数字证书学习

bouncycastle公司已封装了ASN1 证书对象,虽现在还未找到通过asn1文件生成bouncycastle的ASN1对象,但也可人工编写,使其具有与证书相类似的ASN1功能。
实例:
1)asn1文件
import java.util.Enumeration;
AsnLdap DEFINITIONS IMPLICIT TAGS ::= BEGIN
LdapConfigBo ::=SEQUENCE{
ipAddr OCTET STRING,
port   INTEGER,
baseDn OCTET STRING,
userDn OCTET STRING,
userPassword OCTET STRING,
response [0] BOOLEAN OPTIONAL,
info     [1] OCTET STRING OPTIONAL
}
END
2)自己编写的java对象
import org.bouncycastle.asn1.ASN1Encodable;
import org.bouncycastle.asn1.ASN1EncodableVector;
import org.bouncycastle.asn1.ASN1OctetString;
import org.bouncycastle.asn1.ASN1Sequence;
import org.bouncycastle.asn1.ASN1TaggedObject;
import org.bouncycastle.asn1.DERBoolean;
import org.bouncycastle.asn1.DERInteger;
import org.bouncycastle.asn1.DERObject;
import org.bouncycastle.asn1.DERSequence;
import org.bouncycastle.asn1.DERTaggedObject;





public class LdapConfigBo extends ASN1Encodable
{

public ASN1OctetString ipAddr;
public DERInteger port ;
public ASN1OctetString baseDn;
public ASN1OctetString userDn ;
public ASN1OctetString userPassword ;
public DERBoolean response;//响应结果
public ASN1OctetString info ;//响应消息
public  LdapConfigBo(){};
public  LdapConfigBo(ASN1Sequence seq)
    {
        Enumeration en = seq.getObjects();

        ipAddr = ASN1OctetString.getInstance(en.nextElement());
        port = DERInteger.getInstance(en.nextElement());
        baseDn = ASN1OctetString.getInstance(en.nextElement());
        userDn = ASN1OctetString.getInstance(en.nextElement());
        userPassword = ASN1OctetString.getInstance(en.nextElement());
        while (en.hasMoreElements())
        {
        ASN1TaggedObject tObj = (ASN1TaggedObject)en.nextElement();

            switch (tObj.getTagNo())
            {
            case 0:
            response = DERBoolean.getInstance(tObj, true);
                break;
            case 1:
            info = ASN1OctetString.getInstance(tObj, true);
                break;
             default:
                throw new IllegalArgumentException("unknown tag number: " + tObj.getTagNo());
            }
         }
    }
public static LdapConfigBo getInstance(Object o)
    {
        if (o instanceof LdapConfigBo)
        {
            return (LdapConfigBo)o;
        }

        if (o instanceof ASN1Sequence)
        {
            return new LdapConfigBo((ASN1Sequence)o);
        }

        throw new IllegalArgumentException("Invalid object: " + o.getClass().getName());
    }
@Override
public DERObject toASN1Object() {
ASN1EncodableVector v = new ASN1EncodableVector();
        v.add(ipAddr);
        v.add(port);
        v.add(baseDn);
        v.add(userDn);
        v.add(userPassword);
        addOptional(v, 0, response);
        addOptional(v, 1, info);
        return new DERSequence(v);
}
    private void addOptional(ASN1EncodableVector v, int tagNo, ASN1Encodable obj)
    {
        if (obj != null)
        {
            v.add(new DERTaggedObject(true, tagNo, obj));
        }
    }

}

你可能感兴趣的:(数字证书)