attribs = safeBag.getBagAttributes();
if (attribs == null) {
System.out.println("Bag has no attributes");
} else {
for (int b = 0; b < attribs.size(); b++) {
Attribute a = (Attribute) attribs.elementAt(b);
if (a.getType().equals(SafeBag.FRIENDLY_NAME)) {
BMPString bs = (BMPString) ((ANY) a.getValues().elementAt(0)).decodeWith(BMPString.getTemplate());
System.out.println("Friendly Name: " + bs);
} else if (a.getType().equals(SafeBag.LOCAL_KEY_ID)) {
OCTET_STRING os = (OCTET_STRING) ((ANY) a.getValues().elementAt(0)).decodeWith(OCTET_STRING.getTemplate());
System.out.println("LocalKeyID:");
AuthenticatedSafes.print_byte_array(os.toByteArray());
} else {
System.out.println("Unknown attribute type");
}
}
}
ASN1Value val = safeBag.getInterpretedBagContent();
if (val instanceof PrivateKeyInfo) {
System.out.println("content is PrivateKeyInfo");
} else if (val instanceof EncryptedPrivateKeyInfo) {
EncryptedPrivateKeyInfo epki = ((EncryptedPrivateKeyInfo) val);
System.out.println("content is EncryptedPrivateKeyInfo, algoid:" + epki.getEncryptionAlgorithm().getOID());
PrivateKeyInfo pki = epki.decrypt(pass, new PasswordConverter());
byte[] salt = new byte[20];
JSSSecureRandom rand = CryptoManager.getInstance().getSecureRNG();
rand.nextBytes(salt);
epki = EncryptedPrivateKeyInfo.createPBE(PBEAlgorithm.PBE_SHA1_DES3_CBC, newPass, salt, 1, new PasswordConverter(), pki);
// replace the old safe bag with the new
safeContents.insertElementAt(new SafeBag(safeBag.getBagType(), epki, safeBag.getBagAttributes()), j);
safeContents.removeElementAt(j + 1);
} else if (val instanceof CertBag) {
System.out.println(" content is CertBag");
CertBag cb = (CertBag) val;
if (cb.getCertType().equals(CertBag.X509_CERT_TYPE)) {
OCTET_STRING os = (OCTET_STRING) cb.getInterpretedCert();
FileOutputStream fos = new FileOutputStream("cert" + (certfile++) + ".der");
os.encode(fos);
fos.close();
Certificate cert = (Certificate) ASN1Util.decode(Certificate.getTemplate(), os.toByteArray());
cert.getInfo().print(System.out);
} else {
System.out.println("Unrecognized cert type");
}
} else {
System.out.println("content is ANY");
}
}
// Add the new safe contents to the authsafes
if (authSafes.safeContentsIsEncrypted(i)) {
newAuthSafes.addEncryptedSafeContents(AuthenticatedSafes.DEFAULT_KEY_GEN_ALG, newPass, null, AuthenticatedSafes.DEFAULT_ITERATIONS, safeContents);
} else {
newAuthSafes.addSafeContents(safeContents);
}
}
// Create new PFX from new authsafes
PFX newPfx = new PFX(newAuthSafes);
newPfx.computeMacData(newPass, null, DEFAULT_ITERATIONS);
FileOutputStream fos = new FileOutputStream("newjss.p12");
newPfx.encode(fos);
fos.close();
} catch (Exception e) {
e.printStackTrace();
}
}
use of org.mozilla.jss.asn1.NULL in project jss by dogtagpki.
the class SafeBag method encode.
@Override
public void encode(Tag implicitTag, OutputStream ostream) throws IOException {
SEQUENCE seq = new SEQUENCE();
seq.addElement(bagType);
seq.addElement(new EXPLICIT(new Tag(0), bagContent));
if (bagAttributes != null) {
seq.addElement(bagAttributes);
}
seq.encode(implicitTag, ostream);
}
use of org.mozilla.jss.asn1.NULL in project jss by dogtagpki.
the class SignerInfo method encode.
@Override
public void encode(Tag tag, OutputStream ostream) throws IOException {
SEQUENCE sequence = new SEQUENCE();
sequence.addElement(version);
sequence.addElement(signerIdentifier);
sequence.addElement(digestAlgorithm);
if (signedAttributes != null) {
sequence.addElement(new Tag(0), signedAttributes);
}
sequence.addElement(digestEncryptionAlgorithm);
sequence.addElement(encryptedDigest);
if (unsignedAttributes != null) {
sequence.addElement(new Tag(1), unsignedAttributes);
}
sequence.encode(tag, ostream);
}
Aggregations