();
for (Extension extension : extensions) {
oidMap.put(extension.getExtnID(), extension);
}
}
return oidMap.get(oid);
}
/**
* Returns the value of Key Usage extension (OID == 2.5.29.15).
* The ASN.1 definition of Key Usage Extension is:
*
*
* id-ce-keyUsage OBJECT IDENTIFIER ::= { id-ce 15 }
*
* KeyUsage ::= BIT STRING {
* digitalSignature (0),
* nonRepudiation (1),
* keyEncipherment (2),
* dataEncipherment (3),
* keyAgreement (4),
* keyCertSign (5),
* cRLSign (6),
* encipherOnly (7),
* decipherOnly (8)
* }
*
* (as specified in RFC 3280)
*
* @return the value of Key Usage Extension if it is in the list,
* and null if there is no such extension or its value can not be decoded
* otherwise. Note, that the length of returned array can be greater
* than 9.
*/
public boolean[] valueOfKeyUsage() {
Extension extension = getExtensionByOID("2.5.29.15");
KeyUsage kUsage;
if ((extension == null) || ((kUsage = extension.getKeyUsageValue()) == null)) {
return null;
}
return kUsage.getKeyUsage();
}
/**
* Returns the value of Extended Key Usage extension (OID == 2.5.29.37).
* The ASN.1 definition of Extended Key Usage Extension is:
*
*
* id-ce-extKeyUsage OBJECT IDENTIFIER ::= { id-ce 37 }
*
* ExtKeyUsageSyntax ::= SEQUENCE SIZE (1..MAX) OF KeyPurposeId
*
* KeyPurposeId ::= OBJECT IDENTIFIER
*
* (as specified in RFC 3280)
*
* @return the list with string representations of KeyPurposeId's OIDs
* and null
* @throws IOException if extension was incorrectly encoded.
*/
public List valueOfExtendedKeyUsage() throws IOException {
Extension extension = getExtensionByOID("2.5.29.37");
if (extension == null) {
return null;
}
return ((ExtendedKeyUsage) extension.getDecodedExtensionValue()).getExtendedKeyUsage();
}
/**
* Returns the value of Basic Constraints Extension (OID = 2.5.29.19).
* The ASN.1 definition of Basic Constraints Extension is:
*
*
* id-ce-basicConstraints OBJECT IDENTIFIER ::= { id-ce 19 }
*
* BasicConstraints ::= SEQUENCE {
* cA BOOLEAN DEFAULT FALSE,
* pathLenConstraint INTEGER (0..MAX) OPTIONAL
* }
*
* (as specified in RFC 3280)
*
* @return the value of pathLenConstraint field if extension presents,
* and Integer.MAX_VALUE if does not.
*/
public int valueOfBasicConstrains() {
Extension extension = getExtensionByOID("2.5.29.19");
BasicConstraints bc;
if ((extension == null) || ((bc = extension.getBasicConstraintsValue()) == null)) {
return Integer.MAX_VALUE;
}
return bc.getPathLenConstraint();
}
/**
* Returns the value of Subject Alternative Name (OID = 2.5.29.17).
* The ASN.1 definition for Subject Alternative Name is:
*
*
* id-ce-subjectAltName OBJECT IDENTIFIER ::= { id-ce 17 }
*
* SubjectAltName ::= GeneralNames
*
* (as specified in RFC 3280)
*
* @return Returns the collection of pairs:
* (Integer (tag), Object (name value)) if extension presents, and
* null if does not.
*/
public Collection> valueOfSubjectAlternativeName() throws IOException {
Extension extension = getExtensionByOID("2.5.29.17");
if (extension == null) {
return null;
}
return ((GeneralNames) GeneralNames.ASN1.decode(extension.getExtnValue())).getPairsList();
}
/**
* Returns the value of Issuer Alternative Name Extension (OID = 2.5.29.18).
* The ASN.1 definition for Issuer Alternative Name is:
*
*
* id-ce-issuerAltName OBJECT IDENTIFIER ::= { id-ce 18 }
*
* IssuerAltName ::= GeneralNames
*
* (as specified in RFC 3280)
*
* @return Returns the collection of pairs:
* (Integer (tag), Object (name value)) if extension presents, and
* null if does not.
*/
public Collection> valueOfIssuerAlternativeName() throws IOException {
Extension extension = getExtensionByOID("2.5.29.18");
if (extension == null) {
return null;
}
return ((GeneralNames) GeneralNames.ASN1.decode(extension.getExtnValue())).getPairsList();
}
/**
* Returns the value of Certificate Issuer Extension (OID = 2.5.29.29).
* It is a CRL entry extension and contains the GeneralNames describing
* the issuer of revoked certificate. Its ASN.1 notation is as follows:
*
* id-ce-certificateIssuer OBJECT IDENTIFIER ::= { id-ce 29 }
*
* certificateIssuer ::= GeneralNames
*
* (as specified in RFC 3280)
*
* @return the value of Certificate Issuer Extension
*/
public X500Principal valueOfCertificateIssuerExtension() throws IOException {
Extension extension = getExtensionByOID("2.5.29.29");
if (extension == null) {
return null;
}
return ((CertificateIssuer) extension.getDecodedExtensionValue()).getIssuer();
}
/**
* Returns ASN.1 encoded form of this X.509 Extensions value.
*/
public byte[] getEncoded() {
if (encoding == null) {
encoding = ASN1.encode(this);
}
return encoding;
}
@Override public boolean equals(Object other) {
if (!(other instanceof Extensions)) {
return false;
}
Extensions that = (Extensions) other;
return (this.extensions == null || this.extensions.isEmpty())
? (that.extensions == null || that.extensions.isEmpty())
: (this.extensions.equals(that.extensions));
}
@Override public int hashCode() {
int hashCode = 0;
if (extensions != null) {
hashCode = extensions.hashCode();
}
return hashCode;
}
public void dumpValue(StringBuilder sb, String prefix) {
if (extensions == null) {
return;
}
int num = 1;
for (Extension extension: extensions) {
sb.append('\n').append(prefix).append('[').append(num++).append("]: ");
extension.dumpValue(sb, prefix);
}
}
/**
* Custom X.509 Extensions decoder.
*/
public static final ASN1Type ASN1 = new ASN1SequenceOf(Extension.ASN1) {
@Override public Object getDecodedObject(BerInputStream in) {
return new Extensions((List) in.content);
}
@Override public Collection getValues(Object object) {
Extensions extensions = (Extensions) object;
return (extensions.extensions == null) ? new ArrayList() : extensions.extensions;
}
};
}