redcar 0.3.2dev → 0.3.3

data/lib/openssl/src/java/org/jruby/ext/openssl/impl/PKCS7DataSigned.java

@@ -0,0 +1,127 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2008 Ola Bini <ola.bini@gmail.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl.impl;
+
+import java.security.cert.X509CRL;
+import java.util.Collection;
+import org.bouncycastle.asn1.ASN1Encodable;
+import org.bouncycastle.asn1.DEREncodable;
+import org.bouncycastle.asn1.pkcs.SignerInfo;
+import org.jruby.ext.openssl.x509store.X509AuxCertificate;
+
+/**
+ *
+ * @author <a href="mailto:ola.bini@gmail.com">Ola Bini</a>
+ */
+public class PKCS7DataSigned extends PKCS7Data {
+    private int detached;
+
+    /* NID_pkcs7_signed */
+    private Signed sign;
+
+    public PKCS7DataSigned() {
+        this.sign = new Signed();
+        this.sign.setVersion(1);
+    }
+
+    public PKCS7DataSigned(Signed sign) {
+        this.sign = sign;
+    }
+
+    public int getType() {
+        return ASN1Registry.NID_pkcs7_signed;
+    }
+
+    public Object ctrl(int cmd, Object v, Object ignored) {
+        int ret = 0;
+        switch(cmd) {
+        case PKCS7.OP_SET_DETACHED_SIGNATURE:
+            ret = detached = ((Integer)v).intValue();
+            if(ret != 0 && sign.contents.isData()) {
+                sign.contents.setData(null);
+            }
+            break;
+        case PKCS7.OP_GET_DETACHED_SIGNATURE:
+            if(sign == null || sign.contents.getData() == null) {
+                ret = 1;
+            } else {
+                ret = 0;
+            }
+            break;
+        default:
+            throw new RuntimeException("TODO: implement error handling");
+        }
+        return Integer.valueOf(ret);
+    }
+
+    public void setSign(Signed sign) {
+        this.sign = sign;
+    }
+
+    public Signed getSign() {
+        return this.sign;
+    }
+
+    public boolean isSigned() {
+        return true;
+    }
+
+    public void addSigner(SignerInfoWithPkey psi) {
+        this.sign.getMdAlgs().add(psi.getDigestAlgorithm());
+        this.sign.getSignerInfo().add(psi);
+    }
+
+    public void setContent(PKCS7 p7) {
+        this.sign.setContents(p7);
+    }
+
+    public Collection<SignerInfoWithPkey> getSignerInfo() {
+        return this.sign.getSignerInfo();
+    }
+
+    public void addCertificate(X509AuxCertificate cert) {
+        this.sign.getCert().add(cert);
+    }
+
+    public void addCRL(X509CRL crl) {
+        this.sign.getCrl().add(crl);
+    }
+
+    @Override
+    public String toString() {
+        return this.sign.toString();
+    }
+
+    public static PKCS7DataSigned fromASN1(DEREncodable content) {
+        return new PKCS7DataSigned(Signed.fromASN1(content));
+    }
+
+    public ASN1Encodable asASN1() {
+        return sign.asASN1();
+    }
+}// PKCS7DataSigned

data/lib/openssl/src/java/org/jruby/ext/openssl/impl/PKCS7DataSignedAndEnveloped.java

@@ -0,0 +1,91 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2008 Ola Bini <ola.bini@gmail.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl.impl;
+
+import java.security.cert.X509CRL;
+import java.util.Collection;
+import javax.crypto.Cipher;
+import org.bouncycastle.asn1.DEREncodable;
+import org.bouncycastle.asn1.pkcs.SignerInfo;
+import org.jruby.ext.openssl.x509store.X509AuxCertificate;
+
+/**
+ *
+ * @author <a href="mailto:ola.bini@gmail.com">Ola Bini</a>
+ */
+public class PKCS7DataSignedAndEnveloped extends PKCS7Data  {
+    /* NID_pkcs7_signedAndEnveloped */
+    private SignEnvelope signedAndEnveloped;
+
+    public PKCS7DataSignedAndEnveloped() {
+        this.signedAndEnveloped = new SignEnvelope();
+        this.signedAndEnveloped.setVersion(1);
+        this.signedAndEnveloped.getEncData().setContentType(ASN1Registry.NID_pkcs7_data);
+    }
+
+    public int getType() {
+        return ASN1Registry.NID_pkcs7_signedAndEnveloped;
+    }
+
+    public boolean isSignedAndEnveloped() {
+        return true;
+    }
+
+    public SignEnvelope getSignedAndEnveloped() {
+        return signedAndEnveloped;
+    }
+
+    public void setCipher(Cipher cipher) {
+        this.signedAndEnveloped.getEncData().setCipher(cipher);
+    }
+
+    public void addRecipientInfo(RecipInfo ri) {
+        this.signedAndEnveloped.getRecipientInfo().add(ri);
+    }
+
+    public void addSigner(SignerInfoWithPkey psi) {
+        this.signedAndEnveloped.getMdAlgs().add(psi.getDigestAlgorithm());
+        this.signedAndEnveloped.getSignerInfo().add(psi);
+    }
+
+    public Collection<SignerInfoWithPkey> getSignerInfo() {
+        return this.signedAndEnveloped.getSignerInfo();
+    }
+
+    public void addCertificate(X509AuxCertificate cert) {
+        this.signedAndEnveloped.getCert().add(cert);
+    }
+
+    public void addCRL(X509CRL crl) {
+        this.signedAndEnveloped.getCrl().add(crl);
+    }
+
+    public static PKCS7DataSignedAndEnveloped fromASN1(DEREncodable content) {
+        throw new UnsupportedOperationException("TODO: can't create DataSignedAndEnveloped from ASN1 yet");
+    }
+}// PKCS7DataSignedAndEnveloped

data/lib/openssl/src/java/org/jruby/ext/openssl/impl/PKCS7Exception.java

@@ -0,0 +1,68 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2008 Ola Bini <ola.bini@gmail.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl.impl;
+
+/**
+ *
+ * @author <a href="mailto:ola.bini@gmail.com">Ola Bini</a>
+ */
+public class PKCS7Exception extends RuntimeException {
+    private int method;
+    private int reason;
+    private String errorData;
+
+    public PKCS7Exception(int method, int reason) {
+        this(method, reason, ""+null);
+    }
+
+    public PKCS7Exception(int method, int reason, String errorData) {
+        super("PKCS7[Method: " + method + ", Reason: " + reason + ", Data: " + errorData + "]");
+        this.method = method;
+        this.reason = reason;
+        this.errorData = errorData;
+    }
+
+    public PKCS7Exception(int method, int reason, Throwable cause) {
+        super("PKCS7[Method: " + method + ", Reason: " + reason + "]", cause);
+        this.method = method;
+        this.reason = reason;
+        this.errorData = errorData;
+    }
+
+    public int getMethod() {
+        return this.method;
+    }
+
+    public int getReason() {
+        return this.reason;
+    }
+
+    public String getErrorData() {
+        return this.errorData;
+    }
+}// PKCS7Exception

data/lib/openssl/src/java/org/jruby/ext/openssl/impl/RecipInfo.java

@@ -0,0 +1,244 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2008 Ola Bini <ola.bini@gmail.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl.impl;
+
+import java.io.ByteArrayInputStream;
+import java.io.IOException;
+import java.math.BigInteger;
+import org.bouncycastle.asn1.ASN1Encodable;
+import org.bouncycastle.asn1.ASN1EncodableVector;
+import org.bouncycastle.asn1.ASN1InputStream;
+import org.bouncycastle.asn1.ASN1OctetString;
+import org.bouncycastle.asn1.DEREncodable;
+import org.bouncycastle.asn1.DERInteger;
+import org.bouncycastle.asn1.DERSequence;
+import org.bouncycastle.asn1.pkcs.IssuerAndSerialNumber;
+import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
+import org.bouncycastle.asn1.x509.X509Name;
+import org.jruby.ext.openssl.x509store.Name;
+import org.jruby.ext.openssl.x509store.X509AuxCertificate;
+
+/** PKCS7_RECIP_INFO
+ *
+ * @author <a href="mailto:ola.bini@gmail.com">Ola Bini</a>
+ */
+public class RecipInfo {
+    private int version;
+    private IssuerAndSerialNumber issuerAndSerial;
+    private AlgorithmIdentifier keyEncAlgor;
+    private ASN1OctetString encKey;
+
+    /**
+     * Describe cert here.
+     */
+    private X509AuxCertificate cert;
+
+    /** c: PKCS7_RECIP_INFO_set
+     *
+     */
+    public void set(X509AuxCertificate cert) { 
+        version = 0;
+        try {
+            X509Name issuer = X509Name.getInstance(new ASN1InputStream(new ByteArrayInputStream(cert.getIssuerX500Principal().getEncoded())).readObject());
+            BigInteger serial = cert.getSerialNumber();
+            issuerAndSerial = new IssuerAndSerialNumber(issuer, serial);
+            String algo = addEncryptionIfNeeded(cert.getPublicKey().getAlgorithm());
+            keyEncAlgor = new AlgorithmIdentifier(ASN1Registry.sym2oid(algo));
+            this.cert = cert;
+        } catch(IOException e) {
+            throw new PKCS7Exception(-1, -1);
+        }
+    }
+
+    private String addEncryptionIfNeeded(String input) {
+        input = input.toLowerCase();
+        if(input.equals("rsa")) {
+            return input + "Encryption";
+        } else if(input.equals("dsa")) {
+            return input + "Encryption";
+        }
+        return input;
+    }
+
+    @Override
+    public boolean equals(Object other) {
+        boolean ret = this == other;
+        if(!ret && (other instanceof RecipInfo)) {
+            RecipInfo o = (RecipInfo)other;
+            ret = 
+                this.version == o.version &&
+                (this.issuerAndSerial == null ? o.issuerAndSerial == null : (this.issuerAndSerial.equals(o.issuerAndSerial))) &&
+                (this.keyEncAlgor == null ? o.keyEncAlgor == null : (this.keyEncAlgor.equals(o.keyEncAlgor))) &&
+                (this.encKey == null ? o.encKey == null : (this.encKey.equals(o.encKey)));
+        }
+        return ret;
+    }
+
+    @Override
+    public int hashCode() {
+        int result = 31;
+        result = result + 13 * version;
+        result = result + ((issuerAndSerial == null) ? 0 : 13 * issuerAndSerial.hashCode());
+        result = result + ((keyEncAlgor == null) ? 0 : 13 * keyEncAlgor.hashCode());
+        result = result + ((encKey == null) ? 0 : 13 * encKey.hashCode());
+        return result;
+    }
+
+    @Override
+    public String toString() {
+        return "#<Recipient version="+version+" issuerAndSerial=["+issuerAndSerial.getName()+","+issuerAndSerial.getCertificateSerialNumber()+"] keyEncAlgor="+ASN1Registry.o2a(keyEncAlgor.getObjectId())+" encKey="+encKey+">";
+    }
+
+    /**
+     * Get the <code>Version</code> value.
+     *
+     * @return an <code>int</code> value
+     */
+    public final int getVersion() {
+        return version;
+    }
+
+    /**
+     * Set the <code>Version</code> value.
+     *
+     * @param newVersion The new Version value.
+     */
+    public final void setVersion(final int newVersion) {
+        this.version = newVersion;
+    }
+
+    /**
+     * Get the <code>IssuerAndSerial</code> value.
+     *
+     * @return an <code>IssuerAndSerialNumber</code> value
+     */
+    public final IssuerAndSerialNumber getIssuerAndSerial() {
+        return issuerAndSerial;
+    }
+
+    /**
+     * Set the <code>IssuerAndSerial</code> value.
+     *
+     * @param newIssuerAndSerial The new IssuerAndSerial value.
+     */
+    public final void setIssuerAndSerial(final IssuerAndSerialNumber newIssuerAndSerial) {
+        this.issuerAndSerial = newIssuerAndSerial;
+    }
+
+    /**
+     * Get the <code>KeyEncAlgor</code> value.
+     *
+     * @return an <code>AlgorithmIdentifier</code> value
+     */
+    public final AlgorithmIdentifier getKeyEncAlgor() {
+        return keyEncAlgor;
+    }
+
+    /**
+     * Set the <code>KeyEncAlgor</code> value.
+     *
+     * @param newKeyEncAlgor The new KeyEncAlgor value.
+     */
+    public final void setKeyEncAlgor(final AlgorithmIdentifier newKeyEncAlgor) {
+        this.keyEncAlgor = newKeyEncAlgor;
+    }
+
+    /**
+     * Get the <code>EncKey</code> value.
+     *
+     * @return an <code>ASN1OctetString</code> value
+     */
+    public final ASN1OctetString getEncKey() {
+        return encKey;
+    }
+
+    /**
+     * Set the <code>EncKey</code> value.
+     *
+     * @param newEncKey The new EncKey value.
+     */
+    public final void setEncKey(final ASN1OctetString newEncKey) {
+        this.encKey = newEncKey;
+    }
+
+    /**
+     * Get the <code>Cert</code> value.
+     *
+     * @return a <code>X509AuxCertificate</code> value
+     */
+    public final X509AuxCertificate getCert() {
+        return cert;
+    }
+
+    /**
+     * Set the <code>Cert</code> value.
+     *
+     * @param newCert The new Cert value.
+     */
+    public final void setCert(final X509AuxCertificate newCert) {
+        this.cert = newCert;
+    }
+
+    /* c: static pkcs7_cmp_ri
+     *
+     */
+    public boolean compare(X509AuxCertificate pcert) {
+        if(!new Name(issuerAndSerial.getName()).isEqual(pcert.getIssuerX500Principal())) {
+            return false;
+        }
+        return pcert.getSerialNumber().compareTo(issuerAndSerial.getCertificateSerialNumber().getValue()) == 0;
+    }
+
+    /**
+     * RecipientInfo ::= SEQUENCE {
+     *   version Version,
+     *   issuerAndSerialNumber IssuerAndSerialNumber,
+     *   keyEncryptionAlgorithm KeyEncryptionAlgorithmIdentifier,
+     *   encryptedKey EncryptedKey }
+     * 
+     * EncryptedKey ::= OCTET STRING
+     */
+    public static RecipInfo fromASN1(DEREncodable content) {
+        DERSequence sequence = (DERSequence)content;
+        RecipInfo ri = new RecipInfo();
+        ri.setVersion(((DERInteger)sequence.getObjectAt(0)).getValue().intValue());
+        ri.setIssuerAndSerial(IssuerAndSerialNumber.getInstance(sequence.getObjectAt(1)));
+        ri.setKeyEncAlgor(AlgorithmIdentifier.getInstance(sequence.getObjectAt(2)));
+        ri.setEncKey((ASN1OctetString)sequence.getObjectAt(3));
+        return ri;
+    }
+
+    public ASN1Encodable asASN1() {
+        ASN1EncodableVector vector = new ASN1EncodableVector();
+        vector.add(new DERInteger(getVersion()));
+        vector.add(issuerAndSerial.toASN1Object()); 
+        vector.add(keyEncAlgor.toASN1Object());
+        vector.add(encKey.toASN1Object());
+        return new DERSequence(vector);
+    }
+}// RecipInfo