Admin: 1 версия

2010-06-01T05:01:23Z

1 версия

в 17:44, 31 мая 2010

2010-05-31T17:44:27Z

Новая страница

== Define selector ==



<source lang="java">
import java.io.FileInputStream;
import java.math.BigInteger;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
import java.security.cert.X509CertSelector;
import java.util.Calendar;
import java.util.Date;
public class MainClass {
public static void main(String args[]) throws Exception {
X509CertSelector selec = new X509CertSelector();
CertificateFactory cf = CertificateFactory.getInstance("X.509");
FileInputStream in = new FileInputStream(args[0]);
Certificate c = cf.generateCertificate(in);
System.out.println(selec.match(c));
selec.setIssuer("CN=Peter,OU=Network Center," + "O=University,L=ZB,ST=Vancouver,C=CN");
System.out.println(selec.match(c));
Calendar cld = Calendar.getInstance();
int year = Integer.parseInt(args[1]);
int month = Integer.parseInt(args[2]) - 1;
int day = Integer.parseInt(args[3]);
cld.set(year, month, day);
Date d = cld.getTime();
selec.setCertificateValid(d);
System.out.println(selec.match(c));
BigInteger sn = new BigInteger("1039056963");
selec.setSerialNumber(sn);
System.out.println(selec.match(c));
}
}</source>



== List properties for X.509 CRL ==



<source lang="java">
import java.io.FileInputStream;
import java.security.cert.CertificateFactory;
import java.security.cert.X509CRL;
public class MainClass {
public static void main(String[] args) throws Exception {
CertificateFactory cf = CertificateFactory.getInstance("X.509");
FileInputStream in = new FileInputStream(args[0]);
X509CRL crl = (X509CRL) cf.generateCRL(in);
System.out.println("type = " + crl.getType());
System.out.println("version = " + crl.getVersion());
System.out.println("issuer = " + crl.getIssuerDN().getName());
System.out.println("signing algorithm = " + crl.getSigAlgName());
System.out.println("this update = " + crl.getThisUpdate());
System.out.println("next update = " + crl.getNextUpdate());
in.close();
}
}</source>



== Show X.509 CRL entries ==



<source lang="java">
import java.io.FileInputStream;
import java.security.cert.CertificateFactory;
import java.security.cert.X509CRL;
import java.security.cert.X509CRLEntry;
import java.util.Iterator;
import java.util.Set;
public class MainClass {
public static void main(String[] args) throws Exception {
CertificateFactory cf = CertificateFactory.getInstance("X.509");
FileInputStream in = new FileInputStream(args[0]);
X509CRL crl = (X509CRL) cf.generateCRL(in);
Set s = crl.getRevokedCertificates();
if (s != null && s.isEmpty() == false) {
Iterator t = s.iterator();
while (t.hasNext()) {
X509CRLEntry entry = (X509CRLEntry) t.next();
System.out.println("serial number = " + entry.getSerialNumber().toString(16));
System.out.println("revocation date = " + entry.getRevocationDate());
System.out.println("extensions = " + entry.hasExtensions());
}
}
in.close();
}
}</source>



== X509 Certificate Selector ==



<source lang="java">
import java.io.FileInputStream;
import java.security.cert.CertStore;
import java.security.cert.CertStoreParameters;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
import java.security.cert.CollectionCertStoreParameters;
import java.security.cert.X509CertSelector;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.List;
import java.util.Set;
public class MainClass {
public static void main(String args[]) throws Exception {
CertificateFactory cf = CertificateFactory.getInstance("X.509");
List mylist = new ArrayList();
FileInputStream in = new FileInputStream(args[0]);
Certificate c = cf.generateCertificate(in);
mylist.add(c);
CertStoreParameters cparam = new CollectionCertStoreParameters(mylist);
CertStore cs = CertStore.getInstance("Collection", cparam);
X509CertSelector selec = new X509CertSelector();
selec.setIssuer("CN=YourName,OU=Network Center," + "O=University,L=ZB,ST=Toronto,C=CN");
Set clct = (Set) cs.getCertificates(selec);
Object o[] = clct.toArray();
for (int i = 0; i < o.length; i++) {
X509Certificate ct = (X509Certificate) o[i];
System.out.println("Certificate " + i + " ");
System.out.println(ct.getSubjectDN());
}
}
}</source>

← Предыдущая	Версия 05:01, 1 июня 2010
(нет различий)

Java Tutorial/Security/X.509 Certificate revocation list - История изменений

Admin: 1 версия

в 17:44, 31 мая 2010