private static final Debug debug = Debug.getInstance("certpath");

private final static ObjectIdentifier ANY_EXTENDED_KEY_USAGE =

ObjectIdentifier.newInternal(new int[] {2, 5, 29, 37, 0});

static {

CertPathHelperImpl.initialize();

}

private BigInteger serialNumber;

private X500Principal issuer;

private X500Principal subject;

private byte[] subjectKeyID;

private byte[] authorityKeyID;

private Date certificateValid;

private Date privateKeyValid;

private ObjectIdentifier subjectPublicKeyAlgID;

private PublicKey subjectPublicKey;

private byte[] subjectPublicKeyBytes;

private boolean[] keyUsage;

private Set<String> keyPurposeSet;

private Set<ObjectIdentifier> keyPurposeOIDSet;

private Set<List<?>> subjectAlternativeNames;

private Set<GeneralNameInterface> subjectAlternativeGeneralNames;

private CertificatePolicySet policy;

private Set<String> policySet;

private Set<List<?>> pathToNames;

private Set<GeneralNameInterface> pathToGeneralNames;

private NameConstraintsExtension nc;

private byte[] ncBytes;

private int basicConstraints = -1;

private X509Certificate x509Cert;

private boolean matchAllSubjectAltNames = true;

private static final Boolean FALSE = Boolean.FALSE;

private static final int PRIVATE_KEY_USAGE_ID = 0;

private static final int SUBJECT_ALT_NAME_ID = 1;

private static final int NAME_CONSTRAINTS_ID = 2;

private static final int CERT_POLICIES_ID = 3;

private static final int EXTENDED_KEY_USAGE_ID = 4;

private static final int NUM_OF_EXTENSIONS = 5;

private static final String[] EXTENSION_OIDS = new String[NUM_OF_EXTENSIONS];

static {

EXTENSION_OIDS[PRIVATE_KEY_USAGE_ID] = "2.5.29.16";

EXTENSION_OIDS[SUBJECT_ALT_NAME_ID] = "2.5.29.17";

EXTENSION_OIDS[NAME_CONSTRAINTS_ID] = "2.5.29.30";

EXTENSION_OIDS[CERT_POLICIES_ID] = "2.5.29.32";

EXTENSION_OIDS[EXTENDED_KEY_USAGE_ID] = "2.5.29.37";

};

/* Constants representing the GeneralName types */

static final int NAME_ANY = 0;

static final int NAME_RFC822 = 1;

static final int NAME_DNS = 2;

static final int NAME_X400 = 3;

static final int NAME_DIRECTORY = 4;

static final int NAME_EDI = 5;

static final int NAME_URI = 6;

static final int NAME_IP = 7;

static final int NAME_OID = 8;

/**

public X509CertSelector() {

// empty

}

/**

public void setCertificate(X509Certificate cert) {

x509Cert = cert;

}

/**

public void setSerialNumber(BigInteger serial) {

serialNumber = serial;

}

/**

public void setIssuer(X500Principal issuer) {

this.issuer = issuer;

}

/**

public void setIssuer(String issuerDN) throws IOException {

if (issuerDN == null) {

issuer = null;

} else {

issuer = new X500Name(issuerDN).asX500Principal();

}

}

/**

public void setIssuer(byte[] issuerDN) throws IOException {

try {

issuer = (issuerDN == null ? null : new X500Principal(issuerDN));

} catch (IllegalArgumentException e) {

throw new IOException("Invalid name", e);

}

}

/**

public void setSubject(X500Principal subject) {

this.subject = subject;

}

/**

public void setSubject(String subjectDN) throws IOException {

if (subjectDN == null) {

subject = null;

} else {

subject = new X500Name(subjectDN).asX500Principal();

}

}

/**

public void setSubject(byte[] subjectDN) throws IOException {

try {

subject = (subjectDN == null ? null : new X500Principal(subjectDN));

} catch (IllegalArgumentException e) {

throw new IOException("Invalid name", e);

}

}

/**

public void setSubjectKeyIdentifier(byte[] subjectKeyID) {

if (subjectKeyID == null) {

this.subjectKeyID = null;

} else {

this.subjectKeyID = subjectKeyID.clone();

}

}

/**

public void setAuthorityKeyIdentifier(byte[] authorityKeyID) {

if (authorityKeyID == null) {

this.authorityKeyID = null;

} else {

this.authorityKeyID = authorityKeyID.clone();

}

}

/**

public void setCertificateValid(Date certValid) {

if (certValid == null) {

certificateValid = null;

} else {

certificateValid = (Date)certValid.clone();

}

}

/**

public void setPrivateKeyValid(Date privateKeyValid) {

if (privateKeyValid == null) {

this.privateKeyValid = null;

} else {

this.privateKeyValid = (Date)privateKeyValid.clone();

}

}

/**

public void setSubjectPublicKeyAlgID(String oid) throws IOException {

if (oid == null) {

subjectPublicKeyAlgID = null;

} else {

subjectPublicKeyAlgID = new ObjectIdentifier(oid);

}

}

/**

public void setSubjectPublicKey(PublicKey key) {

if (key == null) {

subjectPublicKey = null;

subjectPublicKeyBytes = null;

} else {

subjectPublicKey = key;

subjectPublicKeyBytes = key.getEncoded();

}

}

/**

public void setSubjectPublicKey(byte[] key) throws IOException {

if (key == null) {

subjectPublicKey = null;

subjectPublicKeyBytes = null;

} else {

subjectPublicKeyBytes = key.clone();

subjectPublicKey = X509Key.parse(new DerValue(subjectPublicKeyBytes));

}

}

/**

public void setKeyUsage(boolean[] keyUsage) {

if (keyUsage == null) {

this.keyUsage = null;

} else {

this.keyUsage = keyUsage.clone();

}

}

/**

public void setExtendedKeyUsage(Set<String> keyPurposeSet) throws IOException {

if ((keyPurposeSet == null) || keyPurposeSet.isEmpty()) {

this.keyPurposeSet = null;

keyPurposeOIDSet = null;

} else {

this.keyPurposeSet =

Collections.unmodifiableSet(new HashSet<String>(keyPurposeSet));

keyPurposeOIDSet = new HashSet<ObjectIdentifier>();

for (String s : this.keyPurposeSet) {

keyPurposeOIDSet.add(new ObjectIdentifier(s));

}

}

}

/**

public void setMatchAllSubjectAltNames(boolean matchAllNames) {

this.matchAllSubjectAltNames = matchAllNames;

}

/**

public void setSubjectAlternativeNames(Collection<List<?>> names)

throws IOException {

if (names == null) {

subjectAlternativeNames = null;

subjectAlternativeGeneralNames = null;

} else {

if (names.isEmpty()) {

subjectAlternativeNames = null;

subjectAlternativeGeneralNames = null;

return;

}

Set<List<?>> tempNames = cloneAndCheckNames(names);

// Ensure that we either set both of these or neither

subjectAlternativeGeneralNames = parseNames(tempNames);

subjectAlternativeNames = tempNames;

}

}

/**

public void addSubjectAlternativeName(int type, String name)

throws IOException {

addSubjectAlternativeNameInternal(type, name);

}

/**

public void addSubjectAlternativeName(int type, byte[] name)

throws IOException {

// clone because byte arrays are modifiable

addSubjectAlternativeNameInternal(type, name.clone());

}

/**

private void addSubjectAlternativeNameInternal(int type, Object name)

throws IOException {

// First, ensure that the name parses

GeneralNameInterface tempName = makeGeneralNameInterface(type, name);

if (subjectAlternativeNames == null) {

subjectAlternativeNames = new HashSet<List<?>>();

}

if (subjectAlternativeGeneralNames == null) {

subjectAlternativeGeneralNames = new HashSet<GeneralNameInterface>();

}

List<Object> list = new ArrayList<Object>(2);

list.add(Integer.valueOf(type));

list.add(name);

subjectAlternativeNames.add(list);

subjectAlternativeGeneralNames.add(tempName);

}

/**

private static Set<GeneralNameInterface> parseNames(Collection<List<?>> names) throws IOException {

Set<GeneralNameInterface> genNames = new HashSet<GeneralNameInterface>();

for (List<?> nameList : names) {

if (nameList.size() != 2) {

throw new IOException("name list size not 2");

}

Object o = nameList.get(0);

if (!(o instanceof Integer)) {

throw new IOException("expected an Integer");

}

int nameType = ((Integer)o).intValue();

o = nameList.get(1);

genNames.add(makeGeneralNameInterface(nameType, o));

}

return genNames;

}

/**

static boolean equalNames(Collection<?> object1, Collection<?> object2) {

if ((object1 == null) || (object2 == null)) {

return object1 == object2;

}

return object1.equals(object2);

}

/**

static GeneralNameInterface makeGeneralNameInterface(int type, Object name)

throws IOException {

GeneralNameInterface result;

if (debug != null) {

debug.println("X509CertSelector.makeGeneralNameInterface("

+ type + ")...");

}

if (name instanceof String) {

if (debug != null) {

debug.println("X509CertSelector.makeGeneralNameInterface() "

+ "name is String: " + name);

}

switch (type) {

case NAME_RFC822:

result = new RFC822Name((String)name);

break;

case NAME_DNS:

result = new DNSName((String)name);

break;

case NAME_DIRECTORY:

result = new X500Name((String)name);

break;

case NAME_URI:

result = new URIName((String)name);

break;

case NAME_IP:

result = new IPAddressName((String)name);

break;

case NAME_OID:

result = new OIDName((String)name);

break;

default:

throw new IOException("unable to parse String names of type "

+ type);

}

if (debug != null) {

debug.println("X509CertSelector.makeGeneralNameInterface() "

+ "result: " + result.toString());

}

} else if (name instanceof byte[]) {

DerValue val = new DerValue((byte[]) name);

if (debug != null) {

debug.println

("X509CertSelector.makeGeneralNameInterface() is byte[]");

}

switch (type) {

case NAME_ANY:

result = new OtherName(val);

break;

case NAME_RFC822:

result = new RFC822Name(val);

break;

case NAME_DNS:

result = new DNSName(val);

break;

case NAME_X400:

result = new X400Address(val);

break;

case NAME_DIRECTORY:

result = new X500Name(val);

break;

case NAME_EDI:

result = new EDIPartyName(val);

break;

case NAME_URI:

result = new URIName(val);

break;

case NAME_IP:

result = new IPAddressName(val);

break;

case NAME_OID:

result = new OIDName(val);

break;

default:

throw new IOException("unable to parse byte array names of "

+ "type " + type);

}

if (debug != null) {

debug.println("X509CertSelector.makeGeneralNameInterface() result: "

+ result.toString());

}

} else {

if (debug != null) {

debug.println("X509CertSelector.makeGeneralName() input name "

+ "not String or byte array");

}

throw new IOException("name not String or byte array");

}

return result;

}

/**