org.votingsystem.signature.util.CertExtensionCheckerVS.java Source code

Introduction

Here is the source code for org.votingsystem.signature.util.CertExtensionCheckerVS.java

Source

package org.votingsystem.signature.util;

import org.bouncycastle.asn1.x509.X509Extensions;
import org.votingsystem.util.ContextVS;

import java.security.cert.CertPathValidatorException;
import java.security.cert.Certificate;
import java.security.cert.PKIXCertPathChecker;
import java.util.Collection;
import java.util.HashSet;
import java.util.Set;
import java.util.concurrent.atomic.AtomicBoolean;

/**
    
 * License: https://github.com/votingsystem/votingsystem/wiki/Licencia
 * To bypass id_kp_timeStamping ExtendedKeyUsage exception
 */
public class CertExtensionCheckerVS extends PKIXCertPathChecker {

    private AtomicBoolean isAnonymousSigner = new AtomicBoolean(false);

    public enum ExtensionVS {
        VOTE(ContextVS.VOTE_OID), REPRESENTATIVE_VOTE(
                ContextVS.REPRESENTATIVE_VOTE_OID), ANONYMOUS_REPRESENTATIVE_DELEGATION(
                        ContextVS.ANONYMOUS_REPRESENTATIVE_DELEGATION_OID), CURRENCY(
                                ContextVS.CURRENCY_OID), DEVICEVS(ContextVS.DEVICEVS_OID);

        String OID = null;

        ExtensionVS(String OID) {
            this.OID = OID;
        }

        public String getOID() {
            return OID;
        }

        public static ExtensionVS getExtensionVS(String extensionVS_OID) {
            if (extensionVS_OID == null)
                return null;
            if (ContextVS.VOTE_OID.equals(extensionVS_OID))
                return VOTE;
            if (ContextVS.REPRESENTATIVE_VOTE_OID.equals(extensionVS_OID))
                return REPRESENTATIVE_VOTE;
            if (ContextVS.ANONYMOUS_REPRESENTATIVE_DELEGATION_OID.equals(extensionVS_OID))
                return ANONYMOUS_REPRESENTATIVE_DELEGATION;
            if (ContextVS.CURRENCY_OID.equals(extensionVS_OID))
                return CURRENCY;
            if (ContextVS.DEVICEVS_OID.equals(extensionVS_OID))
                return DEVICEVS;
            return null;
        }

    }

    private Set<String> supportedExtensions;
    private Set<ExtensionVS> extensionsVS;

    public CertExtensionCheckerVS() {
        supportedExtensions = new HashSet<String>();
        extensionsVS = new HashSet<ExtensionVS>();
        supportedExtensions.add(X509Extensions.ExtendedKeyUsage.toString());
        supportedExtensions.add(ExtensionVS.VOTE.getOID());
        supportedExtensions.add(ExtensionVS.REPRESENTATIVE_VOTE.getOID());
        supportedExtensions.add(ExtensionVS.ANONYMOUS_REPRESENTATIVE_DELEGATION.getOID());
        supportedExtensions.add(ExtensionVS.CURRENCY.getOID());
        supportedExtensions.add(ExtensionVS.DEVICEVS.getOID());
    }

    public void init(boolean forward) throws CertPathValidatorException {
        //To change body of implemented methods use File | Settings | File Templates.
    }

    public boolean isForwardCheckingSupported() {
        return true;
    }

    public Set<ExtensionVS> getSupportedExtensionsVS() {
        return extensionsVS;
    }

    private void addExtensionVS(ExtensionVS extensionVS) {
        extensionsVS.add(extensionVS);
        if (ExtensionVS.DEVICEVS != extensionVS)
            isAnonymousSigner.set(true);
    }

    public boolean isAnonymousSigner() {
        return isAnonymousSigner.get();
    }

    public Set getSupportedExtensions() {
        return null;
    }

    public void check(Certificate cert, Collection<String> unresolvedCritExts) throws CertPathValidatorException {
        while (unresolvedCritExts.iterator().hasNext()) {
            String ext = unresolvedCritExts.iterator().next();
            if (supportedExtensions.contains(ext)) {
                //log.info("------------- ExtendedKeyUsage removed from validation");
                unresolvedCritExts.remove(ext);
                ExtensionVS extensionVS = ExtensionVS.getExtensionVS(ext);
                if (extensionVS != null)
                    addExtensionVS(extensionVS);
            }
        }
    }

}