org.signserver.module.renewal.worker.MockCA.java Source code

Introduction

Here is the source code for org.signserver.module.renewal.worker.MockCA.java

Source

/*************************************************************************
 *                                                                       *
 *  SignServer: The OpenSource Automated Signing Server                  *
 *                                                                       *
 *  This software is free software; you can redistribute it and/or       *
 *  modify it under the terms of the GNU Lesser General Public           *
 *  License as published by the Free Software Foundation; either         *
 *  version 2.1 of the License, or any later version.                    *
 *                                                                       *
 *  See terms of license at gnu.org.                                     *
 *                                                                       *
 *************************************************************************/
package org.signserver.module.renewal.worker;

import java.math.BigInteger;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.cert.CertStore;
import java.security.cert.CollectionCertStoreParameters;
import java.security.cert.X509Certificate;
import java.util.Arrays;
import java.util.Collection;
import java.util.Date;
import javax.security.auth.x500.X500Principal;
import org.apache.log4j.Logger;
import org.bouncycastle.cms.CMSProcessable;
import org.bouncycastle.cms.CMSProcessableByteArray;
import org.bouncycastle.cms.CMSSignedData;
import org.bouncycastle.cms.CMSSignedDataGenerator;
import org.bouncycastle.cms.CMSSignedGenerator;
import org.bouncycastle.x509.X509V3CertificateGenerator;

/**
 * Mock implementation of a CA.
 *
 * @author Markus Kils
 * @version $Id: MockCA.java 3982 2014-01-06 15:41:36Z netmackan $
 */
public class MockCA {

    /** Logger for this class. */
    private static final Logger LOG = Logger.getLogger(MockCA.class);

    private X509Certificate caCertificate;
    private KeyPair keyPair;
    private String subjectDN;

    public MockCA() {
    }

    private MockCA(final String subjectDN) {
        this.subjectDN = subjectDN;
        try {
            // Generate the RSA Keypair
            final KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA", "BC");
            kpg.initialize(2048);
            LOG.debug("generating...");
            keyPair = kpg.generateKeyPair();

            caCertificate = createCertificate(subjectDN, subjectDN, 10, "SHA1withRSA", keyPair.getPublic(),
                    keyPair.getPrivate());

        } catch (Exception ex) {
            throw new RuntimeException(ex);
        }
    }

    public static MockCA createMockCA(final String subjectDN) {
        return new MockCA(subjectDN);
    }

    private static X509Certificate createCertificate(String subject, String issuer, long validity, String sigAlg,
            PublicKey pubKey, PrivateKey caPrivateKey) throws Exception {
        final long currentTime = new Date().getTime();
        final Date firstDate = new Date(currentTime - 24 * 60 * 60 * 1000);
        final Date lastDate = new Date(currentTime + validity * 1000);
        X509V3CertificateGenerator cg = new X509V3CertificateGenerator();
        // Add all mandatory attributes
        cg.setSerialNumber(BigInteger.valueOf(firstDate.getTime()));
        LOG.debug("keystore signing algorithm " + sigAlg);
        cg.setSignatureAlgorithm(sigAlg);
        cg.setSubjectDN(new X500Principal(subject));

        if (pubKey == null) {
            throw new Exception("Public key is null");
        }
        cg.setPublicKey(pubKey);
        cg.setNotBefore(firstDate);
        cg.setNotAfter(lastDate);
        cg.setIssuerDN(new X500Principal(issuer));
        return cg.generate(caPrivateKey, "BC");
    }

    public X509Certificate issueCertificate(String subject, long validity, String sigAlg, PublicKey pubKey)
            throws Exception {
        return createCertificate(subject, subjectDN, validity, sigAlg, pubKey, keyPair.getPrivate());
    }

    public byte[] createPKCS7(final X509Certificate cert, final boolean includeChain) {

        final Collection<?> certs = includeChain ? Arrays.asList(cert, caCertificate) : Arrays.asList(cert);

        try {
            CMSProcessable msg = new CMSProcessableByteArray("EJBCA".getBytes());
            CertStore certStore = CertStore.getInstance("Collection", new CollectionCertStoreParameters(certs),
                    "BC");
            CMSSignedDataGenerator gen = new CMSSignedDataGenerator();

            gen.addSigner(keyPair.getPrivate(), caCertificate, CMSSignedGenerator.DIGEST_SHA1);
            gen.addCertificatesAndCRLs(certStore);
            CMSSignedData s = gen.generate(msg, true, "BC");

            return s.getEncoded();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }
}