com.tencent.kona.sun.security.pkcs

Class SignerInfo

java.lang.Object

com.tencent.kona.sun.security.pkcs.SignerInfo

All Implemented Interfaces:

com.tencent.kona.sun.security.util.DerEncoder

public class SignerInfo
extends java.lang.Object
implements com.tencent.kona.sun.security.util.DerEncoder

A SignerInfo, as defined in PKCS#7's signedData type.

Constructor Summary

Constructors

Constructor and Description
SignerInfo(com.tencent.kona.sun.security.util.DerInputStream derin) Parses a PKCS#7 signer info.
SignerInfo(com.tencent.kona.sun.security.util.DerInputStream derin, boolean oldStyle) Parses a PKCS#7 signer info.
SignerInfo(X500Name issuerName, java.math.BigInteger serial, com.tencent.kona.sun.security.x509.AlgorithmId digestAlgorithmId, com.tencent.kona.sun.security.x509.AlgorithmId digestEncryptionAlgorithmId, byte[] encryptedDigest)
SignerInfo(X500Name issuerName, java.math.BigInteger serial, com.tencent.kona.sun.security.x509.AlgorithmId digestAlgorithmId, PKCS9Attributes authenticatedAttributes, com.tencent.kona.sun.security.x509.AlgorithmId digestEncryptionAlgorithmId, byte[] encryptedDigest, PKCS9Attributes unauthenticatedAttributes)

Method Summary

Modifier and Type	Method and Description
void	encode(com.tencent.kona.sun.security.util.DerOutputStream out) DER encode this object onto an output stream.
PKCS9Attributes	getAuthenticatedAttributes()
java.security.cert.X509Certificate	getCertificate(PKCS7 block)
java.util.ArrayList<java.security.cert.X509Certificate>	getCertificateChain(PKCS7 block)
java.math.BigInteger	getCertificateSerialNumber()
com.tencent.kona.sun.security.x509.AlgorithmId	getDigestAlgorithmId()
com.tencent.kona.sun.security.x509.AlgorithmId	getDigestEncryptionAlgorithmId()
byte[]	getEncryptedDigest()
X500Name	getIssuerName()
java.security.Timestamp	getTimestamp()
PKCS7	getTsToken() Returns the timestamp PKCS7 data unverified.
PKCS9Attributes	getUnauthenticatedAttributes()
java.math.BigInteger	getVersion()
static java.lang.String	makeSigAlg(com.tencent.kona.sun.security.x509.AlgorithmId digAlgId, com.tencent.kona.sun.security.x509.AlgorithmId encAlgId, boolean directSign) Derives the signature algorithm name from the digest algorithm and the encryption algorithm inside a PKCS7 SignerInfo.
java.lang.String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

SignerInfo

public SignerInfo(X500Name issuerName,
                  java.math.BigInteger serial,
                  com.tencent.kona.sun.security.x509.AlgorithmId digestAlgorithmId,
                  com.tencent.kona.sun.security.x509.AlgorithmId digestEncryptionAlgorithmId,
                  byte[] encryptedDigest)

SignerInfo

public SignerInfo(X500Name issuerName,
                  java.math.BigInteger serial,
                  com.tencent.kona.sun.security.x509.AlgorithmId digestAlgorithmId,
                  PKCS9Attributes authenticatedAttributes,
                  com.tencent.kona.sun.security.x509.AlgorithmId digestEncryptionAlgorithmId,
                  byte[] encryptedDigest,
                  PKCS9Attributes unauthenticatedAttributes)

SignerInfo

public SignerInfo(com.tencent.kona.sun.security.util.DerInputStream derin)
           throws java.io.IOException

Parses a PKCS#7 signer info.

Throws:

java.io.IOException

SignerInfo

public SignerInfo(com.tencent.kona.sun.security.util.DerInputStream derin,
                  boolean oldStyle)
           throws java.io.IOException

Parses a PKCS#7 signer info.

This constructor is used only for backwards compatibility with PKCS#7 blocks that were generated using JDK1.1.x.

Parameters:

derin - the ASN.1 encoding of the signer info.

oldStyle - flag indicating whether the given signer info is encoded according to JDK1.1.x.

Throws:

java.io.IOException

Method Detail

encode

public void encode(com.tencent.kona.sun.security.util.DerOutputStream out)

DER encode this object onto an output stream. Implements the DerEncoder interface.

Specified by:

encode in interface com.tencent.kona.sun.security.util.DerEncoder

Parameters:

out - the output stream on which to write the DER encoding.

getCertificate

public java.security.cert.X509Certificate getCertificate(PKCS7 block)
                                                  throws java.io.IOException

Throws:

java.io.IOException

getCertificateChain

public java.util.ArrayList<java.security.cert.X509Certificate> getCertificateChain(PKCS7 block)
                                                                            throws java.io.IOException

Throws:

java.io.IOException

makeSigAlg

public static java.lang.String makeSigAlg(com.tencent.kona.sun.security.x509.AlgorithmId digAlgId,
                                          com.tencent.kona.sun.security.x509.AlgorithmId encAlgId,
                                          boolean directSign)
                                   throws java.security.NoSuchAlgorithmException

Derives the signature algorithm name from the digest algorithm and the encryption algorithm inside a PKCS7 SignerInfo. The digest algorithm is in the form "DIG", and the encryption algorithm can be in any of the 3 forms: 1. Old style key algorithm like RSA, DSA, EC, this method returns DIGwithKEY. 2. New style signature algorithm in the form of HASHwithKEY, this method returns DIGwithKEY. Please note this is not HASHwithKEY. 3. Modern signature algorithm like RSASSA-PSS and EdDSA, this method returns the signature algorithm itself but ensures digAlgId is compatible with the algorithm as described in RFC 4056 and 8419.

Parameters:

digAlgId - the digest algorithm

encAlgId - the encryption algorithm

directSign - whether the signature is calculated on the content directly. This makes difference for Ed448.

Throws:

java.security.NoSuchAlgorithmException

getVersion

public java.math.BigInteger getVersion()

getIssuerName

public X500Name getIssuerName()

getCertificateSerialNumber

public java.math.BigInteger getCertificateSerialNumber()

getDigestAlgorithmId

public com.tencent.kona.sun.security.x509.AlgorithmId getDigestAlgorithmId()

getAuthenticatedAttributes

public PKCS9Attributes getAuthenticatedAttributes()

getDigestEncryptionAlgorithmId

public com.tencent.kona.sun.security.x509.AlgorithmId getDigestEncryptionAlgorithmId()

getEncryptedDigest

public byte[] getEncryptedDigest()

getUnauthenticatedAttributes

public PKCS9Attributes getUnauthenticatedAttributes()

getTsToken

public PKCS7 getTsToken()
                 throws java.io.IOException

Returns the timestamp PKCS7 data unverified.

Returns:

a PKCS7 object

Throws:

java.io.IOException

getTimestamp

public java.security.Timestamp getTimestamp()
                                     throws java.io.IOException,
                                            java.security.NoSuchAlgorithmException,
                                            java.security.SignatureException,
                                            java.security.cert.CertificateException

Throws:

java.io.IOException

java.security.NoSuchAlgorithmException

java.security.SignatureException

java.security.cert.CertificateException

toString

public java.lang.String toString()

Overrides:

toString in class java.lang.Object