Example usage for org.bouncycastle.asn1.x509 AttributeCertificate getAcinfo

Introduction

In this page you can find the example usage for org.bouncycastle.asn1.x509 AttributeCertificate getAcinfo.

Prototype

public AttributeCertificateInfo getAcinfo() 

Source Link

Usage

From source file:eu.europa.ec.markt.dss.validation102853.cades.CAdESSignature.java

License:Open Source License

@Override
public List<CertifiedRole> getCertifiedSignerRoles() {

    final AttributeTable signedAttributes = signerInformation.getSignedAttributes();
    if (signedAttributes == null) {
        return null;
    }/*from   w w w. j  a v  a  2 s. c  o m*/

    final Attribute id_aa_ets_signerAttr = signedAttributes.get(PKCSObjectIdentifiers.id_aa_ets_signerAttr);
    if (id_aa_ets_signerAttr == null) {
        return null;
    }
    final ASN1Set attrValues = id_aa_ets_signerAttr.getAttrValues();
    final ASN1Encodable asn1EncodableAttrValue = attrValues.getObjectAt(0);
    try {

        final SignerAttribute signerAttr = SignerAttribute.getInstance(asn1EncodableAttrValue);
        if (signerAttr == null) {
            return null;
        }
        List<CertifiedRole> roles = null;
        final Object[] signerAttrValues = signerAttr.getValues();
        for (final Object signerAttrValue : signerAttrValues) {

            if (signerAttrValue instanceof AttributeCertificate) {

                if (roles == null) {

                    roles = new ArrayList<CertifiedRole>();
                }
                final AttributeCertificate attributeCertificate = (AttributeCertificate) signerAttrValue;
                final AttributeCertificateInfo acInfo = attributeCertificate.getAcinfo();
                final AttCertValidityPeriod attrCertValidityPeriod = acInfo.getAttrCertValidityPeriod();
                final ASN1Sequence attributes = acInfo.getAttributes();
                for (int ii = 0; ii < attributes.size(); ii++) {

                    final ASN1Encodable objectAt = attributes.getObjectAt(ii);
                    final org.bouncycastle.asn1.x509.Attribute attribute = org.bouncycastle.asn1.x509.Attribute
                            .getInstance(objectAt);
                    final ASN1Set attrValues1 = attribute.getAttrValues();
                    DERSequence derSequence = (DERSequence) attrValues1.getObjectAt(0);
                    RoleSyntax roleSyntax = RoleSyntax.getInstance(derSequence);
                    CertifiedRole certifiedRole = new CertifiedRole();
                    certifiedRole.setRole(roleSyntax.getRoleNameAsString());
                    certifiedRole.setNotBefore(DSSASN1Utils.toDate(attrCertValidityPeriod.getNotBeforeTime()));
                    certifiedRole.setNotAfter(DSSASN1Utils.toDate(attrCertValidityPeriod.getNotAfterTime()));
                    roles.add(certifiedRole);
                }
            }
        }
        return roles;
    } catch (Exception e) {

        throw new DSSException(
                "Error when dealing with certified signer roles: [" + asn1EncodableAttrValue.toString() + "]",
                e);
    }
}

---

From source file:nl.uva.vlet.grid.voms.VOMSAttributeCertificate.java

License:Apache License

public VOMSAttributeCertificate(AttributeCertificate ac) {
    this.ac = ac;

    //----------------------------------------------------------------------------
    // first level

    acinfo = ac.getAcinfo();
    signatureAlgorithm = ac.getSignatureAlgorithm();
    signatureValue = ac.getSignatureValue();

    //----------------------------------------------------------------------------
    // second level therefore is the acinfo - this has 9 subparts

    version = acinfo.getVersion();/*from   w  w  w .j a v  a2 s . c o m*/
    holder = acinfo.getHolder();
    issuer = acinfo.getIssuer();
    signature = acinfo.getSignature();
    serialNumber = acinfo.getSerialNumber();
    attrCertValidityPeriod = acinfo.getAttrCertValidityPeriod();
    attributes = acinfo.getAttributes();
    issuerUniqueID = acinfo.getIssuerUniqueID(); // OPTIONAL
    extensions = acinfo.getExtensions(); // OPTIONAL

}

---