org.spongycastle.cert.dane.DANECertificateFetcher Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of pkix Show documentation

Spongy Castle is a package-rename (org.bouncycastle.* to org.spongycastle.*) of Bouncy Castle intended for the Android platform. Android unfortunately ships with a stripped-down version of Bouncy Castle, which prevents easy upgrades - Spongy Castle overcomes this and provides a full, up-to-date version of the Bouncy Castle cryptographic libs.

There is a newer version: 1.54.0.0

Show newest version

package org.spongycastle.cert.dane;

import java.util.ArrayList;
import java.util.Collections;
import java.util.Iterator;
import java.util.List;

import org.spongycastle.operator.DigestCalculator;

/**
 * A single shot fetcher for a certificate which will only request the specific DNS record if the
 * DANEEntryFetcher used on construction supports it.
 */
public class DANECertificateFetcher
{
    private final DANEEntryFetcherFactory fetcherFactory;
    private final DANEEntrySelectorFactory selectorFactory;

    /**
     * Base constructor.
     *
     * @param fetcherFactory the fetcher to use for resolving requests.
     * @param digestCalculator the digest calculator to use for calculating sub-domains.
     */
    public DANECertificateFetcher(DANEEntryFetcherFactory fetcherFactory, DigestCalculator digestCalculator)
    {
        this.fetcherFactory = fetcherFactory;
        this.selectorFactory= new DANEEntrySelectorFactory(digestCalculator);
    }

    /**
     * Fetch the certificates associated with the passed in email address if any exists.
     *
     * @param emailAddress the email address of interest.
     * @return a list of X509CertificateHolder objects, or an empty list if none present.
     * @throws DANEException in case of an underlying DNS or record parsing problem.
     */
    public List fetch(String emailAddress)
        throws DANEException
    {
        DANEEntrySelector daneSelector = selectorFactory.createSelector(emailAddress);

        List matches = fetcherFactory.build(daneSelector.getDomainName()).getEntries();
        List certs = new ArrayList(matches.size());

        for (Iterator it = matches.iterator(); it.hasNext();)
        {
            DANEEntry next = (DANEEntry)it.next();
            if (daneSelector.match(next))
            {
                certs.add(next.getCertificate());
            }
        }

        return Collections.unmodifiableList(certs);
    }
}