1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
|
using System;
using System.Collections.Generic;
using System.IO;
using Org.BouncyCastle.Utilities;
namespace Org.BouncyCastle.Asn1.X509
{
/**
* Generator for Version 2 TbsCertList structures.
* <pre>
* TbsCertList ::= Sequence {
* version Version OPTIONAL,
* -- if present, shall be v2
* signature AlgorithmIdentifier,
* issuer Name,
* thisUpdate Time,
* nextUpdate Time OPTIONAL,
* revokedCertificates Sequence OF Sequence {
* userCertificate CertificateSerialNumber,
* revocationDate Time,
* crlEntryExtensions Extensions OPTIONAL
* -- if present, shall be v2
* } OPTIONAL,
* crlExtensions [0] EXPLICIT Extensions OPTIONAL
* -- if present, shall be v2
* }
* </pre>
*
* <b>Note: This class may be subject to change</b>
*/
public class V2TbsCertListGenerator
{
private DerInteger version = new DerInteger(1);
private AlgorithmIdentifier signature;
private X509Name issuer;
private Time thisUpdate, nextUpdate;
private X509Extensions extensions;
private List<Asn1Sequence> crlEntries;
public V2TbsCertListGenerator()
{
}
public void SetSignature(
AlgorithmIdentifier signature)
{
this.signature = signature;
}
public void SetIssuer(
X509Name issuer)
{
this.issuer = issuer;
}
public void SetThisUpdate(
DerUtcTime thisUpdate)
{
this.thisUpdate = new Time(thisUpdate);
}
public void SetNextUpdate(
DerUtcTime nextUpdate)
{
this.nextUpdate = (nextUpdate != null)
? new Time(nextUpdate)
: null;
}
public void SetThisUpdate(
Time thisUpdate)
{
this.thisUpdate = thisUpdate;
}
public void SetNextUpdate(
Time nextUpdate)
{
this.nextUpdate = nextUpdate;
}
public void AddCrlEntry(Asn1Sequence crlEntry)
{
if (crlEntries == null)
{
crlEntries = new List<Asn1Sequence>();
}
crlEntries.Add(crlEntry);
}
public void AddCrlEntry(DerInteger userCertificate, DerUtcTime revocationDate, int reason)
{
AddCrlEntry(userCertificate, new Time(revocationDate), reason);
}
public void AddCrlEntry(DerInteger userCertificate, Time revocationDate, int reason)
{
AddCrlEntry(userCertificate, revocationDate, reason, null);
}
public void AddCrlEntry(DerInteger userCertificate, Time revocationDate, int reason,
DerGeneralizedTime invalidityDate)
{
var extOids = new List<DerObjectIdentifier>();
var extValues = new List<X509Extension>();
if (reason != 0)
{
CrlReason crlReason = new CrlReason(reason);
try
{
extOids.Add(X509Extensions.ReasonCode);
extValues.Add(new X509Extension(false, new DerOctetString(crlReason.GetEncoded())));
}
catch (IOException e)
{
throw new ArgumentException("error encoding reason: " + e);
}
}
if (invalidityDate != null)
{
try
{
extOids.Add(X509Extensions.InvalidityDate);
extValues.Add(new X509Extension(false, new DerOctetString(invalidityDate.GetEncoded())));
}
catch (IOException e)
{
throw new ArgumentException("error encoding invalidityDate: " + e);
}
}
if (extOids.Count != 0)
{
AddCrlEntry(userCertificate, revocationDate, new X509Extensions(extOids, extValues));
}
else
{
AddCrlEntry(userCertificate, revocationDate, null);
}
}
public void AddCrlEntry(DerInteger userCertificate, Time revocationDate, X509Extensions extensions)
{
Asn1EncodableVector v = new Asn1EncodableVector(userCertificate, revocationDate);
if (extensions != null)
{
v.Add(extensions);
}
AddCrlEntry(new DerSequence(v));
}
public void SetExtensions(
X509Extensions extensions)
{
this.extensions = extensions;
}
public TbsCertificateList GenerateTbsCertList()
{
if ((signature == null) || (issuer == null) || (thisUpdate == null))
{
throw new InvalidOperationException("Not all mandatory fields set in V2 TbsCertList generator.");
}
Asn1EncodableVector v = new Asn1EncodableVector(
version, signature, issuer, thisUpdate);
if (nextUpdate != null)
{
v.Add(nextUpdate);
}
// Add CRLEntries if they exist
if (crlEntries != null)
{
v.Add(new DerSequence(crlEntries.ToArray()));
}
if (extensions != null)
{
v.Add(new DerTaggedObject(0, extensions));
}
return new TbsCertificateList(new DerSequence(v));
}
}
}
|
