javax.xml.crypto.KeySelectorResult Java Examples

/**
 * Searches the specified keystore for a certificate that matches the
 * specified X509Certificate and contains a public key that is compatible
 * with the specified SignatureMethod.
 *
 * @return a KeySelectorResult containing the cert's public key if there
 *         is a match; otherwise null
 */
private KeySelectorResult certSelect(X509Certificate xcert,
                                     SignatureMethod sm) throws KeyStoreException {
    // skip non-signer certs
    boolean[] keyUsage = xcert.getKeyUsage();
    if (!keyUsage[0]) {
        return null;
    }
    String alias = ks.getCertificateAlias(xcert);
    if (alias != null) {
        PublicKey pk = ks.getCertificate(alias).getPublicKey();
        // make sure algorithm is compatible with method
        if (algEquals(sm.getAlgorithm(), pk.getAlgorithm())) {
            return new SimpleKeySelectorResult(pk);
        }
    }
    return null;
}
 

@Override
public KeySelectorResult select(KeyInfo keyInfo, KeySelector.Purpose purpose, AlgorithmMethod method, XMLCryptoContext context) throws KeySelectorException {
    try {
        KeyName keyNameEl = KeyInfoTools.getKeyName(keyInfo);
        this.keyName = keyNameEl == null ? null : keyNameEl.getName();
        final Key key = locator.getKey(keyName);
        this.keyLocated = key != null;
        return new KeySelectorResult() {
            @Override public Key getKey() {
                return key;
            }
        };
    } catch (KeyManagementException ex) {
        throw new KeySelectorException(ex);
    }

}
 

public KeySelectorResult select(KeyInfo keyInfo, KeySelector.Purpose purpose, 
		AlgorithmMethod method, XMLCryptoContext context) throws KeySelectorException {
	if (keyInfo == null)
		throw new KeySelectorException("Null KeyInfo");
	List<?> list = keyInfo.getContent();
	PublicKey pk = null;

	for (int i = 0; i < list.size(); i++) {
		XMLStructure xmlStructure = (XMLStructure) list.get(i);
		if (xmlStructure instanceof KeyValue) {
			try {
				pk = ((KeyValue)xmlStructure).getPublicKey();
			} catch(KeyException ke) {
				throw new KeySelectorException(ke.getMessage());
			}
			break;
		} else if (xmlStructure instanceof X509Data) {
			X509Data x509data = (X509Data)xmlStructure;
			List<?> x509datalist = x509data.getContent();
			for (int j = 0; j < x509datalist.size(); j++) {
				if (x509datalist.get(j) instanceof X509Certificate) {
					X509Certificate cert = (X509Certificate)x509datalist.get(j);
					pk = cert.getPublicKey();
					break;
				}
			}
		}
	}
	if (pk != null) {
		final PublicKey retpk = pk;
		logger.debug("PublicKey from XML=" + pk);
		return new KeySelectorResult() {public Key getKey(){return retpk;}};
	}
	throw new KeySelectorException("Missing KeyValue");
}
 

@Override
public KeySelectorResult select(KeyInfo keyInfo,
        KeySelector.Purpose purpose, AlgorithmMethod algorithmMethod,
        XMLCryptoContext context) throws KeySelectorException {

    if (keyInfo == null) {
        throw new KeySelectorException("Null KeyInfo object!");
    }

    @SuppressWarnings("unchecked")
    List<XMLStructure> list = keyInfo.getContent();
    for (XMLStructure xmlStructure : list) {
        if (xmlStructure instanceof X509Data) {
            X509Data x509Data = (X509Data) xmlStructure;
            @SuppressWarnings("rawtypes")
            List content = x509Data.getContent();
            for (int i = 0; i < content.size(); i++) {
                Object x509Content = content.get(i);
                if (x509Content instanceof X509Certificate) {
                    X509Certificate certificate = (X509Certificate) x509Content;
                    try {
                        return getPublicKeyFromKeystore(certificate,
                                (SignatureMethod) algorithmMethod);
                    } catch (KeyStoreException e) {
                        throw new KeySelectorException(e);
                    }
                }
            }
        }
    }

    throw new KeySelectorException("No X509Data element found.");
}
 

KeySelectorResult getPublicKeyFromKeystore(X509Certificate certificate,
        SignatureMethod signatureMethod) throws KeyStoreException,
        KeySelectorException {

    isSigningCertificate(certificate);
    return searchInKeystore(certificate, signatureMethod);
}
 

KeySelectorResult searchInKeystore(X509Certificate certificate,
        SignatureMethod signatureMethod) throws KeyStoreException,
        KeySelectorException {
    String alias = keystore.getCertificateAlias(certificate);
    if (alias != null) {
        PublicKey pk = keystore.getCertificate(alias).getPublicKey();
        if (algorithmCompatibleWithMethod(signatureMethod.getAlgorithm(),
                pk.getAlgorithm())) {
            return new SimpleKeySelectorResult(pk);
        }
    }
    throw new KeySelectorException(
            "X509 content is not a signing certificate");
}
 

@Override
public KeySelectorResult select(KeyInfo keyInfo,
        KeySelector.Purpose purpose, AlgorithmMethod algorithmMethod,
        XMLCryptoContext context) throws KeySelectorException {

    if (keyInfo == null) {
        throw new KeySelectorException("Null KeyInfo object!");
    }

    @SuppressWarnings("unchecked")
    List<XMLStructure> list = keyInfo.getContent();
    for (XMLStructure xmlStructure : list) {
        if (xmlStructure instanceof KeyValue) {
            PublicKey publicKey = null;
            try {
                publicKey = ((KeyValue) xmlStructure).getPublicKey();
            } catch (KeyException ke) {
                throw new KeySelectorException(ke);
            }
            if (algorithmCompatibleWithMethod(
                    algorithmMethod.getAlgorithm(),
                    publicKey.getAlgorithm())) {
                return new SimpleKeySelectorResult(publicKey);
            }
        }
    }

    throw new KeySelectorException("No RSA/DSA KeyValue element found");
}
 

public KeySelectorResult select(KeyInfo keyInfo,
                                  KeySelector.Purpose purpose,
                                  AlgorithmMethod method,
                                  XMLCryptoContext context)
      throws KeySelectorException {
      @SuppressWarnings("rawtypes")
Iterator ki = keyInfo.getContent().iterator();
      while (ki.hasNext()) {
          XMLStructure info = (XMLStructure) ki.next();
          if (!(info instanceof X509Data))
              continue;
          X509Data x509Data = (X509Data) info;
          @SuppressWarnings("rawtypes")
	Iterator xi = x509Data.getContent().iterator();
          while (xi.hasNext()) {
              Object o = xi.next();
              if (!(o instanceof X509Certificate))
                  continue;
              final PublicKey key = ((X509Certificate)o).getPublicKey();
              // Make sure the algorithm is compatible
              // with the method.
              if (algEquals(method.getAlgorithm(), key.getAlgorithm())) {
                  return new KeySelectorResult() {
                      public Key getKey() { return key; }
                  };
              }
          }
      }
      throw new KeySelectorException("No key found!");
  }
 

@Override
public KeySelectorResult select ( final KeyInfo keyInfo, final KeySelector.Purpose purpose, final AlgorithmMethod method, final XMLCryptoContext context ) throws KeySelectorException
{
    if ( keyInfo == null )
    {
        throw new KeySelectorException ( "Null KeyInfo object!" );
    }

    final SignatureMethod sm = (SignatureMethod)method;
    final List<?> list = keyInfo.getContent ();

    for ( final Object l : list )
    {
        final XMLStructure xmlStructure = (XMLStructure)l;
        if ( xmlStructure instanceof X509Data )
        {
            for ( final Object o : ( (X509Data)xmlStructure ).getContent () )
            {
                KeySelectorResult result = null;
                if ( o instanceof X509Certificate )
                {
                    result = findPublicKey ( (X509Certificate)o, sm );
                }

                if ( result != null )
                {
                    return result;
                }
            }
        }
    }
    throw new KeySelectorException ( "No KeyValue element found!" );
}
 

@Override
public KeySelectorResult select ( final KeyInfo keyInfo, final KeySelector.Purpose purpose, final AlgorithmMethod method, final XMLCryptoContext context ) throws KeySelectorException
{
    if ( keyInfo == null )
    {
        throw new KeySelectorException ( "Null KeyInfo object!" );
    }

    final SignatureMethod sm = (SignatureMethod)method;
    final List<?> list = keyInfo.getContent ();

    for ( int i = 0; i < list.size (); i++ )
    {
        final XMLStructure xmlStructure = (XMLStructure)list.get ( i );
        if ( xmlStructure instanceof KeyValue )
        {
            try
            {
                final PublicKey pk = ( (KeyValue)xmlStructure ).getPublicKey ();
                // make sure algorithm is compatible with method
                if ( algEquals ( sm.getAlgorithm (), pk.getAlgorithm () ) )
                {
                    return new SimpleKeySelectorResult ( pk );
                }
            }
            catch ( final KeyException ke )
            {
                throw new KeySelectorException ( ke );
            }

        }
    }
    throw new KeySelectorException ( "No KeyValue element found!" );
}
 

@SuppressWarnings("rawtypes")
@Override
public final KeySelectorResult select(
        final KeyInfo keyInfoToUse,
        final KeySelector.Purpose purpose,
        final AlgorithmMethod method,
        final XMLCryptoContext context) throws KeySelectorException {
    Iterator ki = keyInfoToUse.getContent().iterator();
    while (ki.hasNext()) {
        XMLStructure info = (XMLStructure) ki.next();
        if (!(info instanceof X509Data)) {
            continue;
        }
        X509Data x509Data = (X509Data) info;
        Iterator xi = x509Data.getContent().iterator();
        while (xi.hasNext()) {
            Object o = xi.next();
            if (!(o instanceof X509Certificate)) {
                continue;
            }
            X509Certificate x509Certificate = (X509Certificate) o;
            final PublicKey key = x509Certificate.getPublicKey();
            // Make sure the algorithm is compatible
            // with the method.
            if (algEquals(method.getAlgorithm(), key.getAlgorithm())) {
                // x509証明書検証
                cheakX509validate(x509Certificate);
                return new KeySelectorResult() {
                    @Override
                    public Key getKey() {
                        return key;
                    }
                };
            }
        }
    }
    throw new KeySelectorException("No key found!");
}
 

@Override
public KeySelectorResult select(KeyInfo keyInfo, KeySelector.Purpose purpose, AlgorithmMethod method, XMLCryptoContext context) {
    return new KeySelectorResult() {
        @Override public Key getKey() {
            return key;
        }
    };
}
 

/**
 * Searches the specified keystore for a certificate that matches the
 * criteria specified in the CertSelector.
 *
 * @return a KeySelectorResult containing the cert's public key if there
 *         is a match; otherwise null
 */
private KeySelectorResult keyStoreSelect(CertSelector cs)
        throws KeyStoreException {
    Enumeration aliases = ks.aliases();
    while (aliases.hasMoreElements()) {
        String alias = (String) aliases.nextElement();
        Certificate cert = ks.getCertificate(alias);
        if (cert != null && cs.match(cert)) {
            return new SimpleKeySelectorResult(cert.getPublicKey());
        }
    }
    return null;
}
 

public KeySelectorResult getKeySelectorResult ()
{
    return this.keySelectorResult;
}
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();
 

/**
 * Returns the result of the {@link KeySelector}, if specified, after
 * this <code>XMLSignature</code> has been signed or validated.
 *
 * @return the key selector result, or <code>null</code> if a key
 *    selector has not been specified or this <code>XMLSignature</code>
 *    has not been signed or validated
 */
KeySelectorResult getKeySelectorResult();