blob: 78a00246d385f955e718c27d23ec388d82d55223 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
// Copyright Vespa.ai. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.security;
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers;
import org.bouncycastle.asn1.x509.BasicConstraints;
import org.bouncycastle.asn1.x509.Extension;
import org.bouncycastle.asn1.x509.Extensions;
import org.bouncycastle.asn1.x509.GeneralNames;
import org.bouncycastle.pkcs.PKCS10CertificationRequest;
import javax.security.auth.x500.X500Principal;
import java.util.Arrays;
import java.util.List;
import java.util.Objects;
import java.util.Optional;
import static java.util.Collections.emptyList;
/**
* @author bjorncs
*/
public class Pkcs10Csr {
private final PKCS10CertificationRequest csr;
Pkcs10Csr(PKCS10CertificationRequest csr) {
this.csr = csr;
}
PKCS10CertificationRequest getBcCsr() {
return csr;
}
public X500Principal getSubject() {
return new X500Principal(csr.getSubject().toString());
}
public List<SubjectAlternativeName> getSubjectAlternativeNames() {
return getExtensions()
.map(extensions -> GeneralNames.fromExtensions(extensions, Extension.subjectAlternativeName))
.map(SubjectAlternativeName::fromGeneralNames)
.orElse(emptyList());
}
/**
* @return If basic constraints extension is present: returns true if CA cert, false otherwise. Returns empty if the extension is not present.
*/
public Optional<Boolean> getBasicConstraints() {
return getExtensions()
.map(BasicConstraints::fromExtensions)
.map(BasicConstraints::isCA);
}
public List<String> getExtensionOIds() {
return getExtensions()
.map(extensions -> Arrays.stream(extensions.getExtensionOIDs())
.map(ASN1ObjectIdentifier::getId)
.toList())
.orElse(emptyList());
}
private Optional<Extensions> getExtensions() {
return Optional.of(csr.getAttributes(PKCSObjectIdentifiers.pkcs_9_at_extensionRequest))
.filter(attributes -> attributes.length > 0)
.map(attributes -> attributes[0])
.map(attribute -> Extensions.getInstance(attribute.getAttrValues().getObjectAt(0)));
}
@Override
public boolean equals(Object o) {
if (this == o) return true;
if (o == null || getClass() != o.getClass()) return false;
Pkcs10Csr pkcs10Csr = (Pkcs10Csr) o;
return Objects.equals(csr, pkcs10Csr.csr);
}
@Override
public int hashCode() {
return Objects.hash(csr);
}
}
|
