org.osgi.framework.SignerProperty Maven / Gradle / Ivy
/*
* Copyright (c) OSGi Alliance (2009, 2012). All Rights Reserved.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.osgi.framework;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.List;
import java.util.Map;
/**
* Package private class used by permissions for filter matching on signer key
* during filter expression evaluation in the permission implies method.
*
* @Immutable
* @version $Id: 94eea19050b84907f1257d7a12ebf8ab404f4473 $
*/
final class SignerProperty {
private final Bundle bundle;
private final String pattern;
/**
* String constructor used by the filter matching algorithm to construct a
* SignerProperty from the attribute value in a filter expression.
*
* @param pattern Attribute value in the filter expression.
*/
public SignerProperty(String pattern) {
this.pattern = pattern;
this.bundle = null;
}
/**
* Used by the permission implies method to build the properties for a
* filter match.
*
* @param bundle The bundle whose signers are to be matched.
*/
SignerProperty(Bundle bundle) {
this.bundle = bundle;
this.pattern = null;
}
/**
* Used by the filter matching algorithm. This methods does NOT satisfy the
* normal equals contract. Since the class is only used in filter expression
* evaluations, it only needs to support comparing an instance created with
* a Bundle to an instance created with a pattern string from the filter
* expression.
*
* @param o SignerProperty to compare against.
* @return true if the DN name chain matches the pattern.
*/
public boolean equals(Object o) {
if (!(o instanceof SignerProperty))
return false;
SignerProperty other = (SignerProperty) o;
Bundle matchBundle = bundle != null ? bundle : other.bundle;
String matchPattern = bundle != null ? other.pattern : pattern;
Map> signers = matchBundle.getSignerCertificates(Bundle.SIGNERS_TRUSTED);
for (List signerCerts : signers.values()) {
List dnChain = new ArrayList(signerCerts.size());
for (X509Certificate signerCert : signerCerts) {
dnChain.add(signerCert.getSubjectDN().getName());
}
try {
if (FrameworkUtil.matchDistinguishedNameChain(matchPattern, dnChain)) {
return true;
}
} catch (IllegalArgumentException e) {
continue; // bad pattern
}
}
return false;
}
/**
* Since the equals method does not obey the general equals contract, this
* method cannot generate hash codes which obey the equals contract.
*/
public int hashCode() {
return 31;
}
/**
* Check if the bundle is signed.
*
* @return true if constructed with a bundle that is signed.
*/
boolean isBundleSigned() {
if (bundle == null) {
return false;
}
Map> signers = bundle.getSignerCertificates(Bundle.SIGNERS_TRUSTED);
return !signers.isEmpty();
}
}