it.trento.comune.j4sign.verification.utils

Class CertUtils.QCStatements

java.lang.Object

it.trento.comune.j4sign.verification.utils.CertUtils.QCStatements

Enclosing class:

CertUtils

public static class CertUtils.QCStatements
extends java.lang.Object

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	DIRECTORYNAME
static java.lang.String	DNS
static java.lang.String	EMAIL
static java.lang.String	EMAIL1
static java.lang.String	EMAIL2
static java.lang.String	EMAIL3
static java.lang.String	IPADDR
static java.lang.String	UPN Microsoft altName for windows smart card logon
static java.lang.String	UPN_OBJECTID ObjectID for upn altName for windows smart card logon
static java.lang.String	URI
static java.lang.String	URI1
static java.lang.String	URI2

Constructor Summary

Constructors

Constructor and Description
CertUtils.QCStatements()

Method Summary

Methods

Modifier and Type	Method and Description
private static org.bouncycastle.asn1.ASN1Sequence	getAltnameSequence(byte[] value)
protected static org.bouncycastle.asn1.DERObject	getExtensionValue(java.security.cert.X509Certificate cert, java.lang.String oid) Return an Extension DERObject from a certificate
static java.lang.String	getGeneralNameString(int tag, org.bouncycastle.asn1.DEREncodable value) GeneralName ::= CHOICE { otherName [0] OtherName, rfc822Name [1] IA5String, dNSName [2] IA5String, x400Address [3] ORAddress, directoryName [4] Name, ediPartyName [5] EDIPartyName, uniformResourceIdentifier [6] IA5String, iPAddress [7] OCTET STRING, registeredID [8] OBJECT IDENTIFIER}
static java.lang.String	getQcStatementAuthorities(java.security.cert.Certificate cert) Returns the 'NameRegistrationAuthorities' defined in the QCStatement extension (rfc3739).
static java.util.Collection	getQcStatementIds(java.security.cert.Certificate cert) Returns all the 'statementId' defined in the QCStatement extension (rfc3739).
static org.bouncycastle.asn1.ASN1Sequence	getQcStatements(java.security.cert.Certificate cert)
static java.lang.String	getQcStatementValueLimit(java.security.cert.Certificate cert) Returns the value limit ETSI QCStatement if present.
private static java.lang.String	getStringFromGeneralNames(org.bouncycastle.asn1.DERObject names)
private static java.lang.String	getUPNStringFromSequence(org.bouncycastle.asn1.ASN1Sequence seq) Helper method for the above method
static boolean	hasQcStatement(java.security.cert.Certificate cert) Returns true if the certificate contains a QC-statements extension.
static java.lang.String	ipOctetsToString(byte[] octets) Converts ip-adress octets, according to ipStringToOctets to human readable string in form 10.1.1.1 for ipv4 adresses.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

EMAIL

public static final java.lang.String EMAIL

See Also:

Constant Field Values

EMAIL1

public static final java.lang.String EMAIL1

See Also:

Constant Field Values

EMAIL2

public static final java.lang.String EMAIL2

See Also:

Constant Field Values

EMAIL3

public static final java.lang.String EMAIL3

See Also:

Constant Field Values

DNS

public static final java.lang.String DNS

See Also:

Constant Field Values

URI

public static final java.lang.String URI

See Also:

Constant Field Values

URI1

public static final java.lang.String URI1

See Also:

Constant Field Values

URI2

public static final java.lang.String URI2

See Also:

Constant Field Values

IPADDR

public static final java.lang.String IPADDR

See Also:

Constant Field Values

DIRECTORYNAME

public static final java.lang.String DIRECTORYNAME

See Also:

Constant Field Values

UPN

public static final java.lang.String UPN

Microsoft altName for windows smart card logon

See Also:

Constant Field Values

UPN_OBJECTID

public static final java.lang.String UPN_OBJECTID

ObjectID for upn altName for windows smart card logon

See Also:

Constant Field Values

Constructor Detail

CertUtils.QCStatements

public CertUtils.QCStatements()

Method Detail

hasQcStatement

public static boolean hasQcStatement(java.security.cert.Certificate cert)
                              throws java.io.IOException

Returns true if the certificate contains a QC-statements extension.

Parameters:

cert - Certificate containing the extension

Returns:

true or false.

Throws:

java.io.IOException - if there is a problem parsing the certificate

getExtensionValue

protected static org.bouncycastle.asn1.DERObject getExtensionValue(java.security.cert.X509Certificate cert,
                                                java.lang.String oid)
                                                            throws java.io.IOException

Return an Extension DERObject from a certificate

Throws:

java.io.IOException

getStringFromGeneralNames

private static java.lang.String getStringFromGeneralNames(org.bouncycastle.asn1.DERObject names)

getQcStatementIds

public static java.util.Collection getQcStatementIds(java.security.cert.Certificate cert)
                                              throws java.io.IOException

Returns all the 'statementId' defined in the QCStatement extension (rfc3739).

Parameters:

cert - Certificate containing the extension

Returns:

Collection of String with the oid, for example "1.1.1.2", or empty Collection if no identifier is found, never returns null.

Throws:

java.io.IOException - if there is a problem parsing the certificate

getQcStatements

public static org.bouncycastle.asn1.ASN1Sequence getQcStatements(java.security.cert.Certificate cert)
                                                          throws java.io.IOException

Throws:

java.io.IOException

getQcStatementValueLimit

public static java.lang.String getQcStatementValueLimit(java.security.cert.Certificate cert)
                                                 throws java.io.IOException

Returns the value limit ETSI QCStatement if present.

Parameters:

cert - Certificate possibly containing the QCStatement extension

Returns:

String with the value and currency (ex '50000 SEK')or null if the extension is not present

Throws:

java.io.IOException - if there is a problem parsing the certificate

getQcStatementAuthorities

public static java.lang.String getQcStatementAuthorities(java.security.cert.Certificate cert)
                                                  throws java.io.IOException

Returns the 'NameRegistrationAuthorities' defined in the QCStatement extension (rfc3739).

Parameters:

cert - Certificate containing the extension

Returns:

String with for example 'rfc822Name=foo2bar.se, rfc822Name=bar2foo.se' etc. Supports email, dns and uri name, or null of no RAs are found.

Throws:

java.io.IOException - if there is a problem parsing the certificate

getGeneralNameString

public static java.lang.String getGeneralNameString(int tag,
                                    org.bouncycastle.asn1.DEREncodable value)
                                             throws java.io.IOException

GeneralName ::= CHOICE { otherName [0] OtherName, rfc822Name [1] IA5String, dNSName [2] IA5String, x400Address [3] ORAddress, directoryName [4] Name, ediPartyName [5] EDIPartyName, uniformResourceIdentifier [6] IA5String, iPAddress [7] OCTET STRING, registeredID [8] OBJECT IDENTIFIER}

Parameters:

tag - the no tag 0-8

value - the DEREncodable value as returned by GeneralName.getName()

Returns:

String in form rfc822Name= or uri= etc

Throws:

java.io.IOException

See Also:

#getSubjectAlternativeName

getAltnameSequence

private static org.bouncycastle.asn1.ASN1Sequence getAltnameSequence(byte[] value)
                                                              throws java.io.IOException

Throws:

java.io.IOException

getUPNStringFromSequence

private static java.lang.String getUPNStringFromSequence(org.bouncycastle.asn1.ASN1Sequence seq)

Helper method for the above method

Parameters:

seq - the OtherName sequence

ipOctetsToString

public static java.lang.String ipOctetsToString(byte[] octets)

Converts ip-adress octets, according to ipStringToOctets to human readable string in form 10.1.1.1 for ipv4 adresses.

Parameters:

octets -

Returns:

ip address string, null if input is invalid

See Also:

#ipStringToOctets(String)