de.tsl2.nano.core.secure.PKI.class Maven / Gradle / Ivy
???? =G java/security/KeyPair
6(Ljava/security/PublicKey;Ljava/security/PrivateKey;)V
de/tsl2/nano/core/secure/PKI F(Ljava/security/KeyPair;Lde/tsl2/nano/core/secure/DistinguishedName;)V
java/lang/Object ()V keyPair Ljava/security/KeyPair; issuer ,Lde/tsl2/nano/core/secure/DistinguishedName; LOG Lorg/apache/commons/logging/Log;
toString ()Ljava/lang/String; " # $ % & org/apache/commons/logging/Log info (Ljava/lang/Object;)V ( ) * CERT_FACT_FORMAT Ljava/lang/String;
, - . / 0 %java/security/cert/CertificateFactory getInstance ;(Ljava/lang/String;)Ljava/security/cert/CertificateFactory;
2 3 4 getCertificateFactory )()Ljava/security/cert/CertificateFactory;
, 6 7 8 generateCertificate 7(Ljava/io/InputStream;)Ljava/security/cert/Certificate; : 'java/security/cert/CertificateException
< = > ? @ "de/tsl2/nano/core/ManagedException forward ,(Ljava/lang/Throwable;)Ljava/lang/Throwable;
B C D
getPrivate ()Ljava/security/PrivateKey; F sun/security/x509/X509CertInfo
E I java/util/Date
H
H L M N getTime ()J &\
H R S (J)V U %sun/security/x509/CertificateValidity
T W X #(Ljava/util/Date;Ljava/util/Date;)V Z java/math/BigInteger \ java/security/SecureRandom
[
Y _ ` (ILjava/util/Random;)V b sun/security/x509/X500Name
a d e (Ljava/lang/String;)V g validity
E i j k set '(Ljava/lang/String;Ljava/lang/Object;)V m serialNumber o )sun/security/x509/CertificateSerialNumber
n q r (Ljava/math/BigInteger;)V t subject w key y $sun/security/x509/CertificateX509Key
{ | } getPublic ()Ljava/security/PublicKey;
x ? (Ljava/security/PublicKey;)V ? version ? $sun/security/x509/CertificateVersion
? ? ? (I)V ?
MD5withRSA
? ? ? ? ? sun/security/x509/AlgorithmId get 3(Ljava/lang/String;)Lsun/security/x509/AlgorithmId; ? algorithmID ? (sun/security/x509/CertificateAlgorithmId
? ? ? "(Lsun/security/x509/AlgorithmId;)V ? sun/security/x509/X509CertImpl
? ? ? #(Lsun/security/x509/X509CertInfo;)V
? ? ? ? sign /(Ljava/security/PrivateKey;Ljava/lang/String;)V ? x509.algorithm
? ? ? ? &(Ljava/lang/String;)Ljava/lang/Object; ? algorithmID.algorithm
? ? ? signedBy K(Ljava/security/cert/X509Certificate;Ljava/security/cert/X509Certificate;)Z
? ? ? ? ? "java/security/cert/X509Certificate getSubjectDN ()Ljava/security/Principal;
? ? ? ? getIssuerDN ? ? ? ? ? java/security/Principal equals (Ljava/lang/Object;)Z
? ? ? } getPublicKey
? ? ? ? verify ? java/lang/Exception
, ? ? ? generateCertPath 4(Ljava/io/InputStream;)Ljava/security/cert/CertPath; ? ? ? keyStore Ljava/security/KeyStore;
? ? ? createCertPath ?(Ljava/security/KeyStore;Lde/tsl2/nano/core/secure/DistinguishedName;Lde/tsl2/nano/core/secure/DistinguishedName;Ljava/util/Date;Ljava/util/Date;Ljava/security/PublicKey;)Ljava/security/cert/CertPath; ? java/security/cert/TrustAnchor
? ? *de/tsl2/nano/core/secure/DistinguishedName
? ? ? 0(Ljava/lang/String;Ljava/security/PublicKey;[B)V
? ? ? ? ? java/util/Collections singleton #(Ljava/lang/Object;)Ljava/util/Set; ? java/util/HashSet
?
? ? ? createX509CertSelector ?(Lde/tsl2/nano/core/secure/DistinguishedName;Lde/tsl2/nano/core/secure/DistinguishedName;Ljava/util/Date;Ljava/security/PublicKey;)Ljava/security/cert/X509CertSelector;
? ? ? createPKIXBuilderParams ?(Ljava/security/KeyStore;Ljava/util/Date;Ljava/util/Set;Ljava/security/cert/CertSelector;)Ljava/security/cert/PKIXBuilderParameters;
? ? ? F(Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPath; ? (java/security/cert/PKIXBuilderParameters
? ? ? 3(Ljava/util/Set;Ljava/security/cert/CertSelector;)V
? ? ? ? setRevocationEnabled (Z)V
? ? ? ? setDate (Ljava/util/Date;)V ? java/lang/IllegalStateException ? Ua keystore must be set and filled with a root certificate before creating a certpath!
? d ? java/security/cert/CertStore
? getCertStore 8(Ljava/security/KeyStore;)Ljava/security/cert/CertStore;
java/util/Arrays asList %([Ljava/lang/Object;)Ljava/util/List;
?
setCertStores (Ljava/util/List;)V
java/util/ArrayList
java/security/KeyStore aliases ()Ljava/util/Enumeration; java/util/Enumeration hasMoreElements ()Z nextElement ()Ljava/lang/Object; java/lang/String
" #$ getCertificate 4(Ljava/lang/String;)Ljava/security/cert/Certificate;
?& '( getSubjectX500Principal *()Ljavax/security/auth/x500/X500Principal;* RFC1779
,-. /0 &javax/security/auth/x500/X500Principal getName &(Ljava/lang/String;)Ljava/lang/String; 2 30 makeConcatWithConstants "5 6 & debug
8 9 ? add;
Collection= 0java/security/cert/CollectionCertStoreParameters
<? @ (Ljava/util/Collection;)V
?B /C Z(Ljava/lang/String;Ljava/security/cert/CertStoreParameters;)Ljava/security/cert/CertStore;E #java/security/cert/X509CertSelector
D
?H I( toX500Principal
DK LM setIssuer +(Ljavax/security/auth/x500/X500Principal;)V
DO PM
setSubject
DR S ? setSubjectPublicKey
DU V ? setCertificateValid
DX YZ setKeyUsage ([Z)V \ ] *
CERT_PATH_ALG
_`a /b "java/security/cert/CertPathBuilder 8(Ljava/lang/String;)Ljava/security/cert/CertPathBuilder;
_d ef build S(Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPathBuilderResult; hij kl (java/security/cert/CertPathBuilderResult getCertPath ()Ljava/security/cert/CertPath; n 3o 1(Ljava/security/cert/CertPath;)Ljava/lang/String;
qrs /t $java/security/cert/CertPathValidator :(Ljava/lang/String;)Ljava/security/cert/CertPathValidator;
qv wx validate r(Ljava/security/cert/CertPath;Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPathValidatorResult;z %java/security/spec/X509EncodedKeySpec
y| } ([B)V
?? /? java/security/KeyFactory .(Ljava/lang/String;)Ljava/security/KeyFactory;
? ?? generatePublic 7(Ljava/security/spec/KeySpec;)Ljava/security/PublicKey;? java/io/ByteArrayInputStream
??? ?? java/security/cert/Certificate
getEncoded ()[B
?|
??? ?? de/tsl2/nano/core/util/FileUtil write /(Ljava/io/InputStream;Ljava/io/OutputStream;Z)J? /java/security/cert/CertificateEncodingException???????? ??? java/security/Key
? ?? 3(Ljava/io/InputStream;Ljava/security/PrivateKey;)[B ? ? * HASHSIGN_ALG
? ?? E(Ljava/io/InputStream;Ljava/lang/String;Ljava/security/PrivateKey;)[B
?? ?? getFile )(Ljava/lang/String;)Ljava/io/InputStream;
??? /? java/security/Signature -(Ljava/lang/String;)Ljava/security/Signature;
?? ?? initSign (Ljava/security/PrivateKey;)V? java/io/BufferedInputStream
?? ? (Ljava/io/InputStream;)V
?? ?? read ([B)I
?? ?? update ([BII)V
?? ? close
?? ??
? ?? E(Ljava/io/InputStream;[BLjava/security/PublicKey;Ljava/lang/String;)Z
?? ? ?
initVerify
?? ?? available ()I
?? ?? ([B)Z ? 3? (Z)Ljava/lang/String;
? ?? createKeyStore ()Ljava/security/KeyStore;
? ?? setCertificateEntry 5(Ljava/lang/String;Ljava/security/cert/Certificate;)V? java/security/KeyStoreException
? ?? .(Ljava/lang/String;[C)Ljava/security/KeyStore; ? ? *
KEYSTORE_TYPE
? ?? @(Ljava/lang/String;Ljava/lang/String;[C)Ljava/security/KeyStore;
? /? ,(Ljava/lang/String;)Ljava/security/KeyStore;? java/io/File
? d
?? ? exists? java/io/FileInputStream
? d
??? ?? java/lang/Thread
currentThread ()Ljava/lang/Thread;
?? ?? getContextClassLoader ()Ljava/lang/ClassLoader;
? ? java/lang/ClassLoader getResourceAsStream
load (Ljava/io/InputStream;[C)V 3 ,(Ljava/security/KeyStore;)Ljava/lang/String;
? ? -(Ljava/io/InputStream;Z)Ljava/io/InputStream;
javax/net/ssl/KeyManagerFactory getDefaultAlgorithm
/ 5(Ljava/lang/String;)Ljavax/net/ssl/KeyManagerFactory;
toCharArray ()[C
init (Ljava/security/KeyStore;[C)V 'java/security/UnrecoverableKeyException &java/security/NoSuchAlgorithmException" java/io/FileOutputStream
! d
% &' store (Ljava/io/OutputStream;[C)V
) *+ getClass ()Ljava/lang/Class;-
ttrusted-orga:/ 6
FactoryFormat/CertPathAlg/KeystoreType/HashSignAlg:
123 4 de/tsl2/nano/core/util/Util 8(Ljava/lang/Class;[Ljava/lang/Object;)Ljava/lang/String;6 help8 this help: gencert< =creates a certificate : [issuer-dn] [public-key]> vercert@ /verifies a certificate:
BCD EF de/tsl2/nano/core/util/MapUtil asMap $([Ljava/lang/Object;)Ljava/util/Map;H de/tsl2/nano/core/ArgumentatorJ PKI
L MN manual ()Ljava/util/Map;
GP Q 7(Ljava/lang/String;Ljava/util/Map;[Ljava/lang/String;)V STU VW java/lang/System out Ljava/io/PrintStream; Y Z[ apply ()Ljava/util/function/Function;
G] ^_ start 5(Ljava/io/PrintStream;Ljava/util/function/Function;)V
abc d java/lang/Class
getSimpleName 2
ghi jk de/tsl2/nano/core/log/LogFactory getLog 3(Ljava/lang/Class;)Lorg/apache/commons/logging/Log;m tsl2nano.pki.certfactory.formato X.509
Sq rs getProperty 8(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;u tsl2nano.pki.certpath.algorithmw PKIXy tsl2nano.pki.keystore.type{ PKCS12} tsl2nano.pki.hashsign.algorithm
SHA256withRSA H(Ljava/security/PublicKey;Lde/tsl2/nano/core/secure/DistinguishedName;)V Code LineNumberTable LocalVariableTable this Lde/tsl2/nano/core/secure/PKI; Ljava/security/PublicKey; I(Ljava/security/PrivateKey;Lde/tsl2/nano/core/secure/DistinguishedName;)V Ljava/security/PrivateKey;
Exceptions createCertificate certFactory 'Ljava/security/cert/CertificateFactory; e )Ljava/security/cert/CertificateException; certEncoded Ljava/io/InputStream;
StackMapTable b(Ljava/lang/String;Ljava/security/KeyPair;ILjava/lang/String;)Ljava/security/cert/X509Certificate; dn pair days I algorithm privkey Lsun/security/x509/X509CertInfo; from Ljava/util/Date; to interval 'Lsun/security/x509/CertificateValidity; sn Ljava/math/BigInteger; owner Lsun/security/x509/X500Name; algo Lsun/security/x509/AlgorithmId; cert Lsun/security/x509/X509CertImpl;? &java/security/GeneralSecurityException? java/io/IOException isSelfSigned '(Ljava/security/cert/X509Certificate;)Z $Ljava/security/cert/X509Certificate; Ljava/lang/Exception; end ca k(Lde/tsl2/nano/core/secure/DistinguishedName;Ljava/util/Date;Ljava/util/Date;)Ljava/security/cert/CertPath; subjectDN startDate expiringDate trustAnchors Ljava/util/Set; targetConstraints !Ljava/security/cert/CertSelector; params 'Ljava/security/cert/CertPathParameters; issuerDN subjectPublicKey LocalVariableTypeTable 1Ljava/util/Set;?
java/util/Set *Ljava/security/cert/PKIXBuilderParameters;? 0java/security/InvalidAlgorithmParameterException Signature ?(Ljava/security/KeyStore;Ljava/util/Date;Ljava/util/Set;Ljava/security/cert/CertSelector;)Ljava/security/cert/PKIXBuilderParameters; alias Ljava/util/Enumeration; ex certsAndCrls Ljava/util/ArrayList; +Ljava/util/Enumeration; 7Ljava/util/ArrayList; %Ljava/security/cert/X509CertSelector; cpb $Ljava/security/cert/CertPathBuilder; cpbResult *Ljava/security/cert/CertPathBuilderResult; cp Ljava/security/cert/CertPath; verifyCertPath cpvResult ,Ljava/security/cert/CertPathValidatorResult; cpv &Ljava/security/cert/CertPathValidator;? java/security/cert/CertPath? %java/security/cert/CertPathParameters createPublicKey )([BLjava/lang/String;)Ljava/security/Key;
pubKeySpec 'Ljava/security/spec/X509EncodedKeySpec;
keyFactory Ljava/security/KeyFactory;
encodedKey [B 9(Ljava/security/cert/Certificate;Ljava/io/OutputStream;)J 1Ljava/security/cert/CertificateEncodingException; Ljava/security/cert/Certificate; Ljava/io/OutputStream; ,(Ljava/security/Key;Ljava/io/OutputStream;)J Ljava/security/Key; (Ljava/io/InputStream;)[B data
privateKey B(Ljava/lang/String;Ljava/lang/String;Ljava/security/PrivateKey;)[B file signature Ljava/security/Signature; bufin Ljava/io/BufferedInputStream; buffer len?? java/io/InputStream? java/security/PrivateKey (Ljava/io/InputStream;[B)Z sig verifies Z java/security/PublicKey addCertificate !Ljava/security/KeyStoreException; cer setKeyStore (Ljava/security/KeyStore;)V password [C ks type is
java/lang/Throwable getKeyManagerFactory M(Ljava/security/KeyStore;Ljava/lang/String;)Ljavax/net/ssl/KeyManagerFactory; kmf !Ljavax/net/ssl/KeyManagerFactory; (Ljava/security/GeneralSecurityException; peristKeyStore ?(Ljava/security/KeyStore;Ljava/lang/String;Ljava/lang/String;)V 7()Ljava/util/Map; main ([Ljava/lang/String;)V args [Ljava/lang/String; am Lde/tsl2/nano/core/Argumentator;
lambda$main$0 *(Ljava/util/Properties;)Ljava/lang/Object; a Ljava/util/Properties;
SourceFile PKI.java BootstrapMethods%
&'( 3) $java/lang/invoke/StringConcatFactory ?(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite;+ Adding - build passed, path contents: / signature verifies: 1 keystore created: 3
456 78 "java/lang/invoke/LambdaMetafactory metafactory ?(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodHandle;Ljava/lang/invoke/MethodType;)Ljava/lang/invoke/CallSite;: &(Ljava/lang/Object;)Ljava/lang/Object;<
= @ finished successfull! InnerClassesC %java/lang/invoke/MethodHandles$LookupE java/lang/invoke/MethodHandles Lookup !
? ? ) * ] * ? * ? * % ? ? Q *? Y+? ,? ? ?
? ?? ?? w? ? ? Q *? Y+? ,? ? ?
? ?? ?? w? ? i *? *+? *,? ? *? ? ! ? ? ? ? ? ? ?? ??
3 4 ? ? '? +? ? ?? 9 ? 8 ? ~ ? 1M,+? 5?M,? ;W?
9 ? ? ?
? ? ?? * ?? ?? ?? ?? ? J 9 7? ? ? ?,? A:? EY? G:? HY? J:? HY? K ? Oia? Q:? TY? V: ? YY@? [Y? ]? ^:
? aY+? c: f ? hl? nY
? p? hs ? hu ? hv? xY,? z? ~? h?? ?Y? ?? h?? ?: ?? ?Y ? ?? h? ?Y? ?:
? ?
?? ?? ?: ? ? h? ?Y? ?:
? ?
? ? Z ? ? ? ? - ? : ? L ? V ? _ ? o ? x ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?? ? ??? ?? * ?? ??? ?? * ??? ? %? ??? - ??? : ??? L ???
V ??? ? P?? ? 5??
? ?? ?? ? ; *++? ?? ? ?? ?? ?? ? ? ? ? ,? ?+? ?? ? ? ?+,? ?? ??N? ? ? ? ? ? ? ? ?? * ?? ?? ?? ?? ? I ? ? ? ? t ? 1L+*? °L+? ;W?
9 ? ? ?
? ? ?? ?? ?? ?? ? J 9 ?? ? _ **? ?+*? ,-*? ? z? ʰ ? ?? * ?? ? ?? ?? ? ? ?
H-? ? ?Y-? ?? Ӹ ֧
? ?Y? ?:,-? ?:+? ?: ? ?:? ;W? = > ? ? " ! , 8 > @
F ? p ! ?? , ?? 8 ?? @ ?? H?? H ? ? H? H? H?? H?? H?? ? ! ?? ? F?^ ? ? ? ? ? ;? ?Y,-? ?:? ?+? ?*?
? ?Y?? ??? ?Y*? ?S??? ? % 8? 4 ; ? ? ;?? ;?? ;?? 0?? ? ;?? ? ? % ?? ?? ?
? 1 c? Y?L*?M,? ? 9,? ? N*-?!? ?:? ?%)?+?1 ?4 +?7W???:??A?M,? ;W? Z [ ? ? 2
! *" B# I$ L% [& \' a(? > )? * * ??
N? \ ?? c ? ? [?? ?
N? [?? ? ?
>? ? ? ? ? ? :?DY?F:+? +?G?J*?G?N-?Q,?T?YT?W? ? " / 0
1 2 3 %4 +6 77? 4 :? :? :?? :?? 1?? ? ? D ? ? ? ? ,?[?^L+*?cM,?g N? -?m ?4 -?L+? ;W? # $ ? ? " = >
? @ "A $B %C *D? 4 ??
?? ?? % ?? ,?? ? d ? ?x ? ? M?[?pM,*+?uN-?N-? ;W? ? ? J L N O P Q R? 4 ?? ?? ?? ?? ?? ? ? ??q ? ?? ? ? ?yY*?{M+?~N-,???M,? ;W? ? ? _ ` a b c d? 4 ?? ?? ?? ?? ? * ? T ? ?? ? y ??Y*????+???M,? ;W?? ? ? j k l m? ?? ?? V? ? Q? ?? ? G ??Y*?? ??+??? ? r? w? V? ?? ? A
*+*? ? A??? ? |?
??
?? ?? ? G +??,??? ? ?? ?? ?? ?? ?? ? H
*??+,??? ? ??
? *
? *
?? ?? ? F+??N-,????Y*??: ?:??Y6? -???????-?ðN-? ;W? = > ? ? . ? ?
? ? ? (? 4? 9? >? ?? D?? R 9?? *?? #?? % ?? ? ?? F?? F? * F?? ? % ? ???? ? ? ? ? ?? ? N +,*? ? z???Ŭ ? ?? ?? ?? ?? ?? ? O d-??:,?Ȼ?Y*??: ?:?˙ ??6???????+??6? ?? ? ! ?:? ;W? Y Z ? ? : ? ? ? ? ? %? .? ;? @? H? W? Z? \? b?? f
.
?? T?? D?? =?? H ?? \ ?? d?? d?? d w? d? * ? % ? ??? ? ??? ? ? ? ? !*? ??
*?յ ?*? ?+,?٧ N-? ;W? ? ? ? ? ? ? ? ? ?? * ? !?? !? * !? ? K? ? > *+? Ʊ ?
? ?? ?? ? ? ?? ? ?߰ ? ? ?? ? = ??*+?? ? ?? ? * ?? ? ? N*??:+? (??Y+???? ??Y+??N? ????+??N-,?? ? ?4 :-? -?
W?:? ;W:-? -?
W?:-? -?
W? K X ? K p X c p p r p ? V ? ? ? ? ? &? 1? 8? G? K? O? U? X? Z? `? c? g? m? p? v? |?? > P ? Z ?? * ? * }
? ? O ? &?
? #? ? ?? ?? ? ? ? ? ?
?M,*+??,?M,? ;W? ? ? ? * ? ? * ? R? ? ? *?!Y+?#,??$? N-? ;W? ? ? ? * ?? ? ? ? * * ? S ? ? c 9*?(?
Y,SY*? SY.SY? 'SY?[SY??SY??S?0? ? ? 9?? MN ? E -?
Y5SY7SY9SY;SY=SY?S?A? ? $? ? X ?GYI?K*?OL+?R?X ?\? ? * + 3?
? 5 ?`?e ? ? 1? ? a 9?f? ln?p? 'tv?p?[xz?p??|~?p??? ? w } ~ , ? ! "# * $ *$ ,$ .$ 02 9;>$ ?A
BDF © 2015 - 2025 Weber Informatics LLC | Privacy Policy