All Downloads are FREE. Search and download functionalities are using the official Maven repository.
  • Log In
  • Register

    • io.rubrica.keystore.KeyStoreUtilities Maven / Gradle / Ivy

    /*
 * Copyright 2009-2017 Rubrica
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program.  If not, see .
 */

package io.rubrica.keystore;

import java.lang.reflect.Field;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.KeyStoreSpi;
import java.security.cert.CertificateExpiredException;
import java.security.cert.CertificateNotYetValidException;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.Collection;
import java.util.Collections;
import java.util.Enumeration;
import java.util.HashSet;
import java.util.List;
import java.util.Set;
import java.util.logging.Logger;

import io.rubrica.util.CertificateUtils;

/**
 * Tratamos los alias repetidos, situacion problematica afectada por el bug
 * http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6483657 Este solo se da
 * con SunMSCAPI
 *
 * @author Ricardo Arguello 
 */
public class KeyStoreUtilities {

	private static final Logger logger = Logger.getLogger(KeyStoreUtilities.class.getName());

	public static boolean tieneAliasRepetidos(KeyStore keyStore) {
		try {
			ArrayList aliases = Collections.list(keyStore.aliases());
			HashSet uniqAliases = new HashSet(aliases);
			return (aliases.size() > uniqAliases.size());
		} catch (KeyStoreException e) {
			throw new IllegalStateException(e);
		}
	}

	/**
	 * For WINDOWS-MY keystore fixes problem with non-unique aliases
	 * 
	 * @param keyStore
	 */
	@SuppressWarnings("unchecked")
	public static void fixAliases(final KeyStore keyStore) {
		Field field;
		KeyStoreSpi keyStoreVeritable;
		final Set tmpAliases = new HashSet();
		try {
			field = keyStore.getClass().getDeclaredField("keyStoreSpi");
			field.setAccessible(true);
			keyStoreVeritable = (KeyStoreSpi) field.get(keyStore);

			if ("sun.security.mscapi.KeyStore$MY".equals(keyStoreVeritable.getClass().getName())) {
				Collection entries;
				String alias, hashCode;
				X509Certificate[] certificates;

				field = keyStoreVeritable.getClass().getEnclosingClass().getDeclaredField("entries");
				field.setAccessible(true);
				entries = (Collection) field.get(keyStoreVeritable);

				for (Object entry : entries) {
					field = entry.getClass().getDeclaredField("certChain");
					field.setAccessible(true);
					certificates = (X509Certificate[]) field.get(entry);

					hashCode = Integer.toString(certificates[0].hashCode());

					field = entry.getClass().getDeclaredField("alias");
					field.setAccessible(true);
					alias = (String) field.get(entry);
					String tmpAlias = alias;
					int i = 0;
					while (tmpAliases.contains(tmpAlias)) {
						i++;
						tmpAlias = alias + "-" + i;
					}
					tmpAliases.add(tmpAlias);
					if (!alias.equals(hashCode)) {
						field.set(entry, tmpAlias);
					}
				}
			}
		} catch (Exception e) {
			logger.severe(e.getMessage());
		}
	}

	public static List getSigningAliases(KeyStore keyStore) {
		try {
			Enumeration aliases = keyStore.aliases();
			List aliasList = new ArrayList<>();

			while (aliases.hasMoreElements()) {
				String alias = aliases.nextElement();
				X509Certificate certificate = (X509Certificate) keyStore.getCertificate(alias);

				try {
					certificate.checkValidity();
				} catch (CertificateExpiredException | CertificateNotYetValidException e) {
					logger.warning("Certificado expirado: " + certificate.getIssuerX500Principal().toString());
					continue;
				}

				String name = CertificateUtils.getCN(certificate);
				boolean[] keyUsage = certificate.getKeyUsage();

				if (keyUsage != null) {
					// Certificado para Firma Digital
					if (keyUsage[0]) {
						aliasList.add(new Alias(alias, name));
					}
				}
			}

			return aliasList;
		} catch (KeyStoreException e) {
			throw new IllegalStateException(e);
		}
	}
}    
    
    
    

    




    
    
    © 2015 - 2025 Weber Informatics LLC | Privacy Policy