Package org.wildfly.security.sasl.entity

Class EntityUtil

java.lang.Object

org.wildfly.security.sasl.entity.EntityUtil

class EntityUtil
extends Object

Author:

Farah Juma

Field Summary

Fields

Modifier and Type	Field	Description
private static byte[]	randomCharDictionary

Constructor Summary

Constructors

Constructor	Description
EntityUtil()

Method Summary

Modifier and Type	Method	Description
private static GeneralName	convertToGeneralName(List<?> generalName)
private static List<GeneralName>	convertToGeneralNames(Collection<List<?>> generalNames)
static X509Certificate[]	decodeCertificateData(DERDecoder decoder)	Decode the next element from the given DER decoder as a CertData element, which is defined as follows:
static List<GeneralName>	decodeGeneralNames(DERDecoder decoder)	Decode the next element from the given DER decoder as a GeneralNames element.
static List<TrustedAuthority>	decodeTrustedAuthorities(DERDecoder decoder)	Decode the next element from the given DER decoder as a trusted authorities element.
static X509Certificate[]	decodeX509CertificateChain(DERDecoder decoder)	Decode the next element from the given DER decoder as an X.509 certificate chain.
static void	encodeAlgorithmIdentifier(DEREncoder encoder, String algorithm)	Encode an AlgorithmIdentifier using the given DER encoder, where AlgorithmIdentifier is defined as:
static void	encodeAlgorithmIdentifier(DEREncoder encoder, String objectIdentifier, boolean omitParametersField)	Encode an AlgorithmIdentifier without any parameters using the given DER encoder and object identifier, where AlgorithmIdentifier is defined as:
static void	encodeGeneralNames(DEREncoder encoder, String subjectName, Collection<List<?>> subjectAltNames)
static void	encodeGeneralNames(DEREncoder encoder, List<GeneralName> generalNames)	Encode a GeneralNames element using the given DER encoder, where GeneralNames is defined as:
static void	encodeGeneralNames(DEREncoder encoder, GeneralName generalName)	Encode a GeneralNames element consisting of one general name using the given DER encoder.
static byte[]	encodeRandomNumber(DEREncoder encoder, SecureRandom secureRandom)	Encode a RandomNumber element using the given DER encoder, where RandomNumber is defined as:
static void	encodeTrustedAuthorities(DEREncoder encoder, List<TrustedAuthority> trustedAuthorities)	Encode an ASN.1 sequence of trusted authorities using the given DER encoder.
static void	encodeX509CertificateChain(DEREncoder encoder, X509Certificate[] certChain)	Encode an ASN.1 set of certificates using the given DER encoder and the given X509Certificate chain.
static byte[]	generateRandomString(int length, Random random)
static String	getDistinguishedNameFromGeneralNames(List<GeneralName> generalNames)
static boolean	matchGeneralName(GeneralName generalName, GeneralName actualGeneralName)
static boolean	matchGeneralNames(List<GeneralName> generalNames, X509Certificate cert)
static boolean	matchGeneralNames(List<GeneralName> generalNames, List<GeneralName> actualGeneralNames)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

randomCharDictionary

private static final byte[] randomCharDictionary

Constructor Detail

EntityUtil

EntityUtil()

Method Detail

encodeX509CertificateChain

public static void encodeX509CertificateChain(DEREncoder encoder,
                                              X509Certificate[] certChain)
                                       throws ASN1Exception

Encode an ASN.1 set of certificates using the given DER encoder and the given X509Certificate chain.

Parameters:

encoder - the DER encoder

certChain - the X.509 certificate chain to encode

Throws:

ASN1Exception - if an error occurs while encoding the given certificate chain

encodeAlgorithmIdentifier

public static void encodeAlgorithmIdentifier(DEREncoder encoder,
                                             String objectIdentifier,
                                             boolean omitParametersField)
                                      throws ASN1Exception

Encode an AlgorithmIdentifier without any parameters using the given DER encoder and object identifier, where AlgorithmIdentifier is defined as:

      AlgorithmIdentifier  ::=  SEQUENCE  {
          algorithm      OBJECT IDENTIFIER,
          parameters     ANY DEFINED BY algorithm OPTIONAL
      }
 

Parameters:

encoder - the DER encoder

objectIdentifier - the object identifier for the algorithm

omitParametersField - true if the parameters field should be ommitted in the encoding and false otherwise

Throws:

ASN1Exception - if the given object identifier is invalid

encodeAlgorithmIdentifier

public static void encodeAlgorithmIdentifier(DEREncoder encoder,
                                             String algorithm)
                                      throws ASN1Exception

Encode an AlgorithmIdentifier using the given DER encoder, where AlgorithmIdentifier is defined as:

      AlgorithmIdentifier  ::=  SEQUENCE  {
          algorithm      OBJECT IDENTIFIER,
          parameters     ANY DEFINED BY algorithm OPTIONAL
      }
 

Parameters:

encoder - the DER encoder

algorithm - the algorithm name

Throws:

ASN1Exception - if the given algorithm name is unrecognised

encodeGeneralNames

public static void encodeGeneralNames(DEREncoder encoder,
                                      List<GeneralName> generalNames)
                               throws ASN1Exception

Encode a GeneralNames element using the given DER encoder, where GeneralNames is defined as:

      GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName
 

Parameters:

encoder - the DER encoder

generalNames - the general names, as a List where each entry is a GeneralName

Throws:

ASN1Exception - if any of the general names are invalid

encodeGeneralNames

public static void encodeGeneralNames(DEREncoder encoder,
                                      GeneralName generalName)
                               throws ASN1Exception

Encode a GeneralNames element consisting of one general name using the given DER encoder.

Parameters:

encoder - the DER encoder

generalName - the general name

Throws:

ASN1Exception - if the general name is invalid

encodeGeneralNames

public static void encodeGeneralNames(DEREncoder encoder,
                                      String subjectName,
                                      Collection<List<?>> subjectAltNames)
                               throws ASN1Exception

Throws:

ASN1Exception

encodeRandomNumber

public static byte[] encodeRandomNumber(DEREncoder encoder,
                                        SecureRandom secureRandom)

Encode a RandomNumber element using the given DER encoder, where RandomNumber is defined as:

      RandomNumber ::= OCTET STRING (SIZE(8..MAX))
 

Parameters:

encoder - the DER encoder

secureRandom - the secure random to use (may be null)

generateRandomString

public static byte[] generateRandomString(int length,
                                          Random random)

encodeTrustedAuthorities

public static void encodeTrustedAuthorities(DEREncoder encoder,
                                            List<TrustedAuthority> trustedAuthorities)
                                     throws ASN1Exception

Encode an ASN.1 sequence of trusted authorities using the given DER encoder.

Parameters:

encoder - the DER encoder

trustedAuthorities - the trusted authorities as a List where each entry must be a TrustedAuthority.NameTrustedAuthority, a TrustedAuthority.CertificateTrustedAuthority, or a TrustedAuthority.HashTrustedAuthority

Throws:

ASN1Exception - if any of the trusted authorities are invalid

decodeGeneralNames

public static List<GeneralName> decodeGeneralNames(DERDecoder decoder)
                                            throws ASN1Exception

Decode the next element from the given DER decoder as a GeneralNames element.

Parameters:

decoder - the DER decoder

Returns:

the general names

Throws:

ASN1Exception - if the next element from the given decoder is not a general names element

decodeX509CertificateChain

public static X509Certificate[] decodeX509CertificateChain(DERDecoder decoder)
                                                    throws ASN1Exception

Decode the next element from the given DER decoder as an X.509 certificate chain.

Parameters:

decoder - the DER decoder

Returns:

the X.509 certificate chain

Throws:

ASN1Exception - if the next element from the given decoder is not an X.509 certificate chain or if an error occurs while decoding the X.509 certificate chain

decodeCertificateData

public static X509Certificate[] decodeCertificateData(DERDecoder decoder)
                                               throws ASN1Exception

Decode the next element from the given DER decoder as a CertData element, which is defined as follows:

      CertData ::= CHOICE {
          certificateSet     SET SIZE (1..MAX) OF Certificate,
          certURL            IA5String (Note: No support for certificate URL)
      }
 

Parameters:

decoder - the DER decoder

Returns:

the X.509 certificate or certificate chain

Throws:

ASN1Exception - if the next element from the given decoder is not a CertData element or if an error occurs while decoding the certificate data

decodeTrustedAuthorities

public static List<TrustedAuthority> decodeTrustedAuthorities(DERDecoder decoder)
                                                       throws ASN1Exception

Decode the next element from the given DER decoder as a trusted authorities element.

Parameters:

decoder - the DER decoder

Returns:

the trusted authorities

Throws:

ASN1Exception - if the next element from the given decoder is not a trusted authorities element or if an error occurs while decoding the trusted authorities element

matchGeneralNames

public static boolean matchGeneralNames(List<GeneralName> generalNames,
                                        List<GeneralName> actualGeneralNames)

matchGeneralName

public static boolean matchGeneralName(GeneralName generalName,
                                       GeneralName actualGeneralName)

matchGeneralNames

public static boolean matchGeneralNames(List<GeneralName> generalNames,
                                        X509Certificate cert)

getDistinguishedNameFromGeneralNames

public static String getDistinguishedNameFromGeneralNames(List<GeneralName> generalNames)

convertToGeneralName

private static GeneralName convertToGeneralName(List<?> generalName)
                                         throws ASN1Exception

Throws:

ASN1Exception

convertToGeneralNames

private static List<GeneralName> convertToGeneralNames(Collection<List<?>> generalNames)
                                                throws ASN1Exception

Throws:

ASN1Exception