| /** |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| */ |
| package org.apache.xml.security.test.dom.keys.content.x509; |
| |
| import static org.junit.Assert.assertTrue; |
| |
| import java.io.File; |
| import java.io.FileInputStream; |
| import java.security.cert.CertStore; |
| import java.security.cert.CertificateFactory; |
| import java.security.cert.CollectionCertStoreParameters; |
| import java.security.cert.X509CertSelector; |
| import java.security.cert.X509Certificate; |
| import java.util.Collection; |
| import java.util.Collections; |
| |
| import org.apache.xml.security.keys.content.x509.XMLX509SKI; |
| |
| /** |
| * Test bugfix 41892: XML Security 1.4.0 does not build with IBM's JDK |
| */ |
| public class XMLX509SKITest { |
| |
| private static final String BASEDIR = System.getProperty("basedir"); |
| private static final String SEP = System.getProperty("file.separator"); |
| private CertificateFactory cf; |
| |
| public XMLX509SKITest() throws Exception { |
| cf = CertificateFactory.getInstance("X.509"); |
| } |
| |
| @org.junit.Test |
| public void testGetSKIBytesFromCert() throws Exception { |
| File f = null; |
| if (BASEDIR != null && !"".equals(BASEDIR)) { |
| f = new File(BASEDIR + SEP + |
| "src/test/resources/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/lugh.crt"); |
| } else { |
| f = new File( |
| "src/test/resources/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/lugh.crt"); |
| } |
| |
| FileInputStream fis = new FileInputStream(f); |
| X509Certificate cert = (X509Certificate) cf.generateCertificate(fis); |
| |
| // Get subject key identifier from certificate |
| byte[] skid = XMLX509SKI.getSKIBytesFromCert(cert); |
| |
| // Use X509CertSelector to match on certificate using the skid, |
| // thereby testing that the returned skid was correct |
| X509CertSelector xcs = new X509CertSelector(); |
| // DER-encode skid - required by X509CertSelector |
| byte[] encodedSkid = new byte[skid.length+2]; |
| encodedSkid[0] = 0x04; // OCTET STRING tag value |
| encodedSkid[1] = (byte) skid.length; // length |
| System.arraycopy(skid, 0, encodedSkid, 2, skid.length); |
| xcs.setSubjectKeyIdentifier(encodedSkid); |
| |
| CertStore cs = CertStore.getInstance( |
| "Collection", |
| new CollectionCertStoreParameters(Collections.singleton(cert))); |
| |
| Collection<?> certs = cs.getCertificates(xcs); |
| assertTrue(!certs.isEmpty()); |
| } |
| } |