redcar 0.3.2dev → 0.3.3

data/lib/openssl/src/java/org/jruby/ext/openssl/impl/SMIME.java

@@ -0,0 +1,281 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2008 Ola Bini <ola.bini@gmail.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl.impl;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+
+/** SMIME methods for PKCS7
+ *
+ * @author <a href="mailto:ola.bini@gmail.com">Ola Bini</a>
+ */
+public class SMIME {
+    public final static int MAX_SMLEN = 1024;
+    public final static byte[] NEWLINE = new byte[]{'\r','\n'};
+
+    private Mime mime;
+
+    public SMIME() {
+        this(Mime.DEFAULT);
+    }
+
+    public SMIME(Mime mime) {
+        this.mime = mime;
+    }
+
+    private static boolean equals(byte[] first, int firstIndex, byte[] second, int secondIndex, int length) {
+        int len = length;
+        for(int i=firstIndex, 
+                j=secondIndex, 
+                flen=first.length, 
+                slen=second.length;
+            i<flen && 
+                j<slen && 
+                len>0;
+            i++, j++, len--) {
+
+            if(first[i] != second[j]) {
+                return false;
+            }
+        }
+        return len == 0;
+    }
+
+    /* c: static strip_eol
+     *
+     */
+    public static boolean stripEol(byte[] linebuf, int[] plen) {
+        int len = plen[0];
+        boolean isEol = false;
+        
+        for(int p = len - 1; len > 0; len--, p--) {
+            byte c = linebuf[p];
+            if(c == '\n') {
+                isEol = true; 
+            } else if(c != '\r') {
+                break;
+            }
+            
+        }
+        plen[0] = len;
+        return isEol;
+    }
+
+
+    /* c: SMIME_text
+     *
+     */
+    public void text(BIO input, BIO output) {
+// 	char iobuf[4096];
+// 	int len;
+// 	STACK_OF(MIME_HEADER) *headers;
+// 	MIME_HEADER *hdr;
+
+// 	if (!(headers = mime_parse_hdr(in))) {
+// 		PKCS7err(PKCS7_F_SMIME_TEXT,PKCS7_R_MIME_PARSE_ERROR);
+// 		return 0;
+// 	}
+// 	if(!(hdr = mime_hdr_find(headers, "content-type")) || !hdr->value) {
+// 		PKCS7err(PKCS7_F_SMIME_TEXT,PKCS7_R_MIME_NO_CONTENT_TYPE);
+// 		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+// 		return 0;
+// 	}
+// 	if (strcmp (hdr->value, "text/plain")) {
+// 		PKCS7err(PKCS7_F_SMIME_TEXT,PKCS7_R_INVALID_MIME_TYPE);
+// 		ERR_add_error_data(2, "type: ", hdr->value);
+// 		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+// 		return 0;
+// 	}
+// 	sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+// 	while ((len = BIO_read(in, iobuf, sizeof(iobuf))) > 0)
+// 						BIO_write(out, iobuf, len);
+// 	return 1;
+    }
+
+    /* c: static mime_bound_check
+     *
+     */
+    private int boundCheck(byte[] line, int linelen, byte[] bound, int blen) {
+        if(linelen == -1) {
+            linelen = line.length;
+        }
+
+        if(blen == -1) {
+            blen = bound.length;
+        }
+
+        // Quickly eliminate if line length too short
+        if(blen + 2 > linelen) {
+            return 0;
+        }
+
+        if(line[0] == '-' && 
+           line[1] == '-' &&
+           equals(line, 2, bound, 0, blen)) {
+            if(line.length>=(blen+4) &&
+               line[2 + blen] == '-' &&
+               line[2 + blen + 1] == '-') {
+                return 2;
+            } else {
+                return 1;
+            }
+        }
+        return 0;
+    }
+
+    /* c: B64_read_PKCS7
+     *
+     */
+    public PKCS7 readPKCS7Base64(BIO bio) throws IOException {
+        BIO bio64 = BIO.base64Filter(bio);
+        return PKCS7.fromASN1(bio64);
+    }
+
+    /* c: static multi_split
+     *
+     */
+    private List<BIO> multiSplit(BIO bio, byte[] bound) throws IOException {
+        List<BIO> parts = new ArrayList<BIO>();
+        byte[] linebuf = new byte[MAX_SMLEN];
+        int blen = bound.length;
+        boolean eol = false;
+        int len = 0;
+        int part = 0;
+        int state = 0;
+        boolean first = true;
+        BIO bpart = null;
+
+        while((len = bio.gets(linebuf, MAX_SMLEN)) > 0) {
+            state = boundCheck(linebuf, len, bound, blen);
+            if(state == 1) {
+                first = true;
+                part++;
+            } else if(state == 2) {
+                parts.add(bpart);
+                return parts;
+            } else if(part != 0) {
+                // strip CR+LF from linebuf
+                int[] tmp = new int[] {len};
+                boolean nextEol = stripEol(linebuf, tmp);
+                len = tmp[0];
+
+                if(first) {
+                    first = false;
+                    if(bpart != null) {
+                        parts.add(bpart);
+                    }
+                    bpart = BIO.mem();
+                    bpart.setMemEofReturn(0);
+                } else if(eol) {
+                    bpart.write(NEWLINE, 0, 2);
+                }
+                eol = nextEol;
+                if(len != 0) {
+                    bpart.write(linebuf, 0, len);
+                }
+            }
+        }
+
+        return parts;
+    }
+
+    /* c: SMIME_read_PKCS7
+     *
+     */
+    public PKCS7 readPKCS7(BIO bio, BIO[] bcont) throws IOException {
+        if(bcont != null && bcont.length > 0) {
+            bcont[0] = null;
+        }
+
+        List<MimeHeader> headers = mime.parseHeaders(bio);
+        if(headers == null) {
+            throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_MIME_PARSE_ERROR);
+        }
+
+        MimeHeader hdr = mime.findHeader(headers, "content-type");
+        if(hdr == null || hdr.getValue() == null) {
+            throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_NO_CONTENT_TYPE);
+        }
+
+        if("multipart/signed".equals(hdr.getValue())) {
+            MimeParam prm = mime.findParam(hdr, "boundary");
+            if(prm == null || prm.getParamValue() == null) {
+                throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_NO_MULTIPART_BOUNDARY);
+            }
+
+            byte[] boundary = null;
+            try {
+                boundary = prm.getParamValue().getBytes("ISO8859-1");
+            } catch(Exception e) {
+                throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_NO_MULTIPART_BOUNDARY);
+            }
+
+            List<BIO> parts = multiSplit(bio, boundary);
+            if(parts == null || parts.size() != 2) {
+                throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_NO_MULTIPART_BODY_FAILURE);
+            }
+
+            BIO p7in = parts.get(1);
+
+            headers = mime.parseHeaders(p7in);
+
+            if(headers == null) {
+                throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_MIME_SIG_PARSE_ERROR);
+            }
+
+            hdr = mime.findHeader(headers, "content-type");
+            if(hdr == null || hdr.getValue() == null) {
+                throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_NO_SIG_CONTENT_TYPE);
+            }
+
+            if(!"application/x-pkcs7-signature".equals(hdr.getValue()) &&
+               !"application/pkcs7-signature".equals(hdr.getValue()) &&
+               !"application/x-pkcs7-mime".equals(hdr.getValue()) &&
+               !"application/pkcs7-mime".equals(hdr.getValue())) {
+                throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_SIG_INVALID_MIME_TYPE, "type: " + hdr.getValue());
+            }
+
+            PKCS7 p7 = readPKCS7Base64(p7in);
+
+            if(bcont != null && bcont.length>0) {
+                bcont[0] = parts.get(0);
+            }
+
+            return p7;
+        }
+        
+        if(!"application/x-pkcs7-mime".equals(hdr.getValue()) &&
+           !"application/pkcs7-mime".equals(hdr.getValue())) {
+            throw new PKCS7Exception(PKCS7.F_SMIME_READ_PKCS7, PKCS7.R_INVALID_MIME_TYPE, "type: " + hdr.getValue());
+        }
+
+        return readPKCS7Base64(bio);
+    }
+}

data/lib/openssl/src/java/org/jruby/ext/openssl/impl/SignEnvelope.java

@@ -0,0 +1,202 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2008 Ola Bini <ola.bini@gmail.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl.impl;
+
+import java.security.cert.X509CRL;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import org.bouncycastle.asn1.pkcs.SignerInfo;
+import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
+import org.jruby.ext.openssl.x509store.X509AuxCertificate;
+
+/** PKCS7_SIGN_ENVELOPE
+ *
+ * @author <a href="mailto:ola.bini@gmail.com">Ola Bini</a>
+ */
+public class SignEnvelope {
+    private int version;
+
+    /**
+     * Describe encContent here.
+     */
+    private EncContent encData = new EncContent();
+
+    /**
+     * Describe crl here.
+     */
+    private Collection<X509CRL> crl = new ArrayList<X509CRL>();
+
+    /**
+     * Describe cert here.
+     */
+    private Collection<X509AuxCertificate> cert = new ArrayList<X509AuxCertificate>();
+
+    /**
+     * Describe mdAlgs here.
+     */
+    private Set<AlgorithmIdentifier> mdAlgs = new HashSet<AlgorithmIdentifier>();
+
+    /**
+     * Describe signerInfo here.
+     */
+    private Collection<SignerInfoWithPkey> signerInfo = new ArrayList<SignerInfoWithPkey>();
+
+    /**
+     * Describe recipientInfo here.
+     */
+    private Collection<RecipInfo> recipientInfo = new ArrayList<RecipInfo>();
+
+    /**
+     * Get the <code>Version</code> value.
+     *
+     * @return an <code>int</code> value
+     */
+    public final int getVersion() {
+        return version;
+    }
+
+    /**
+     * Set the <code>Version</code> value.
+     *
+     * @param newVersion The new Version value.
+     */
+    public final void setVersion(final int newVersion) {
+        this.version = newVersion;
+    }
+
+    /**
+     * Get the <code>EncData</code> value.
+     *
+     * @return an <code>EncContent</code> value
+     */
+    public final EncContent getEncData() {
+        return encData;
+    }
+
+    /**
+     * Set the <code>EncData</code> value.
+     *
+     * @param newEncContent The new EncContent value.
+     */
+    public final void setEncData(final EncContent newEncData) {
+        this.encData = newEncData;
+    }
+
+    /**
+     * Get the <code>RecipientInfo</code> value.
+     *
+     * @return a <code>Collection<RecipInfo></code> value
+     */
+    public final Collection<RecipInfo> getRecipientInfo() {
+        return recipientInfo;
+    }
+
+    /**
+     * Set the <code>RecipientInfo</code> value.
+     *
+     * @param newRecipientInfo The new RecipientInfo value.
+     */
+    public final void setRecipientInfo(final Collection<RecipInfo> newRecipientInfo) {
+        this.recipientInfo = newRecipientInfo;
+    }
+
+    /**
+     * Get the <code>SignerInfoWithPkey</code> value.
+     *
+     * @return a <code>Collection<SignerInfoWithPkey></code> value
+     */
+    public final Collection<SignerInfoWithPkey> getSignerInfo() {
+        return signerInfo;
+    }
+
+    /**
+     * Set the <code>SignerInfoWithPkey</code> value.
+     *
+     * @param newSignerInfo The new SignerInfo value.
+     */
+    public final void setSignerInfo(final Collection<SignerInfoWithPkey> newSignerInfo) {
+        this.signerInfo = newSignerInfo;
+    }
+
+    /**
+     * Get the <code>MdAlgs</code> value.
+     *
+     * @return a <code>Set<AlgorithmIdentifier></code> value
+     */
+    public final Set<AlgorithmIdentifier> getMdAlgs() {
+        return mdAlgs;
+    }
+
+    /**
+     * Set the <code>MdAlgs</code> value.
+     *
+     * @param newMdAlgs The new MdAlgs value.
+     */
+    public final void setMdAlgs(final Set<AlgorithmIdentifier> newMdAlgs) {
+        this.mdAlgs = newMdAlgs;
+    }
+
+    /**
+     * Get the <code>Cert</code> value.
+     *
+     * @return a <code>Collection<X509AuxCertificate></code> value
+     */
+    public final Collection<X509AuxCertificate> getCert() {
+        return cert;
+    }
+
+    /**
+     * Set the <code>Cert</code> value.
+     *
+     * @param newCert The new Cert value.
+     */
+    public final void setCert(final Collection<X509AuxCertificate> newCert) {
+        this.cert = newCert;
+    }
+
+    /**
+     * Get the <code>Crl</code> value.
+     *
+     * @return a <code>Collection<X509CRL></code> value
+     */
+    public final Collection<X509CRL> getCrl() {
+        return crl;
+    }
+
+    /**
+     * Set the <code>Crl</code> value.
+     *
+     * @param newCrl The new Crl value.
+     */
+    public final void setCrl(final Collection<X509CRL> newCrl) {
+        this.crl = newCrl;
+    }
+}// SignEnvelope