org.bouncycastle.jce.provider.ProvOcspRevocationChecker Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of org.apache.servicemix.bundles.bcprov-jdk15on
Show all versions of org.apache.servicemix.bundles.bcprov-jdk15on
This OSGi bundle wraps ${pkgArtifactId} ${pkgVersion} jar file.
package org.bouncycastle.jce.provider;
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.net.URI;
import java.net.URISyntaxException;
import java.security.GeneralSecurityException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.PublicKey;
import java.security.Signature;
import java.security.cert.CertPathValidatorException;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
import java.security.cert.Extension;
import java.security.cert.X509Certificate;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.Set;
import org.bouncycastle.asn1.ASN1Encodable;
import org.bouncycastle.asn1.ASN1Encoding;
import org.bouncycastle.asn1.ASN1GeneralizedTime;
import org.bouncycastle.asn1.ASN1Integer;
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.bouncycastle.asn1.ASN1OctetString;
import org.bouncycastle.asn1.ASN1Sequence;
import org.bouncycastle.asn1.ASN1String;
import org.bouncycastle.asn1.DERNull;
import org.bouncycastle.asn1.DEROctetString;
import org.bouncycastle.asn1.bsi.BSIObjectIdentifiers;
import org.bouncycastle.asn1.cryptopro.CryptoProObjectIdentifiers;
import org.bouncycastle.asn1.eac.EACObjectIdentifiers;
import org.bouncycastle.asn1.isara.IsaraObjectIdentifiers;
import org.bouncycastle.asn1.nist.NISTObjectIdentifiers;
import org.bouncycastle.asn1.ocsp.BasicOCSPResponse;
import org.bouncycastle.asn1.ocsp.CertID;
import org.bouncycastle.asn1.ocsp.OCSPObjectIdentifiers;
import org.bouncycastle.asn1.ocsp.OCSPResponse;
import org.bouncycastle.asn1.ocsp.OCSPResponseStatus;
import org.bouncycastle.asn1.ocsp.ResponderID;
import org.bouncycastle.asn1.ocsp.ResponseBytes;
import org.bouncycastle.asn1.ocsp.ResponseData;
import org.bouncycastle.asn1.ocsp.RevokedInfo;
import org.bouncycastle.asn1.ocsp.SingleResponse;
import org.bouncycastle.asn1.oiw.OIWObjectIdentifiers;
import org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers;
import org.bouncycastle.asn1.pkcs.RSASSAPSSparams;
import org.bouncycastle.asn1.rosstandart.RosstandartObjectIdentifiers;
import org.bouncycastle.asn1.x500.X500Name;
import org.bouncycastle.asn1.x500.style.BCStrictStyle;
import org.bouncycastle.asn1.x509.AccessDescription;
import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
import org.bouncycastle.asn1.x509.AuthorityInformationAccess;
import org.bouncycastle.asn1.x509.CRLReason;
import org.bouncycastle.asn1.x509.Extensions;
import org.bouncycastle.asn1.x509.GeneralName;
import org.bouncycastle.asn1.x509.KeyPurposeId;
import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
import org.bouncycastle.asn1.x9.X9ObjectIdentifiers;
import org.bouncycastle.jcajce.PKIXCertRevocationChecker;
import org.bouncycastle.jcajce.PKIXCertRevocationCheckerParameters;
import org.bouncycastle.jcajce.util.JcaJceHelper;
import org.bouncycastle.jcajce.util.MessageDigestUtils;
import org.bouncycastle.jce.exception.ExtCertPathValidatorException;
import org.bouncycastle.util.Arrays;
import org.bouncycastle.util.Properties;
class ProvOcspRevocationChecker
implements PKIXCertRevocationChecker
{
private static final int DEFAULT_OCSP_TIMEOUT = 15000;
private static final int DEFAULT_OCSP_MAX_RESPONSE_SIZE = 32 * 1024;
private static final Map oids = new HashMap();
static
{
//
// reverse mappings
//
oids.put(new ASN1ObjectIdentifier("1.2.840.113549.1.1.5"), "SHA1WITHRSA");
oids.put(PKCSObjectIdentifiers.sha224WithRSAEncryption, "SHA224WITHRSA");
oids.put(PKCSObjectIdentifiers.sha256WithRSAEncryption, "SHA256WITHRSA");
oids.put(PKCSObjectIdentifiers.sha384WithRSAEncryption, "SHA384WITHRSA");
oids.put(PKCSObjectIdentifiers.sha512WithRSAEncryption, "SHA512WITHRSA");
oids.put(CryptoProObjectIdentifiers.gostR3411_94_with_gostR3410_94, "GOST3411WITHGOST3410");
oids.put(CryptoProObjectIdentifiers.gostR3411_94_with_gostR3410_2001, "GOST3411WITHECGOST3410");
oids.put(RosstandartObjectIdentifiers.id_tc26_signwithdigest_gost_3410_12_256, "GOST3411-2012-256WITHECGOST3410-2012-256");
oids.put(RosstandartObjectIdentifiers.id_tc26_signwithdigest_gost_3410_12_512, "GOST3411-2012-512WITHECGOST3410-2012-512");
oids.put(BSIObjectIdentifiers.ecdsa_plain_SHA1, "SHA1WITHPLAIN-ECDSA");
oids.put(BSIObjectIdentifiers.ecdsa_plain_SHA224, "SHA224WITHPLAIN-ECDSA");
oids.put(BSIObjectIdentifiers.ecdsa_plain_SHA256, "SHA256WITHPLAIN-ECDSA");
oids.put(BSIObjectIdentifiers.ecdsa_plain_SHA384, "SHA384WITHPLAIN-ECDSA");
oids.put(BSIObjectIdentifiers.ecdsa_plain_SHA512, "SHA512WITHPLAIN-ECDSA");
oids.put(BSIObjectIdentifiers.ecdsa_plain_RIPEMD160, "RIPEMD160WITHPLAIN-ECDSA");
oids.put(EACObjectIdentifiers.id_TA_ECDSA_SHA_1, "SHA1WITHCVC-ECDSA");
oids.put(EACObjectIdentifiers.id_TA_ECDSA_SHA_224, "SHA224WITHCVC-ECDSA");
oids.put(EACObjectIdentifiers.id_TA_ECDSA_SHA_256, "SHA256WITHCVC-ECDSA");
oids.put(EACObjectIdentifiers.id_TA_ECDSA_SHA_384, "SHA384WITHCVC-ECDSA");
oids.put(EACObjectIdentifiers.id_TA_ECDSA_SHA_512, "SHA512WITHCVC-ECDSA");
oids.put(IsaraObjectIdentifiers.id_alg_xmss, "XMSS");
oids.put(IsaraObjectIdentifiers.id_alg_xmssmt, "XMSSMT");
oids.put(new ASN1ObjectIdentifier("1.2.840.113549.1.1.4"), "MD5WITHRSA");
oids.put(new ASN1ObjectIdentifier("1.2.840.113549.1.1.2"), "MD2WITHRSA");
oids.put(new ASN1ObjectIdentifier("1.2.840.10040.4.3"), "SHA1WITHDSA");
oids.put(X9ObjectIdentifiers.ecdsa_with_SHA1, "SHA1WITHECDSA");
oids.put(X9ObjectIdentifiers.ecdsa_with_SHA224, "SHA224WITHECDSA");
oids.put(X9ObjectIdentifiers.ecdsa_with_SHA256, "SHA256WITHECDSA");
oids.put(X9ObjectIdentifiers.ecdsa_with_SHA384, "SHA384WITHECDSA");
oids.put(X9ObjectIdentifiers.ecdsa_with_SHA512, "SHA512WITHECDSA");
oids.put(OIWObjectIdentifiers.sha1WithRSA, "SHA1WITHRSA");
oids.put(OIWObjectIdentifiers.dsaWithSHA1, "SHA1WITHDSA");
oids.put(NISTObjectIdentifiers.dsa_with_sha224, "SHA224WITHDSA");
oids.put(NISTObjectIdentifiers.dsa_with_sha256, "SHA256WITHDSA");
}
private final ProvRevocationChecker parent;
private final JcaJceHelper helper;
private PKIXCertRevocationCheckerParameters parameters;
private boolean isEnabledOCSP;
private String ocspURL;
public ProvOcspRevocationChecker(ProvRevocationChecker parent, JcaJceHelper helper)
{
this.parent = parent;
this.helper = helper;
}
public void setParameter(String name, Object value)
{
}
public void initialize(PKIXCertRevocationCheckerParameters parameters)
{
this.parameters = parameters;
this.isEnabledOCSP = Properties.isOverrideSet("ocsp.enable");
this.ocspURL = Properties.getPropertyValue("ocsp.responderURL");
}
public List getSoftFailExceptions()
{
return null;
}
public void init(boolean forForward)
throws CertPathValidatorException
{
if (forForward)
{
throw new CertPathValidatorException("forward checking not supported");
}
}
public boolean isForwardCheckingSupported()
{
return false;
}
public Set getSupportedExtensions()
{
return null;
}
public void check(Certificate certificate)
throws CertPathValidatorException
{
X509Certificate cert = (X509Certificate)certificate;
Map ocspResponses = parent.getOcspResponses();
URI ocspUri = parent.getOcspResponder();
if (ocspUri == null)
{
if (this.ocspURL != null)
{
try
{
ocspUri = new URI(this.ocspURL);
}
catch (URISyntaxException e)
{
throw new CertPathValidatorException("configuration error: " + e.getMessage(),
e, parameters.getCertPath(), parameters.getIndex());
}
}
else
{
ocspUri = getOcspResponderURI(cert);
}
}
byte[] nonce = null;
boolean preValidated = false;
if (ocspResponses.get(cert) == null && ocspUri != null)
{
// if we're here we need to make a network access, if we haven't been given a URL explicitly block it.
if (ocspURL == null
&& parent.getOcspResponder() == null
&& !isEnabledOCSP)
{
throw new RecoverableCertPathValidatorException("OCSP disabled by \"ocsp.enable\" setting",
null, parameters.getCertPath(), parameters.getIndex());
}
org.bouncycastle.asn1.x509.Certificate issuer = extractCert();
// TODO: configure hash algorithm
CertID id = createCertID(new AlgorithmIdentifier(OIWObjectIdentifiers.idSHA1), issuer, new ASN1Integer(cert.getSerialNumber()));
OCSPResponse response = OcspCache.getOcspResponse(id, parameters, ocspUri, parent.getOcspResponderCert(), parent.getOcspExtensions(), helper);
try
{
ocspResponses.put(cert, response.getEncoded());
preValidated = true;
}
catch (IOException e)
{
throw new CertPathValidatorException(
"unable to encode OCSP response", e, parameters.getCertPath(), parameters.getIndex());
}
}
else
{
List exts = parent.getOcspExtensions();
for (int i = 0; i != exts.size(); i++)
{
Extension ext = (Extension)exts.get(i);
byte[] value = ext.getValue();
if (OCSPObjectIdentifiers.id_pkix_ocsp_nonce.getId().equals(ext.getId()))
{
nonce = value;
}
}
}
if (!ocspResponses.isEmpty())
{
OCSPResponse ocspResponse = OCSPResponse.getInstance(ocspResponses.get(cert));
ASN1Integer serialNumber = new ASN1Integer(cert.getSerialNumber());
if (ocspResponse != null)
{
if (OCSPResponseStatus.SUCCESSFUL == ocspResponse.getResponseStatus().getValue().intValueExact())
{
ResponseBytes respBytes = ResponseBytes.getInstance(ocspResponse.getResponseBytes());
if (respBytes.getResponseType().equals(OCSPObjectIdentifiers.id_pkix_ocsp_basic))
{
try
{
BasicOCSPResponse basicResp = BasicOCSPResponse.getInstance(respBytes.getResponse().getOctets());
if (preValidated || validatedOcspResponse(basicResp, parameters, nonce, parent.getOcspResponderCert(), helper))
{
ResponseData responseData = ResponseData.getInstance(basicResp.getTbsResponseData());
ASN1Sequence s = responseData.getResponses();
CertID certID = null;
for (int i = 0; i != s.size(); i++)
{
SingleResponse resp = SingleResponse.getInstance(s.getObjectAt(i));
if (serialNumber.equals(resp.getCertID().getSerialNumber()))
{
ASN1GeneralizedTime nextUp = resp.getNextUpdate();
if (nextUp != null && parameters.getValidDate().after(nextUp.getDate()))
{
throw new ExtCertPathValidatorException("OCSP response expired");
}
if (certID == null || !certID.getHashAlgorithm().equals(resp.getCertID().getHashAlgorithm()))
{
org.bouncycastle.asn1.x509.Certificate issuer = extractCert();
certID = createCertID(resp.getCertID(), issuer, serialNumber);
}
if (certID.equals(resp.getCertID()))
{
if (resp.getCertStatus().getTagNo() == 0)
{
// we're good!
return;
}
if (resp.getCertStatus().getTagNo() == 1)
{
RevokedInfo info = RevokedInfo.getInstance(resp.getCertStatus().getStatus());
CRLReason reason = info.getRevocationReason();
throw new CertPathValidatorException(
"certificate revoked, reason=(" + reason + "), date=" + info.getRevocationTime().getDate(),
null, parameters.getCertPath(), parameters.getIndex());
}
throw new CertPathValidatorException(
"certificate revoked, details unknown",
null, parameters.getCertPath(), parameters.getIndex());
}
}
}
}
}
catch (CertPathValidatorException e)
{
throw e;
}
catch (Exception e)
{
throw new CertPathValidatorException(
"unable to process OCSP response", e, parameters.getCertPath(), parameters.getIndex());
}
}
}
else
{
throw new CertPathValidatorException(
"OCSP response failed: " + ocspResponse.getResponseStatus().getValue(),
null, parameters.getCertPath(), parameters.getIndex());
}
}
else
{
// TODO: add checking for the OCSP extension (properly vetted)
throw new RecoverableCertPathValidatorException(
"no OCSP response found for certificate", null, parameters.getCertPath(), parameters.getIndex());
}
}
else
{
throw new RecoverableCertPathValidatorException(
"no OCSP response found for any certificate", null, parameters.getCertPath(), parameters.getIndex());
}
}
static URI getOcspResponderURI(X509Certificate cert)
{
byte[] extValue = cert.getExtensionValue(org.bouncycastle.asn1.x509.Extension.authorityInfoAccess.getId());
if (extValue == null)
{
return null;
}
else
{
AuthorityInformationAccess aiAccess = AuthorityInformationAccess.getInstance(
ASN1OctetString.getInstance(extValue).getOctets());
AccessDescription[] descriptions = aiAccess.getAccessDescriptions();
for (int i = 0; i != descriptions.length; i++)
{
AccessDescription aDesc = descriptions[i];
if (AccessDescription.id_ad_ocsp.equals(aDesc.getAccessMethod()))
{
GeneralName name = aDesc.getAccessLocation();
if (name.getTagNo() == GeneralName.uniformResourceIdentifier)
{
try
{
return new URI(((ASN1String)name.getName()).getString());
}
catch (URISyntaxException e)
{
// ignore...
}
}
}
}
return null;
}
}
static boolean validatedOcspResponse(BasicOCSPResponse basicResp, PKIXCertRevocationCheckerParameters parameters, byte[] nonce, X509Certificate responderCert, JcaJceHelper helper)
throws CertPathValidatorException
{
try
{
ASN1Sequence certs = basicResp.getCerts();
Signature sig = helper.createSignature(getSignatureName(basicResp.getSignatureAlgorithm()));
X509Certificate sigCert = getSignerCert(basicResp, parameters.getSigningCert(), responderCert, helper);
if (sigCert == null && certs == null)
{
throw new CertPathValidatorException("OCSP responder certificate not found");
}
if (sigCert != null)
{
sig.initVerify(sigCert.getPublicKey());
}
else
{
CertificateFactory cf = helper.createCertificateFactory("X.509");
X509Certificate ocspCert = (X509Certificate)cf.generateCertificate(new ByteArrayInputStream(certs.getObjectAt(0).toASN1Primitive().getEncoded()));
// check cert signed by CA
ocspCert.verify(parameters.getSigningCert().getPublicKey());
// check cert valid
ocspCert.checkValidity(parameters.getValidDate());
// check ID
if (!responderMatches(basicResp.getTbsResponseData().getResponderID(), ocspCert, helper))
{
throw new CertPathValidatorException("responder certificate does not match responderID", null,
parameters.getCertPath(), parameters.getIndex());
}
// TODO: RFC 6960 allows for a "no check" extension - where present it means the CA says the cert
// will remain valid for it's lifetime. If any caching is added here that should be taken into account.
// check we are valid
List extendedKeyUsage = ocspCert.getExtendedKeyUsage();
if (extendedKeyUsage == null || !extendedKeyUsage.contains(KeyPurposeId.id_kp_OCSPSigning.getId()))
{
throw new CertPathValidatorException("responder certificate not valid for signing OCSP responses", null,
parameters.getCertPath(), parameters.getIndex());
}
sig.initVerify(ocspCert);
}
sig.update(basicResp.getTbsResponseData().getEncoded(ASN1Encoding.DER));
if (sig.verify(basicResp.getSignature().getBytes()))
{
if (nonce != null)
{
Extensions exts = basicResp.getTbsResponseData().getResponseExtensions();
org.bouncycastle.asn1.x509.Extension ext = exts.getExtension(OCSPObjectIdentifiers.id_pkix_ocsp_nonce);
if (!Arrays.areEqual(nonce, ext.getExtnValue().getOctets()))
{
throw new CertPathValidatorException("nonce mismatch in OCSP response", null, parameters.getCertPath(), parameters.getIndex());
}
}
return true;
}
return false;
}
catch (CertPathValidatorException e)
{
throw e;
}
catch (GeneralSecurityException e)
{
throw new CertPathValidatorException("OCSP response failure: " + e.getMessage(), e, parameters.getCertPath(), parameters.getIndex());
}
catch (IOException e)
{
throw new CertPathValidatorException("OCSP response failure: " + e.getMessage(), e, parameters.getCertPath(), parameters.getIndex());
}
}
private static X509Certificate getSignerCert(BasicOCSPResponse basicResp, X509Certificate signingCert, X509Certificate responderCert, JcaJceHelper helper)
throws NoSuchProviderException, NoSuchAlgorithmException
{
ResponderID responderID = basicResp.getTbsResponseData().getResponderID();
byte[] keyHash = responderID.getKeyHash();
if (keyHash != null)
{
MessageDigest digest = helper.createMessageDigest("SHA1");
X509Certificate sigCert = responderCert;
if (sigCert != null)
{
if (Arrays.areEqual(keyHash, calcKeyHash(digest, sigCert.getPublicKey())))
{
return sigCert;
}
}
sigCert = signingCert;
if (sigCert != null)
{
if (Arrays.areEqual(keyHash, calcKeyHash(digest, sigCert.getPublicKey())))
{
return sigCert;
}
}
}
else
{
X500Name name = X500Name.getInstance(BCStrictStyle.INSTANCE, responderID.getName());
X509Certificate sigCert = responderCert;
if (sigCert != null)
{
if (name.equals(X500Name.getInstance(BCStrictStyle.INSTANCE, sigCert.getSubjectX500Principal().getEncoded())))
{
return sigCert;
}
}
sigCert = signingCert;
if (sigCert != null)
{
if (name.equals(X500Name.getInstance(BCStrictStyle.INSTANCE, sigCert.getSubjectX500Principal().getEncoded())))
{
return sigCert;
}
}
}
return null;
}
private static boolean responderMatches(ResponderID responderID, X509Certificate certificate, JcaJceHelper helper)
throws NoSuchProviderException, NoSuchAlgorithmException
{
byte[] keyHash = responderID.getKeyHash();
if (keyHash != null)
{
MessageDigest digest = helper.createMessageDigest("SHA1");
return Arrays.areEqual(keyHash, calcKeyHash(digest, certificate.getPublicKey()));
}
else
{
X500Name name = X500Name.getInstance(BCStrictStyle.INSTANCE, responderID.getName());
return name.equals(X500Name.getInstance(BCStrictStyle.INSTANCE, certificate.getSubjectX500Principal().getEncoded()));
}
}
private static byte[] calcKeyHash(MessageDigest digest, PublicKey key)
{
SubjectPublicKeyInfo info = SubjectPublicKeyInfo.getInstance(key.getEncoded());
return digest.digest(info.getPublicKeyData().getBytes());
}
private org.bouncycastle.asn1.x509.Certificate extractCert()
throws CertPathValidatorException
{
try
{
return org.bouncycastle.asn1.x509.Certificate.getInstance(parameters.getSigningCert().getEncoded());
}
catch (Exception e)
{
throw new CertPathValidatorException("cannot process signing cert: " + e.getMessage(), e, parameters.getCertPath(), parameters.getIndex());
}
}
private CertID createCertID(CertID base, org.bouncycastle.asn1.x509.Certificate issuer, ASN1Integer serialNumber)
throws CertPathValidatorException
{
return createCertID(base.getHashAlgorithm(), issuer, serialNumber);
}
private CertID createCertID(AlgorithmIdentifier digestAlg, org.bouncycastle.asn1.x509.Certificate issuer, ASN1Integer serialNumber)
throws CertPathValidatorException
{
try
{
MessageDigest digest = helper.createMessageDigest(MessageDigestUtils.getDigestName(digestAlg.getAlgorithm()));
ASN1OctetString issuerNameHash = new DEROctetString(digest.digest(issuer.getSubject().getEncoded(ASN1Encoding.DER)));
ASN1OctetString issuerKeyHash = new DEROctetString(digest.digest(
issuer.getSubjectPublicKeyInfo().getPublicKeyData().getBytes()));
return new CertID(digestAlg, issuerNameHash, issuerKeyHash, serialNumber);
}
catch (Exception e)
{
throw new CertPathValidatorException("problem creating ID: " + e, e);
}
}
// we need to remove the - to create a correct signature name
private static String getDigestName(ASN1ObjectIdentifier oid)
{
String name = MessageDigestUtils.getDigestName(oid);
int dIndex = name.indexOf('-');
if (dIndex > 0 && !name.startsWith("SHA3"))
{
return name.substring(0, dIndex) + name.substring(dIndex + 1);
}
return name;
}
private static String getSignatureName(
AlgorithmIdentifier sigAlgId)
{
ASN1Encodable params = sigAlgId.getParameters();
if (params != null && !DERNull.INSTANCE.equals(params))
{
if (sigAlgId.getAlgorithm().equals(PKCSObjectIdentifiers.id_RSASSA_PSS))
{
RSASSAPSSparams rsaParams = RSASSAPSSparams.getInstance(params);
return getDigestName(rsaParams.getHashAlgorithm().getAlgorithm()) + "WITHRSAANDMGF1";
}
}
if (oids.containsKey(sigAlgId.getAlgorithm()))
{
return (String)oids.get(sigAlgId.getAlgorithm());
}
return sigAlgId.getAlgorithm().getId();
}
}